EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.3128: iget: bad i_size value: 38620345925642
==================================================================
BUG: KCSAN: data-race in data_push_tail / symbol_string

write to 0xffffffff8961e2b0 of 1 bytes by task 14847 on cpu 1:
 string_nocheck lib/vsprintf.c:654 [inline]
 symbol_string+0x1c9/0x260 lib/vsprintf.c:1008
 pointer+0x681/0xc90 lib/vsprintf.c:2542
 vsnprintf+0x49e/0x8c0 lib/vsprintf.c:2952
 vscnprintf+0x41/0x90 lib/vsprintf.c:3017
 printk_sprint+0x30/0x2b0 kernel/printk/printk.c:2222
 vprintk_store+0x57f/0x910 kernel/printk/printk.c:2364
 vprintk_emit+0x1a4/0x580 kernel/printk/printk.c:2455
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 printk_stack_address arch/x86/kernel/dumpstack.c:70 [inline]
 __show_trace_log_lvl+0x460/0x560 arch/x86/kernel/dumpstack.c:282
 __dump_stack+0x1d/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x95/0xd0 lib/dump_stack.c:120
 dump_stack+0x15/0x1b lib/dump_stack.c:129
 fail_dump lib/fault-inject.c:74 [inline]
 should_fail_ex+0x259/0x270 lib/fault-inject.c:175
 should_failslab+0x8c/0xb0 mm/failslab.c:46
 slab_pre_alloc_hook mm/slub.c:4675 [inline]
 slab_alloc_node mm/slub.c:5011 [inline]
 __do_kmalloc_node mm/slub.c:5530 [inline]
 __kmalloc_noprof+0xb6/0x4b0 mm/slub.c:5556
 _kmalloc_noprof include/linux/slab.h:995 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 copy_splice_read+0xc2/0x6b0 fs/splice.c:336
 sock_splice_read+0xa5/0xb0 net/socket.c:1214
 do_splice_read fs/splice.c:980 [inline]
 splice_file_to_pipe+0x275/0x3c0 fs/splice.c:1318
 do_splice+0xa1a/0xfd0 fs/splice.c:1402
 __do_splice fs/splice.c:1459 [inline]
 __do_sys_splice fs/splice.c:1662 [inline]
 __se_sys_splice+0x26c/0x3a0 fs/splice.c:1644
 __x64_sys_splice+0x78/0x90 fs/splice.c:1644
 x64_sys_call+0x1797/0x2550 arch/x86/include/generated/asm/syscalls_64.h:276
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff8961e2b0 of 8 bytes by task 14840 on cpu 0:
 data_make_reusable kernel/printk/printk_ringbuffer.c:607 [inline]
 data_push_tail+0x104/0x440 kernel/printk/printk_ringbuffer.c:692
 data_alloc+0x111/0x380 kernel/printk/printk_ringbuffer.c:1088
 prb_reserve+0x8e3/0xaf0 kernel/printk/printk_ringbuffer.c:1725
 vprintk_store+0x54e/0x910 kernel/printk/printk.c:2354
 vprintk_emit+0x1a4/0x580 kernel/printk/printk.c:2455
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 __ext4_error_inode+0x298/0x3a0 fs/ext4/super.c:872
 __ext4_iget+0x11a3/0x2520 fs/ext4/inode.c:-1
 ext4_orphan_get+0x157/0x410 fs/ext4/ialloc.c:1404
 ext4_orphan_cleanup+0x6a6/0xab0 fs/ext4/orphan.c:466
 __ext4_fill_super fs/ext4/super.c:5769 [inline]
 ext4_fill_super+0x340a/0x37d0 fs/ext4/super.c:5899
 get_tree_bdev_flags+0x297/0x300 fs/super.c:1821
 get_tree_bdev+0x1f/0x30 fs/super.c:1844
 ext4_get_tree+0x1c/0x30 fs/ext4/super.c:5931
 vfs_get_tree+0x57/0x1d0 fs/super.c:1881
 fc_mount fs/namespace.c:1282 [inline]
 do_new_mount_fc fs/namespace.c:3910 [inline]
 do_new_mount+0x288/0x730 fs/namespace.c:3986
 path_mount+0x4ad/0xba0 fs/namespace.c:4337
 do_mount fs/namespace.c:4350 [inline]
 __do_sys_mount fs/namespace.c:4565 [inline]
 __se_sys_mount+0x28c/0x2e0 fs/namespace.c:4542
 __x64_sys_mount+0x67/0x80 fs/namespace.c:4542
 x64_sys_call+0xc3b/0x2550 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000001016 -> 0x70735f6b636f735f

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 14840 Comm: syz.4.3128 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
==================================================================
loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.3128: couldn't read orphan inode 15 (err -117)
EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.