==================================================================
BUG: KCSAN: data-race in __anon_vma_prepare / handle_mm_fault

write to 0xffff888117167608 of 8 bytes by task 3806 on cpu 1:
 __anon_vma_prepare+0x180/0x310 mm/rmap.c:213
 vmf_anon_prepare mm/memory.c:3289 [inline]
 do_anonymous_page mm/memory.c:4551 [inline]
 do_pte_missing mm/memory.c:3945 [inline]
 handle_pte_fault mm/memory.c:5522 [inline]
 __handle_mm_fault mm/memory.c:5665 [inline]
 handle_mm_fault+0x1b09/0x2940 mm/memory.c:5833
 do_user_addr_fault arch/x86/mm/fault.c:1389 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x296/0x650 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
 rep_movs_alternative+0x33/0x70 arch/x86/lib/copy_user_64.S:57
 copy_user_generic arch/x86/include/asm/uaccess_64.h:110 [inline]
 raw_copy_to_user arch/x86/include/asm/uaccess_64.h:131 [inline]
 _inline_copy_to_user include/linux/uaccess.h:181 [inline]
 _copy_to_user+0x77/0xa0 lib/usercopy.c:26
 copy_to_user include/linux/uaccess.h:209 [inline]
 do_pipe2+0x8c/0x130 fs/pipe.c:1024
 __do_sys_pipe2 fs/pipe.c:1040 [inline]
 __se_sys_pipe2 fs/pipe.c:1038 [inline]
 __x64_sys_pipe2+0x30/0x40 fs/pipe.c:1038
 x64_sys_call+0x65f/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:294
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888117167608 of 8 bytes by task 3807 on cpu 0:
 vmf_anon_prepare mm/memory.c:3281 [inline]
 do_anonymous_page mm/memory.c:4551 [inline]
 do_pte_missing mm/memory.c:3945 [inline]
 handle_pte_fault mm/memory.c:5522 [inline]
 __handle_mm_fault mm/memory.c:5665 [inline]
 handle_mm_fault+0xd36/0x2940 mm/memory.c:5833
 do_user_addr_fault arch/x86/mm/fault.c:1389 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x296/0x650 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
 rep_movs_alternative+0x33/0x70 arch/x86/lib/copy_user_64.S:57
 copy_user_generic arch/x86/include/asm/uaccess_64.h:110 [inline]
 raw_copy_to_user arch/x86/include/asm/uaccess_64.h:131 [inline]
 _inline_copy_to_user include/linux/uaccess.h:181 [inline]
 _copy_to_user+0x77/0xa0 lib/usercopy.c:26
 copy_to_user include/linux/uaccess.h:209 [inline]
 do_pipe2+0x8c/0x130 fs/pipe.c:1024
 __do_sys_pipe2 fs/pipe.c:1040 [inline]
 __se_sys_pipe2 fs/pipe.c:1038 [inline]
 __x64_sys_pipe2+0x30/0x40 fs/pipe.c:1038
 x64_sys_call+0x65f/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:294
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000000 -> 0xffff888115fdbc30

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3807 Comm: syz.4.63 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
==================================================================
netlink: 'syz.4.63': attribute type 11 has an invalid length.