loop3: detected capacity change from 0 to 264192 ================================================================== BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr write to 0xffff888105ca9770 of 8 bytes by task 26131 on cpu 0: shmem_add_to_page_cache+0x52d/0x650 mm/shmem.c:718 shmem_getpage_gfp+0xbdc/0x1410 mm/shmem.c:1929 shmem_getpage mm/shmem.c:155 [inline] shmem_file_read_iter+0x1a2/0x5c0 mm/shmem.c:2603 call_read_iter include/linux/fs.h:2108 [inline] do_iter_readv_writev+0x2e8/0x360 fs/read_write.c:738 do_iter_read+0x109/0x4b0 fs/read_write.c:801 vfs_iter_read+0x4c/0x70 fs/read_write.c:843 lo_read_simple drivers/block/loop.c:361 [inline] do_req_filebacked drivers/block/loop.c:637 [inline] loop_handle_cmd drivers/block/loop.c:2046 [inline] loop_queue_work+0xdeb/0x1310 drivers/block/loop.c:2064 kthread_worker_fn+0x280/0x4d0 kernel/kthread.c:756 loop_kthread_worker_fn+0x3e/0x50 drivers/block/loop.c:933 kthread+0x1d0/0x1f0 kernel/kthread.c:313 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 read to 0xffff888105ca9770 of 8 bytes by task 26126 on cpu 1: shmem_getattr+0x6e/0x250 mm/shmem.c:1043 vfs_getattr_nosec+0x152/0x2f0 fs/stat.c:105 vfs_getattr+0x4d/0x60 fs/stat.c:142 loop_get_status+0x23e/0x310 drivers/block/loop.c:1458 loop_get_status64 drivers/block/loop.c:1566 [inline] lo_ioctl+0x1af/0x11f0 drivers/block/loop.c:1711 blkdev_ioctl+0x1d0/0x3c0 block/ioctl.c:585 block_ioctl+0x6d/0x80 fs/block_dev.c:1662 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:1069 [inline] __se_sys_ioctl+0xcb/0x140 fs/ioctl.c:1055 __x64_sys_ioctl+0x3f/0x50 fs/ioctl.c:1055 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:47 entry_SYSCALL_64_after_hwframe+0x44/0xae value changed: 0x0000000000000001 -> 0x0000000000000002 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 26126 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ================================================================== loop3: p1 p2 p4 loop3: p2 size 1073872896 extends beyond EOD, truncated loop3: p4 size 3657465856 extends beyond EOD, truncated