loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.9140: error while reading EA inode 18 err=-117 ================================================================== BUG: KCSAN: data-race in data_push_tail / vsnprintf write to 0xffffffff8938f1e7 of 40 bytes by task 6198 on cpu 0: vsnprintf+0x2ce/0x860 lib/vsprintf.c:2899 vscnprintf+0x41/0x90 lib/vsprintf.c:3013 printk_sprint+0x30/0x2b0 kernel/printk/printk.c:2222 vprintk_store+0x57b/0x910 kernel/printk/printk.c:2364 vprintk_emit+0x1a4/0x600 kernel/printk/printk.c:2455 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2504 fserror_report+0x427/0x500 fs/fserror.c:182 fserror_report_metadata include/linux/fserror.h:67 [inline] __ext4_error+0x152/0x2e0 fs/ext4/super.c:834 ext4_read_block_bitmap_nowait+0x1d5/0x680 fs/ext4/balloc.c:482 ext4_mb_init_cache+0x2b8/0xbd0 fs/ext4/mballoc.c:1430 ext4_mb_init_group+0x3d6/0x580 fs/ext4/mballoc.c:1638 ext4_mb_prefetch_fini+0xf3/0x160 fs/ext4/mballoc.c:2950 ext4_mb_regular_allocator+0x1628/0x16a0 fs/ext4/mballoc.c:3115 ext4_mb_new_blocks+0x7db/0x1e90 fs/ext4/mballoc.c:6310 ext4_ext_map_blocks+0xdd3/0x2ea0 fs/ext4/extents.c:4461 ext4_map_create_blocks+0xce/0x3a0 fs/ext4/inode.c:631 ext4_map_blocks+0x594/0x970 fs/ext4/inode.c:824 ext4_getblk+0x128/0x530 fs/ext4/inode.c:992 ext4_bread+0x28/0x110 fs/ext4/inode.c:1055 ext4_quota_write+0x166/0x360 fs/ext4/super.c:7398 write_blk fs/quota/quota_tree.c:70 [inline] get_free_dqblk+0x20b/0x340 fs/quota/quota_tree.c:136 do_insert_tree+0x198/0xad0 fs/quota/quota_tree.c:347 do_insert_tree+0x767/0xad0 fs/quota/quota_tree.c:402 do_insert_tree+0x749/0xad0 fs/quota/quota_tree.c:402 do_insert_tree+0x749/0xad0 fs/quota/quota_tree.c:402 dq_insert_tree fs/quota/quota_tree.c:432 [inline] qtree_write_dquot+0x2cb/0x300 fs/quota/quota_tree.c:451 v2_write_dquot+0xd9/0x130 fs/quota/quota_v2.c:372 dquot_acquire+0x1bc/0x2b0 fs/quota/dquot.c:498 ext4_acquire_dquot+0x15f/0x200 fs/ext4/super.c:7030 dqget+0x521/0x8b0 fs/quota/dquot.c:1002 __dquot_initialize+0x20c/0x7c0 fs/quota/dquot.c:1530 dquot_initialize+0x1a/0x30 fs/quota/dquot.c:1592 ext4_evict_inode+0x1cc/0xe30 fs/ext4/inode.c:206 evict+0x2af/0x510 fs/inode.c:841 iput_final fs/inode.c:1960 [inline] iput+0x41a/0x580 fs/inode.c:2009 ext4_process_orphan+0x1a9/0x1c0 fs/ext4/orphan.c:358 ext4_orphan_cleanup+0x69c/0x9f0 fs/ext4/orphan.c:472 __ext4_fill_super fs/ext4/super.c:5701 [inline] ext4_fill_super+0x3408/0x37c0 fs/ext4/super.c:5824 get_tree_bdev_flags+0x291/0x300 fs/super.c:1694 get_tree_bdev+0x1f/0x30 fs/super.c:1717 ext4_get_tree+0x1c/0x30 fs/ext4/super.c:5856 vfs_get_tree+0x57/0x1d0 fs/super.c:1754 fc_mount fs/namespace.c:1193 [inline] do_new_mount_fc fs/namespace.c:3758 [inline] do_new_mount+0x288/0x8d0 fs/namespace.c:3834 path_mount+0x4d0/0xbc0 fs/namespace.c:4154 do_mount fs/namespace.c:4167 [inline] __do_sys_mount fs/namespace.c:4383 [inline] __se_sys_mount+0x28c/0x2e0 fs/namespace.c:4360 __x64_sys_mount+0x67/0x80 fs/namespace.c:4360 x64_sys_call+0x2d61/0x3020 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffffffff8938f1f0 of 8 bytes by task 6203 on cpu 1: data_make_reusable kernel/printk/printk_ringbuffer.c:608 [inline] data_push_tail+0x100/0x470 kernel/printk/printk_ringbuffer.c:693 data_alloc+0x11b/0x390 kernel/printk/printk_ringbuffer.c:1089 prb_reserve+0x8d6/0xad0 kernel/printk/printk_ringbuffer.c:1727 vprintk_store+0x54a/0x910 kernel/printk/printk.c:2354 vprintk_emit+0x1a4/0x600 kernel/printk/printk.c:2455 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2504 __ext4_error+0x225/0x2e0 fs/ext4/super.c:829 ext4_xattr_inode_iget+0xe3/0x200 fs/ext4/xattr.c:444 ext4_xattr_delete_inode+0x4dc/0x7a0 fs/ext4/xattr.c:2981 ext4_evict_inode+0xb16/0xe30 fs/ext4/inode.c:284 evict+0x2af/0x510 fs/inode.c:841 iput_final fs/inode.c:1960 [inline] iput+0x41a/0x580 fs/inode.c:2009 ext4_process_orphan+0x1a9/0x1c0 fs/ext4/orphan.c:358 ext4_orphan_cleanup+0x69c/0x9f0 fs/ext4/orphan.c:472 __ext4_fill_super fs/ext4/super.c:5701 [inline] ext4_fill_super+0x3408/0x37c0 fs/ext4/super.c:5824 get_tree_bdev_flags+0x291/0x300 fs/super.c:1694 get_tree_bdev+0x1f/0x30 fs/super.c:1717 ext4_get_tree+0x1c/0x30 fs/ext4/super.c:5856 vfs_get_tree+0x57/0x1d0 fs/super.c:1754 fc_mount fs/namespace.c:1193 [inline] do_new_mount_fc fs/namespace.c:3758 [inline] do_new_mount+0x288/0x8d0 fs/namespace.c:3834 path_mount+0x4d0/0xbc0 fs/namespace.c:4154 do_mount fs/namespace.c:4167 [inline] __do_sys_mount fs/namespace.c:4383 [inline] __se_sys_mount+0x28c/0x2e0 fs/namespace.c:4360 __x64_sys_mount+0x67/0x80 fs/namespace.c:4360 x64_sys_call+0x2d61/0x3020 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x0000000000003cf8 -> 0x6d6574737973656c Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 6203 Comm: syz.6.9140 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 ================================================================== loop6: lost filesystem error report for type 5 error -117 EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.9140: iget: bad extra_isize 90 (inode size 256) loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.9140: error while reading EA inode 18 err=-117 loop6: lost filesystem error report for type 5 error -117 EXT4-fs (loop6): 1 orphan inode deleted EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.