EXT4-fs error (device loop5): ext4_validate_block_bitmap:399: comm syz-executor.5: bg 0: block 18: invalid block bitmap
==================================================================
BUG: KCSAN: data-race in data_push_tail / number

write to 0xffffffff86f0cfd3 of 1 bytes by task 25645 on cpu 1:
 number+0x7d0/0xa90 lib/vsprintf.c:562
 vsnprintf+0xa44/0xe20 lib/vsprintf.c:2862
 va_format lib/vsprintf.c:1681 [inline]
 pointer+0x8a1/0xd10 lib/vsprintf.c:2427
 vsnprintf+0x861/0xe20 lib/vsprintf.c:2800
 vscnprintf+0x42/0x80 lib/vsprintf.c:2902
 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2137
 vprintk_store+0x56f/0x800 kernel/printk/printk.c:2251
 vprintk_emit+0xd0/0x430 kernel/printk/printk.c:2297
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2327
 vprintk+0x83/0x90 kernel/printk/printk_safe.c:50
 _printk+0x7a/0xa0 kernel/printk/printk.c:2337
 __ext4_msg+0x18a/0x1a0 fs/ext4/super.c:937
 ext4_orphan_cleanup+0x900/0x9c0 fs/ext4/orphan.c:497
 __ext4_fill_super fs/ext4/super.c:5509 [inline]
 ext4_fill_super+0x412f/0x43f0 fs/ext4/super.c:5637
 get_tree_bdev+0x2b1/0x3a0 fs/super.c:1303
 ext4_get_tree+0x1c/0x20 fs/ext4/super.c:5668
 vfs_get_tree+0x51/0x190 fs/super.c:1510
 do_new_mount+0x200/0x650 fs/namespace.c:3042
 path_mount+0x498/0xb40 fs/namespace.c:3372
 do_mount fs/namespace.c:3385 [inline]
 __do_sys_mount fs/namespace.c:3594 [inline]
 __se_sys_mount+0x27f/0x2d0 fs/namespace.c:3571
 __x64_sys_mount+0x67/0x80 fs/namespace.c:3571
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffffffff86f0cfd0 of 8 bytes by task 25646 on cpu 0:
 data_make_reusable kernel/printk/printk_ringbuffer.c:590 [inline]
 data_push_tail+0x102/0x430 kernel/printk/printk_ringbuffer.c:675
 data_alloc+0xbe/0x2c0 kernel/printk/printk_ringbuffer.c:1046
 prb_reserve+0x893/0xbc0 kernel/printk/printk_ringbuffer.c:1555
 vprintk_store+0x53e/0x800 kernel/printk/printk.c:2241
 vprintk_emit+0xd0/0x430 kernel/printk/printk.c:2297
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2327
 vprintk+0x83/0x90 kernel/printk/printk_safe.c:50
 _printk+0x7a/0xa0 kernel/printk/printk.c:2337
 __ext4_error+0x21c/0x310 fs/ext4/super.c:769
 ext4_validate_block_bitmap+0x7e2/0x830 fs/ext4/balloc.c:398
 ext4_wait_block_bitmap+0xeb/0x150 fs/ext4/balloc.c:541
 ext4_read_block_bitmap+0x40/0x70 fs/ext4/balloc.c:553
 ext4_mb_clear_bb fs/ext4/mballoc.c:5929 [inline]
 ext4_free_blocks+0xa9d/0x1ad0 fs/ext4/mballoc.c:6173
 ext4_remove_blocks fs/ext4/extents.c:2545 [inline]
 ext4_ext_rm_leaf fs/ext4/extents.c:2710 [inline]
 ext4_ext_remove_space+0x16ba/0x2c80 fs/ext4/extents.c:2958
 ext4_ext_truncate+0x113/0x1a0 fs/ext4/extents.c:4416
 ext4_truncate+0x76f/0xb30 fs/ext4/inode.c:4342
 ext4_process_orphan+0x113/0x1c0 fs/ext4/orphan.c:339
 ext4_orphan_cleanup+0x66c/0x9c0 fs/ext4/orphan.c:474
 __ext4_fill_super fs/ext4/super.c:5509 [inline]
 ext4_fill_super+0x412f/0x43f0 fs/ext4/super.c:5637
 get_tree_bdev+0x2b1/0x3a0 fs/super.c:1303
 ext4_get_tree+0x1c/0x20 fs/ext4/super.c:5668
 vfs_get_tree+0x51/0x190 fs/super.c:1510
 do_new_mount+0x200/0x650 fs/namespace.c:3042
 path_mount+0x498/0xb40 fs/namespace.c:3372
 do_mount fs/namespace.c:3385 [inline]
 __do_sys_mount fs/namespace.c:3594 [inline]
 __se_sys_mount+0x27f/0x2d0 fs/namespace.c:3571
 __x64_sys_mount+0x67/0x80 fs/namespace.c:3571
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x0000000100007fc9 -> 0x7572742031203a29

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 25646 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00183-ga7a55e27ad72 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023
==================================================================
EXT4-fs error (device loop5) in ext4_mb_clear_bb:6071: Corrupt filesystem
EXT4-fs (loop5): 1 truncate cleaned up
EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none.
EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
syz-executor.5 (25646) used greatest stack depth: 9400 bytes left