==================================================================
BUG: KCSAN: data-race in shmem_file_read_iter / shmem_write_end

write to 0xffff888172bfdb40 of 8 bytes by task 20964 on cpu 1:
 i_size_write include/linux/fs.h:932 [inline]
 shmem_write_end+0x9a/0x470 mm/shmem.c:2741
 generic_perform_write+0x267/0x410 mm/filemap.c:3939
 shmem_file_write_iter+0xc8/0xe0 mm/shmem.c:2893
 call_write_iter include/linux/fs.h:2085 [inline]
 iter_file_splice_write+0x4e0/0x840 fs/splice.c:743
 do_splice_from fs/splice.c:941 [inline]
 direct_splice_actor+0x167/0x2c0 fs/splice.c:1164
 splice_direct_to_actor+0x2fb/0x650 fs/splice.c:1108
 do_splice_direct_actor fs/splice.c:1207 [inline]
 do_splice_direct+0xd7/0x150 fs/splice.c:1233
 do_sendfile+0x377/0x880 fs/read_write.c:1295
 __do_sys_sendfile64 fs/read_write.c:1356 [inline]
 __se_sys_sendfile64 fs/read_write.c:1348 [inline]
 __x64_sys_sendfile64+0xbd/0x150 fs/read_write.c:1348
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x59/0x120 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

read to 0xffff888172bfdb40 of 8 bytes by task 20954 on cpu 0:
 i_size_read include/linux/fs.h:910 [inline]
 shmem_file_read_iter+0x96/0x550 mm/shmem.c:2777
 call_read_iter include/linux/fs.h:2079 [inline]
 copy_splice_read+0x26b/0x4b0 fs/splice.c:365
 do_splice_read fs/splice.c:984 [inline]
 splice_direct_to_actor+0x288/0x650 fs/splice.c:1089
 do_splice_direct_actor fs/splice.c:1207 [inline]
 do_splice_direct+0xd7/0x150 fs/splice.c:1233
 do_sendfile+0x377/0x880 fs/read_write.c:1295
 __do_sys_sendfile64 fs/read_write.c:1356 [inline]
 __se_sys_sendfile64 fs/read_write.c:1348 [inline]
 __x64_sys_sendfile64+0xbd/0x150 fs/read_write.c:1348
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x59/0x120 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

value changed: 0x0000000000217761 -> 0x0000000000217887

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 20954 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-09928-g052d534373b7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
==================================================================
==================================================================
BUG: KCSAN: data-race in shmem_file_read_iter / shmem_write_end

write to 0xffff888172bfdb40 of 8 bytes by task 20964 on cpu 1:
 i_size_write include/linux/fs.h:932 [inline]
 shmem_write_end+0x9a/0x470 mm/shmem.c:2741
 generic_perform_write+0x267/0x410 mm/filemap.c:3939
 shmem_file_write_iter+0xc8/0xe0 mm/shmem.c:2893
 call_write_iter include/linux/fs.h:2085 [inline]
 iter_file_splice_write+0x4e0/0x840 fs/splice.c:743
 do_splice_from fs/splice.c:941 [inline]
 direct_splice_actor+0x167/0x2c0 fs/splice.c:1164
 splice_direct_to_actor+0x2fb/0x650 fs/splice.c:1108
 do_splice_direct_actor fs/splice.c:1207 [inline]
 do_splice_direct+0xd7/0x150 fs/splice.c:1233
 do_sendfile+0x377/0x880 fs/read_write.c:1295
 __do_sys_sendfile64 fs/read_write.c:1356 [inline]
 __se_sys_sendfile64 fs/read_write.c:1348 [inline]
 __x64_sys_sendfile64+0xbd/0x150 fs/read_write.c:1348
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x59/0x120 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

read to 0xffff888172bfdb40 of 8 bytes by task 20954 on cpu 0:
 i_size_read include/linux/fs.h:910 [inline]
 shmem_file_read_iter+0x3b0/0x550 mm/shmem.c:2777
 call_read_iter include/linux/fs.h:2079 [inline]
 copy_splice_read+0x26b/0x4b0 fs/splice.c:365
 do_splice_read fs/splice.c:984 [inline]
 splice_direct_to_actor+0x288/0x650 fs/splice.c:1089
 do_splice_direct_actor fs/splice.c:1207 [inline]
 do_splice_direct+0xd7/0x150 fs/splice.c:1233
 do_sendfile+0x377/0x880 fs/read_write.c:1295
 __do_sys_sendfile64 fs/read_write.c:1356 [inline]
 __se_sys_sendfile64 fs/read_write.c:1348 [inline]
 __x64_sys_sendfile64+0xbd/0x150 fs/read_write.c:1348
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x59/0x120 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

value changed: 0x000000000030d307 -> 0x000000000030d4c0

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 20954 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-09928-g052d534373b7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
==================================================================