loop7: rw=1, sector=361, nr_sectors = 8 limit=128 ================================================================== BUG: KCSAN: data-race in data_push_tail / vsnprintf write to 0xffffffff89390c03 of 10 bytes by interrupt on cpu 1: vsnprintf+0x2ce/0x860 lib/vsprintf.c:2899 vscnprintf+0x41/0x90 lib/vsprintf.c:3013 printk_sprint+0x30/0x2b0 kernel/printk/printk.c:2222 vprintk_store+0x4b0/0x910 kernel/printk/printk.c:2329 vprintk_emit+0x1a4/0x600 kernel/printk/printk.c:2455 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2504 print_daily_error_info+0x24a/0x300 fs/ext4/super.c:3704 call_timer_fn+0x3b/0x240 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x415/0x5f0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0x31/0x70 kernel/time/timer.c:2405 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x42/0xd0 kernel/softirq.c:735 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline] sysvec_apic_timer_interrupt+0x74/0x80 arch/x86/kernel/apic/apic.c:1061 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 console_trylock_spinning kernel/printk/printk.c:-1 [inline] vprintk_emit+0x3d3/0x600 kernel/printk/printk.c:2478 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2504 __ext4_msg+0x1aa/0x1c0 fs/ext4/super.c:1001 __ext4_fill_super fs/ext4/super.c:5598 [inline] ext4_fill_super+0x2954/0x37c0 fs/ext4/super.c:5824 get_tree_bdev_flags+0x291/0x300 fs/super.c:1694 get_tree_bdev+0x1f/0x30 fs/super.c:1717 ext4_get_tree+0x1c/0x30 fs/ext4/super.c:5856 vfs_get_tree+0x57/0x1d0 fs/super.c:1754 fc_mount fs/namespace.c:1193 [inline] do_new_mount_fc fs/namespace.c:3758 [inline] do_new_mount+0x288/0x8d0 fs/namespace.c:3834 path_mount+0x4d0/0xbc0 fs/namespace.c:4154 do_mount fs/namespace.c:4167 [inline] __do_sys_mount fs/namespace.c:4383 [inline] __se_sys_mount+0x28c/0x2e0 fs/namespace.c:4360 __x64_sys_mount+0x67/0x80 fs/namespace.c:4360 x64_sys_call+0x2d61/0x3020 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffffffff89390c08 of 8 bytes by task 32645 on cpu 0: data_make_reusable kernel/printk/printk_ringbuffer.c:608 [inline] data_push_tail+0x100/0x470 kernel/printk/printk_ringbuffer.c:693 data_alloc+0x11b/0x390 kernel/printk/printk_ringbuffer.c:1089 prb_reserve+0x8d6/0xad0 kernel/printk/printk_ringbuffer.c:1727 vprintk_store+0x54a/0x910 kernel/printk/printk.c:2354 vprintk_emit+0x1a4/0x600 kernel/printk/printk.c:2455 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2504 bio_check_eod block/blk-core.c:566 [inline] submit_bio_noacct+0x8c7/0x980 block/blk-core.c:806 submit_bio+0x2a4/0x2c0 block/blk-core.c:926 mpage_bio_submit_write fs/mpage.c:82 [inline] mpage_write_folio fs/mpage.c:593 [inline] __mpage_writepages+0x7fb/0x1390 fs/mpage.c:686 mpage_writepages include/linux/mpage.h:27 [inline] fat_writepages+0x26/0x30 fs/fat/inode.c:200 do_writepages+0x1c6/0x310 mm/page-writeback.c:2571 __writeback_single_inode+0x7f/0x650 fs/fs-writeback.c:1764 writeback_sb_inodes+0x4dd/0xaa0 fs/fs-writeback.c:2056 wb_writeback+0x24e/0x560 fs/fs-writeback.c:2241 wb_do_writeback fs/fs-writeback.c:2388 [inline] wb_workfn+0x194/0x930 fs/fs-writeback.c:2428 process_one_work kernel/workqueue.c:3302 [inline] process_scheduled_works+0x4f0/0x9c0 kernel/workqueue.c:3385 worker_thread+0x58a/0x780 kernel/workqueue.c:3466 kthread+0x22a/0x280 kernel/kthread.c:436 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x0000000000001a37 -> 0x0000322032206564 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 32645 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Workqueue: writeback wb_workfn (flush-7:7) ================================================================== kworker/u8:0: attempt to access beyond end of device loop7: rw=1, sector=377, nr_sectors = 8 limit=128