loop8: detected capacity change from 0 to 512 ================================================================== BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru read-write to 0xffff888237c26f50 of 8 bytes by task 17490 on cpu 0: bh_lru_install fs/buffer.c:1345 [inline] find_get_block_common+0x4f0/0x960 fs/buffer.c:1410 __find_get_block_nonatomic fs/buffer.c:1429 [inline] bdev_getblk+0x83/0x3b0 fs/buffer.c:1453 sb_getblk_gfp include/linux/buffer_head.h:392 [inline] __ext4_sb_bread_gfp+0x44/0x170 fs/ext4/super.c:236 ext4_sb_bread+0x5e/0x70 fs/ext4/super.c:256 ext4_xattr_block_get fs/ext4/xattr.c:588 [inline] ext4_xattr_get+0x15f/0x470 fs/ext4/xattr.c:708 ext4_xattr_security_get+0x32/0x40 fs/ext4/xattr_security.c:20 __vfs_getxattr+0x2aa/0x2c0 fs/xattr.c:423 cap_inode_need_killpriv+0x2e/0x50 security/commoncap.c:331 security_inode_need_killpriv+0x36/0x70 security/security.c:2668 dentry_needs_remove_privs fs/inode.c:2171 [inline] file_remove_privs_flags+0x123/0x320 fs/inode.c:2202 file_modified_flags+0x32/0x350 fs/inode.c:2362 file_modified+0x17/0x20 fs/inode.c:2391 ext4_dio_write_checks fs/ext4/file.c:491 [inline] ext4_dio_write_iter fs/ext4/file.c:557 [inline] ext4_file_write_iter+0x9b1/0xf00 fs/ext4/file.c:721 iter_file_splice_write+0x5ef/0x970 fs/splice.c:738 do_splice_from fs/splice.c:935 [inline] direct_splice_actor+0x156/0x2a0 fs/splice.c:1158 splice_direct_to_actor+0x312/0x680 fs/splice.c:1102 do_splice_direct_actor fs/splice.c:1201 [inline] do_splice_direct+0xda/0x150 fs/splice.c:1227 do_sendfile+0x380/0x650 fs/read_write.c:1370 __do_sys_sendfile64 fs/read_write.c:1431 [inline] __se_sys_sendfile64 fs/read_write.c:1417 [inline] __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1417 x64_sys_call+0x2bb0/0x2ff0 arch/x86/include/generated/asm/syscalls_64.h:41 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffff888237c26f50 of 8 bytes by task 17494 on cpu 1: has_bh_in_lru+0x35/0x1f0 fs/buffer.c:1551 smp_call_function_many_cond+0x2a6/0xc60 kernel/smp.c:821 on_each_cpu_cond_mask+0x3c/0x80 kernel/smp.c:1044 on_each_cpu_cond include/linux/smp.h:105 [inline] invalidate_bh_lrus+0x2a/0x30 fs/buffer.c:1560 kill_bdev block/bdev.c:90 [inline] blkdev_flush_mapping+0x9a/0x1a0 block/bdev.c:712 blkdev_put_whole block/bdev.c:719 [inline] bdev_release+0x2bf/0x3d0 block/bdev.c:1144 blkdev_release+0x15/0x20 block/fops.c:699 __fput+0x29b/0x650 fs/file_table.c:468 fput_close_sync+0x6e/0x120 fs/file_table.c:573 __do_sys_close fs/open.c:1587 [inline] __se_sys_close fs/open.c:1572 [inline] __x64_sys_close+0x56/0xf0 fs/open.c:1572 x64_sys_call+0x2738/0x2ff0 arch/x86/include/generated/asm/syscalls_64.h:4 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0xffff888106de9138 -> 0xffff88811adccc30 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 17494 Comm: syz.8.3937 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 ================================================================== EXT4-fs: Ignoring removed mblk_io_submit option EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff)