loop6: detected capacity change from 0 to 512 EXT4-fs (loop6): revision level too high, forcing read-only mode EXT4-fs (loop6): orphan cleanup on readonly fs EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #16: comm syz.6.12646: corrupted inode contents ================================================================== BUG: KCSAN: data-race in _prb_read_valid / prb_reserve write to 0xffffffff868fb390 of 88 bytes by task 9163 on cpu 0: prb_reserve+0x695/0xaf0 kernel/printk/printk_ringbuffer.c:1651 vprintk_store+0x56d/0x860 kernel/printk/printk.c:2299 vprintk_emit+0x10d/0x580 kernel/printk/printk.c:2399 vprintk_default+0x26/0x30 kernel/printk/printk.c:2438 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2448 batadv_hardif_activate_interface+0x19f/0x330 net/batman-adv/hard-interface.c:670 batadv_hard_if_event+0x3f6/0xf10 net/batman-adv/hard-interface.c:965 notifier_call_chain kernel/notifier.c:85 [inline] raw_notifier_call_chain+0x6f/0x1b0 kernel/notifier.c:453 call_netdevice_notifiers_info+0xae/0x100 net/core/dev.c:2229 call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0xff/0x1a0 net/core/dev.c:-1 netif_change_flags+0xac/0xd0 net/core/dev.c:9705 do_setlink+0x9d2/0x2810 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0xe75/0x12d0 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x5fb/0x6d0 net/core/rtnetlink.c:6954 netlink_rcv_skb+0x123/0x220 net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6981 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x5bd/0x690 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x58b/0x6b0 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg+0x142/0x180 net/socket.c:742 __sys_sendto+0x268/0x330 net/socket.c:2244 __do_sys_sendto net/socket.c:2251 [inline] __se_sys_sendto net/socket.c:2247 [inline] __x64_sys_sendto+0x76/0x90 net/socket.c:2247 x64_sys_call+0x2d14/0x3000 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffffffff868fb390 of 8 bytes by task 9281 on cpu 1: desc_read kernel/printk/printk_ringbuffer.c:483 [inline] desc_read_finalized_seq kernel/printk/printk_ringbuffer.c:1892 [inline] prb_read kernel/printk/printk_ringbuffer.c:1940 [inline] _prb_read_valid+0x1c4/0x920 kernel/printk/printk_ringbuffer.c:2131 desc_update_last_finalized kernel/printk/printk_ringbuffer.c:1531 [inline] prb_final_commit+0x136/0x1e0 kernel/printk/printk_ringbuffer.c:1800 vprintk_store+0x741/0x860 kernel/printk/printk.c:2325 vprintk_emit+0x10d/0x580 kernel/printk/printk.c:2399 vprintk_default+0x26/0x30 kernel/printk/printk.c:2438 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2448 __ext4_error_inode+0x2ca/0x3f0 fs/ext4/super.c:853 ext4_do_update_inode fs/ext4/inode.c:5624 [inline] ext4_mark_iloc_dirty+0x35e/0xda0 fs/ext4/inode.c:6274 __ext4_mark_inode_dirty+0x2e2/0x3f0 fs/ext4/inode.c:6480 ext4_dirty_inode+0x92/0xc0 fs/ext4/inode.c:6509 __mark_inode_dirty+0x15f/0x750 fs/fs-writeback.c:2566 mark_inode_dirty_sync include/linux/fs.h:2619 [inline] dquot_free_space include/linux/quotaops.h:380 [inline] dquot_free_block include/linux/quotaops.h:390 [inline] ext4_mb_clear_bb fs/ext4/mballoc.c:6650 [inline] ext4_free_blocks+0xea9/0x1480 fs/ext4/mballoc.c:6770 ext4_remove_blocks fs/ext4/extents.c:2551 [inline] ext4_ext_rm_leaf fs/ext4/extents.c:2716 [inline] ext4_ext_remove_space+0x177b/0x2900 fs/ext4/extents.c:2965 ext4_ext_truncate+0xc7/0x170 fs/ext4/extents.c:4484 ext4_truncate+0x70d/0xae0 fs/ext4/inode.c:4614 ext4_process_orphan+0x110/0x1c0 fs/ext4/orphan.c:335 ext4_orphan_cleanup+0x6a8/0xa00 fs/ext4/orphan.c:470 __ext4_fill_super fs/ext4/super.c:5617 [inline] ext4_fill_super+0x3483/0x3810 fs/ext4/super.c:5736 get_tree_bdev_flags+0x28e/0x300 fs/super.c:1691 get_tree_bdev+0x1f/0x30 fs/super.c:1714 ext4_get_tree+0x1c/0x30 fs/ext4/super.c:5768 vfs_get_tree+0x57/0x1d0 fs/super.c:1751 fc_mount fs/namespace.c:1208 [inline] do_new_mount_fc fs/namespace.c:3651 [inline] do_new_mount+0x24d/0x660 fs/namespace.c:3727 path_mount+0x4a5/0xb70 fs/namespace.c:4037 do_mount fs/namespace.c:4050 [inline] __do_sys_mount fs/namespace.c:4238 [inline] __se_sys_mount+0x28c/0x2e0 fs/namespace.c:4215 __x64_sys_mount+0x67/0x80 fs/namespace.c:4215 x64_sys_call+0x2b51/0x3000 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x0000000000003204 -> 0x0000000000005204 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 9281 Comm: syz.6.12646 Not tainted syzkaller #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 ================================================================== EXT4-fs (loop6): Remounting filesystem read-only EXT4-fs (loop6): 1 truncate cleaned up EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.