EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
==================================================================
BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru

read-write to 0xffff888237c277e0 of 8 bytes by task 4494 on cpu 0:
 bh_lru_install fs/buffer.c:1230 [inline]
 find_get_block_common+0x45c/0x870 fs/buffer.c:1295
 bdev_getblk+0x4c/0x3c0 include/linux/gfp.h:-1
 getblk_unmovable include/linux/buffer_head.h:367 [inline]
 ext4_getblk+0x1d8/0x540 fs/ext4/inode.c:1006
 ext4_bread+0x28/0x110 fs/ext4/inode.c:1054
 ext4_quota_read+0xe8/0x260 fs/ext4/super.c:7387
 read_blk fs/quota/quota_tree.c:61 [inline]
 find_tree_dqentry+0x11c/0x8f0 fs/quota/quota_tree.c:671
 find_dqentry fs/quota/quota_tree.c:716 [inline]
 qtree_read_dquot+0x338/0x480 fs/quota/quota_tree.c:736
 v2_read_dquot+0x92/0xd0 fs/quota/quota_v2.c:344
 dquot_acquire+0xc7/0x2b0 fs/quota/dquot.c:489
 ext4_acquire_dquot+0x15f/0x200 fs/ext4/super.c:7065
 dqget+0x51f/0x8b0 fs/quota/dquot.c:1002
 __dquot_initialize+0x28c/0x7c0 fs/quota/dquot.c:1462
 dquot_initialize fs/quota/dquot.c:1524 [inline]
 dquot_file_open+0x6f/0x80 fs/quota/dquot.c:2175
 ext4_file_open+0x2c0/0x5f0 fs/ext4/file.c:999
 do_dentry_open+0x49f/0xa60 fs/open.c:996
 vfs_open+0x37/0x1e0 fs/open.c:1101
 do_open fs/namei.c:4837 [inline]
 path_openat+0xc01/0x10d0 fs/namei.c:5000
 do_file_open+0x16c/0x290 fs/namei.c:5029
 do_sys_openat2+0xa0/0x130 fs/open.c:1417
 do_sys_open fs/open.c:1423 [inline]
 __do_sys_openat fs/open.c:1439 [inline]
 __se_sys_openat fs/open.c:1434 [inline]
 __x64_sys_openat+0xf2/0x120 fs/open.c:1434
 x64_sys_call+0x1f72/0x2550 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888237c277e0 of 8 bytes by task 3302 on cpu 1:
 has_bh_in_lru+0x35/0x1f0 fs/buffer.c:1436
 smp_call_function_many_cond+0x2d1/0xbc0 kernel/smp.c:936
 on_each_cpu_cond_mask+0x35/0x50 kernel/smp.c:1169
 on_each_cpu_cond include/linux/smp.h:105 [inline]
 invalidate_bh_lrus+0x2a/0x30 fs/buffer.c:1445
 kill_bdev block/bdev.c:89 [inline]
 blkdev_flush_mapping+0x94/0x1a0 block/bdev.c:757
 blkdev_put_whole block/bdev.c:764 [inline]
 bdev_release+0x2c1/0x3d0 block/bdev.c:1189
 blkdev_release+0x15/0x20 block/fops.c:682
 __fput+0x29e/0x630 fs/file_table.c:512
 ____fput+0x1c/0x30 fs/file_table.c:540
 task_work_run+0x130/0x1a0 kernel/task_work.c:233
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 __exit_to_user_mode_loop kernel/entry/common.c:70 [inline]
 exit_to_user_mode_loop+0x1e4/0x8c0 kernel/entry/common.c:101
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:343 [inline]
 do_syscall_64+0x212/0x360 arch/x86/entry/syscall_64.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000000 -> 0xffff88811b066d80

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================