==================================================================
BUG: KCSAN: data-race in rq_depth_calc_max_depth / wbt_inflight_cb

write to 0xffff8881297fcce0 of 4 bytes by interrupt on cpu 0:
 rq_depth_calc_max_depth+0xa5/0x160 block/blk-rq-qos.c:157
 rq_depth_scale_up+0x71/0xa0 block/blk-rq-qos.c:174
 scale_up+0x40/0x250 block/blk-wbt.c:311
 wb_timer_fn+0x2cd/0xad0 block/blk-wbt.c:393
 blk_stat_timer_fn+0x3b0/0x3d0 block/blk-stat.c:99
 call_timer_fn+0x5f/0x2f0 kernel/time/timer.c:1404
 expire_timers kernel/time/timer.c:1449 [inline]
 __run_timers kernel/time/timer.c:1773 [inline]
 __run_timers kernel/time/timer.c:1740 [inline]
 run_timer_softirq+0xc0c/0xcd0 kernel/time/timer.c:1786
 __do_softirq+0x115/0x33f kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0xbb/0xe0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0xe6/0x280 arch/x86/kernel/apic/apic.c:1137
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 arch_local_irq_enable arch/x86/include/asm/paravirt.h:762 [inline]
 preempt_schedule_irq+0x4d/0x90 kernel/sched/core.c:4337
 restore_regs_and_return_to_kernel+0x0/0x25
 arch_local_irq_restore arch/x86/include/asm/paravirt.h:752 [inline]
 kcsan_setup_watchpoint+0x1d4/0x460 kernel/kcsan/core.c:429
 check_access kernel/kcsan/core.c:459 [inline]
 __tsan_read1+0xc2/0x100 kernel/kcsan/core.c:586
 tomoyo_check_acl+0xcc/0x270 security/tomoyo/domain.c:170
 tomoyo_path_permission security/tomoyo/file.c:586 [inline]
 tomoyo_path_permission+0xe3/0x160 security/tomoyo/file.c:573
 tomoyo_path_perm+0x352/0x390 security/tomoyo/file.c:838
 tomoyo_path_rmdir+0x63/0x90 security/tomoyo/tomoyo.c:189
 security_path_rmdir+0xa3/0xd0 security/security.c:1037
 do_rmdir+0x227/0x300 fs/namei.c:3941
 __do_sys_rmdir fs/namei.c:3962 [inline]
 __se_sys_rmdir fs/namei.c:3960 [inline]
 __x64_sys_rmdir+0x2f/0x40 fs/namei.c:3960
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff8881297fcce0 of 4 bytes by task 12929 on cpu 1:
 get_limit block/blk-wbt.c:481 [inline]
 wbt_inflight_cb+0xc0/0x230 block/blk-wbt.c:503
 rq_qos_wait+0x283/0x320 block/blk-rq-qos.c:266
 __wbt_wait block/blk-wbt.c:526 [inline]
 wbt_wait+0x161/0x250 block/blk-wbt.c:591
 __rq_qos_throttle+0x47/0x70 block/blk-rq-qos.c:72
 rq_qos_throttle block/blk-rq-qos.h:182 [inline]
 blk_mq_make_request+0x29c/0xf60 block/blk-mq.c:1932
 generic_make_request block/blk-core.c:1066 [inline]
 generic_make_request+0x196/0x700 block/blk-core.c:1008
 submit_bio+0x96/0x3c0 block/blk-core.c:1192
 submit_bh_wbc+0x40f/0x460 fs/buffer.c:3135
 submit_bh fs/buffer.c:3141 [inline]
 __sync_dirty_buffer+0xd3/0x210 fs/buffer.c:3227
 sync_dirty_buffer+0x24/0x40 fs/buffer.c:3240
 ext4_write_inode+0x312/0x330 fs/ext4/inode.c:5091
 write_inode fs/fs-writeback.c:1312 [inline]
 __writeback_single_inode+0x6f7/0x8e0 fs/fs-writeback.c:1511
 writeback_single_inode+0x232/0x310 fs/fs-writeback.c:1565
 sync_inode fs/fs-writeback.c:2602 [inline]
 sync_inode_metadata+0x74/0xa0 fs/fs-writeback.c:2622
 ext4_fsync_nojournal fs/ext4/fsync.c:94 [inline]
 ext4_sync_file+0x4b5/0xaf0 fs/ext4/fsync.c:172
 vfs_fsync_range+0x82/0x150 fs/sync.c:197
 generic_write_sync include/linux/fs.h:2856 [inline]
 ext4_buffered_write_iter+0x222/0x290 fs/ext4/file.c:259
 ext4_file_write_iter+0xf4/0xd40 fs/ext4/file.c:547
 call_write_iter include/linux/fs.h:1902 [inline]
 do_iter_readv_writev+0x487/0x5b0 fs/read_write.c:693
 do_iter_write fs/read_write.c:970 [inline]
 do_iter_write+0x13b/0x3c0 fs/read_write.c:951
 vfs_iter_write+0x5c/0x80 fs/read_write.c:983
 iter_file_splice_write+0x530/0x840 fs/splice.c:760
 do_splice_from fs/splice.c:863 [inline]
 direct_splice_actor+0xa0/0xc0 fs/splice.c:1037
 splice_direct_to_actor+0x22b/0x540 fs/splice.c:992
 do_splice_direct+0x161/0x1e0 fs/splice.c:1080
 do_sendfile+0x384/0x7f0 fs/read_write.c:1464
 __do_sys_sendfile64 fs/read_write.c:1519 [inline]
 __se_sys_sendfile64 fs/read_write.c:1511 [inline]
 __x64_sys_sendfile64+0xbe/0x140 fs/read_write.c:1511
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 12929 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================