==================================================================
BUG: KCSAN: data-race in bio_chain / bio_endio

read to 0xffff8881215dfa14 of 2 bytes by interrupt on cpu 1:
 bio_remaining_done block/bio.c:1757 [inline]
 bio_endio+0x3e/0x4f0 block/bio.c:1787
 req_bio_endio block/blk-core.c:242 [inline]
 blk_update_request+0x427/0x7b0 block/blk-core.c:1462
 scsi_end_request+0x6b/0x3e0 drivers/scsi/scsi_lib.c:579
 scsi_io_completion+0x11d/0xc80 drivers/scsi/scsi_lib.c:963
 scsi_finish_command+0x280/0x380 drivers/scsi/scsi.c:228
 scsi_softirq_done+0x259/0x280 drivers/scsi/scsi_lib.c:1477
 blk_done_softirq+0x1eb/0x250 block/blk-softirq.c:37
 __do_softirq+0x115/0x33f kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0xbb/0xe0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 do_IRQ+0xa6/0x180 arch/x86/kernel/irq.c:263
 ret_from_intr+0x0/0x19
 arch_local_irq_restore arch/x86/include/asm/paravirt.h:756 [inline]
 kcsan_setup_watchpoint+0x1d4/0x460 kernel/kcsan/core.c:436
 check_access kernel/kcsan/core.c:468 [inline]
 __tsan_read8+0xc6/0x100 kernel/kcsan/core.c:598
 __anon_vma_interval_tree_augment_compute_max mm/interval_tree.c:71 [inline]
 __anon_vma_interval_tree_augment_propagate mm/interval_tree.c:71 [inline]
 __rb_erase_augmented include/linux/rbtree_augmented.h:297 [inline]
 rb_erase_augmented include/linux/rbtree_augmented.h:305 [inline]
 rb_erase_augmented_cached include/linux/rbtree_augmented.h:316 [inline]
 __anon_vma_interval_tree_remove mm/interval_tree.c:71 [inline]
 anon_vma_interval_tree_remove+0x4ae/0x8d0 mm/interval_tree.c:88
 unlink_anon_vmas+0x152/0x4b0 mm/rmap.c:390
 free_pgtables+0x147/0x200 mm/memory.c:395
 exit_mmap+0x151/0x300 mm/mmap.c:3162
 __mmput kernel/fork.c:1079 [inline]
 mmput+0xea/0x280 kernel/fork.c:1100
 exec_mmap fs/exec.c:1048 [inline]
 flush_old_exec+0x655/0xfd0 fs/exec.c:1281
 load_elf_binary+0x69a/0x2ec0 fs/binfmt_elf.c:847
 search_binary_handler fs/exec.c:1659 [inline]
 search_binary_handler+0x127/0x420 fs/exec.c:1636
 exec_binprm fs/exec.c:1702 [inline]
 __do_execve_file.isra.0+0xb76/0x11d0 fs/exec.c:1822
 do_execveat_common fs/exec.c:1868 [inline]
 do_execve fs/exec.c:1885 [inline]
 __do_sys_execve fs/exec.c:1961 [inline]
 __se_sys_execve fs/exec.c:1956 [inline]
 __x64_sys_execve+0x62/0x80 fs/exec.c:1956
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff8881215dfa14 of 2 bytes by task 15419 on cpu 0:
 bio_set_flag include/linux/bio.h:239 [inline]
 bio_inc_remaining include/linux/bio.h:689 [inline]
 bio_chain+0x86/0xb0 block/bio.c:333
 __blk_queue_split+0x745/0xb40 block/blk-merge.c:330
 blk_mq_make_request+0x104/0xf60 block/blk-mq.c:1959
 generic_make_request block/blk-core.c:1064 [inline]
 generic_make_request+0x196/0x740 block/blk-core.c:1006
 submit_bio+0x96/0x3c0 block/blk-core.c:1190
 ext4_io_submit+0xdf/0x110 fs/ext4/page-io.c:348
 io_submit_add_bh fs/ext4/page-io.c:388 [inline]
 ext4_bio_write_page+0x476/0xb90 fs/ext4/page-io.c:503
 mpage_submit_page+0xe4/0x1a0 fs/ext4/inode.c:2222
 mpage_map_and_submit_buffers+0x331/0x520 fs/ext4/inode.c:2422
 mpage_map_and_submit_extent fs/ext4/inode.c:2556 [inline]
 ext4_writepages+0x1458/0x2300 fs/ext4/inode.c:2869
 do_writepages+0x6b/0x170 mm/page-writeback.c:2344
 __filemap_fdatawrite_range+0x1c5/0x230 mm/filemap.c:421
 file_write_and_wait_range+0xfd/0x160 mm/filemap.c:782
 __generic_file_fsync+0x59/0x190 fs/libfs.c:1000
 ext4_sync_file+0x48e/0xb00 fs/ext4/fsync.c:120
 vfs_fsync_range+0x82/0x150 fs/sync.c:197
 generic_write_sync include/linux/fs.h:2853 [inline]
 ext4_file_write_iter+0x45b/0xa00 fs/ext4/file.c:279
 call_write_iter include/linux/fs.h:1895 [inline]
 new_sync_write+0x388/0x4a0 fs/read_write.c:483
 __vfs_write+0xb1/0xc0 fs/read_write.c:496
 vfs_write fs/read_write.c:558 [inline]
 vfs_write+0x18a/0x390 fs/read_write.c:542
 ksys_write+0xd5/0x1b0 fs/read_write.c:611
 __do_sys_write fs/read_write.c:623 [inline]
 __se_sys_write fs/read_write.c:620 [inline]
 __x64_sys_write+0x4c/0x60 fs/read_write.c:620
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 15419 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================