==================================================================
BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp

read-write to 0xffff8881380e8300 of 8 bytes by task 14721 on cpu 1:
 shmem_add_to_page_cache+0x886/0xaa0 mm/shmem.c:745
 shmem_getpage_gfp+0x802/0x16c0 mm/shmem.c:1908
 shmem_fault+0xd2/0x350 mm/shmem.c:2086
 __do_fault mm/memory.c:3915 [inline]
 do_read_fault mm/memory.c:4240 [inline]
 do_fault+0x500/0xb20 mm/memory.c:4369
 handle_pte_fault mm/memory.c:4627 [inline]
 __handle_mm_fault mm/memory.c:4763 [inline]
 handle_mm_fault+0x825/0xa40 mm/memory.c:4861
 do_user_addr_fault+0x4cd/0x940 arch/x86/mm/fault.c:1397
 handle_page_fault arch/x86/mm/fault.c:1484 [inline]
 exc_page_fault+0x60/0x160 arch/x86/mm/fault.c:1540
 asm_exc_page_fault+0x1e/0x30
 copy_user_enhanced_fast_string+0xa/0x40
 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
 raw_copy_from_user arch/x86/include/asm/uaccess_64.h:52 [inline]
 copyin lib/iov_iter.c:166 [inline]
 _copy_from_iter+0x19d/0x820 lib/iov_iter.c:767
 copy_from_iter include/linux/uio.h:171 [inline]
 copy_from_iter_full include/linux/uio.h:177 [inline]
 skb_do_copy_data_nocache include/net/sock.h:2203 [inline]
 skb_copy_to_page_nocache include/net/sock.h:2229 [inline]
 tcp_sendmsg_locked+0x1155/0x1fd0 net/ipv4/tcp.c:1343
 tcp_sendmsg+0x2c/0x40 net/ipv4/tcp.c:1449
 inet_sendmsg+0x5f/0x80 net/ipv4/af_inet.c:819
 sock_sendmsg_nosec net/socket.c:705 [inline]
 sock_sendmsg net/socket.c:725 [inline]
 __sys_sendto+0x21e/0x2c0 net/socket.c:2040
 __do_sys_sendto net/socket.c:2052 [inline]
 __se_sys_sendto net/socket.c:2048 [inline]
 __x64_sys_sendto+0x74/0x90 net/socket.c:2048
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff8881380e8300 of 8 bytes by task 14733 on cpu 0:
 shmem_recalc_inode mm/shmem.c:362 [inline]
 shmem_getpage_gfp+0x1305/0x16c0 mm/shmem.c:1918
 shmem_fault+0xd2/0x350 mm/shmem.c:2086
 __do_fault mm/memory.c:3915 [inline]
 do_read_fault mm/memory.c:4240 [inline]
 do_fault+0x500/0xb20 mm/memory.c:4369
 handle_pte_fault mm/memory.c:4627 [inline]
 __handle_mm_fault mm/memory.c:4763 [inline]
 handle_mm_fault+0x825/0xa40 mm/memory.c:4861
 faultin_page mm/gup.c:878 [inline]
 __get_user_pages+0x306/0xb80 mm/gup.c:1099
 populate_vma_page_range mm/gup.c:1442 [inline]
 __mm_populate+0x26e/0x3a0 mm/gup.c:1555
 mm_populate include/linux/mm.h:2701 [inline]
 vm_mmap_pgoff+0x160/0x1f0 mm/util.c:524
 ksys_mmap_pgoff+0xc2/0x320 mm/mmap.c:1628
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x000000000000010f -> 0x0000000000000110

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 14733 Comm: syz-executor.1 Not tainted 5.18.0-rc7-syzkaller-00048-gf993aed406ea-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================