EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
==================================================================
BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru

read-write to 0xffff888237d26f50 of 8 bytes by task 26680 on cpu 1:
 bh_lru_install fs/buffer.c:1345 [inline]
 find_get_block_common+0x4f0/0x960 fs/buffer.c:1410
 __find_get_block_nonatomic fs/buffer.c:1429 [inline]
 bdev_getblk+0x83/0x3b0 fs/buffer.c:1453
 getblk_unmovable include/linux/buffer_head.h:369 [inline]
 ext4_getblk+0x1b6/0x510 fs/ext4/inode.c:975
 ext4_bread+0x28/0x110 fs/ext4/inode.c:1023
 ext4_quota_write+0x167/0x360 fs/ext4/super.c:7297
 qtree_write_dquot+0x149/0x300 fs/quota/quota_tree.c:462
 v2_write_dquot+0xda/0x140 fs/quota/quota_v2.c:372
 dquot_commit+0x219/0x260 fs/quota/dquot.c:512
 ext4_write_dquot+0x126/0x1d0 fs/ext4/super.c:6909
 ext4_mark_dquot_dirty+0x95/0xd0 fs/ext4/super.c:6986
 mark_dquot_dirty fs/quota/dquot.c:370 [inline]
 mark_all_dquot_dirty fs/quota/dquot.c:410 [inline]
 __dquot_free_space+0x4fd/0x800 fs/quota/dquot.c:1928
 dquot_free_space_nodirty include/linux/quotaops.h:374 [inline]
 dquot_free_space include/linux/quotaops.h:379 [inline]
 dquot_free_block include/linux/quotaops.h:390 [inline]
 ext4_mb_clear_bb fs/ext4/mballoc.c:6531 [inline]
 ext4_free_blocks+0xe32/0x1400 fs/ext4/mballoc.c:6651
 ext4_xattr_release_block+0x38d/0x550 fs/ext4/xattr.c:1307
 ext4_xattr_delete_inode+0x6f3/0x790 fs/ext4/xattr.c:2984
 ext4_evict_inode+0xa5c/0xd80 fs/ext4/inode.c:271
 evict+0x2e0/0x550 fs/inode.c:810
 iput_final fs/inode.c:1897 [inline]
 iput+0x447/0x5b0 fs/inode.c:1923
 ext4_create+0x27a/0x2f0 fs/ext4/namei.c:2837
 lookup_open fs/namei.c:3708 [inline]
 open_last_lookups fs/namei.c:3807 [inline]
 path_openat+0x1105/0x2170 fs/namei.c:4043
 do_filp_open+0x109/0x230 fs/namei.c:4073
 do_sys_openat2+0xa6/0x110 fs/open.c:1435
 do_sys_open fs/open.c:1450 [inline]
 __do_sys_openat fs/open.c:1466 [inline]
 __se_sys_openat fs/open.c:1461 [inline]
 __x64_sys_openat+0xf2/0x120 fs/open.c:1461
 x64_sys_call+0x2e9c/0x2ff0 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888237d26f50 of 8 bytes by task 21589 on cpu 0:
 has_bh_in_lru+0x35/0x1f0 fs/buffer.c:1551
 smp_call_function_many_cond+0x2a6/0xc60 kernel/smp.c:821
 on_each_cpu_cond_mask+0x3c/0x80 kernel/smp.c:1044
 on_each_cpu_cond include/linux/smp.h:105 [inline]
 invalidate_bh_lrus+0x2a/0x30 fs/buffer.c:1560
 kill_bdev block/bdev.c:90 [inline]
 blkdev_flush_mapping+0x9a/0x1a0 block/bdev.c:712
 blkdev_put_whole block/bdev.c:719 [inline]
 bdev_release+0x2bf/0x3d0 block/bdev.c:1144
 blkdev_release+0x15/0x20 block/fops.c:699
 __fput+0x298/0x650 fs/file_table.c:468
 ____fput+0x1c/0x30 fs/file_table.c:496
 task_work_run+0x131/0x1a0 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop+0xe4/0x100 kernel/entry/common.c:43
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:224 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x1d6/0x200 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000000 -> 0xffff88813948ed68

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 21589 Comm: syz-executor Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
==================================================================