EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.75: bad orphan inode 134217728
loop4: lost filesystem error report for type 5 error -117
EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
==================================================================
BUG: KCSAN: data-race in filemap_read / filemap_read

write to 0xffff88810360c3a8 of 8 bytes by task 3750 on cpu 1:
 filemap_read+0x98d/0xa10 mm/filemap.c:2873
 generic_file_read_iter+0x79/0x330 mm/filemap.c:2992
 ext4_file_read_iter+0x1cc/0x290 fs/ext4/file.c:-1
 copy_splice_read+0x471/0x6c0 fs/splice.c:363
 do_splice_read fs/splice.c:981 [inline]
 splice_direct_to_actor+0x28f/0x670 fs/splice.c:1086
 do_splice_direct_actor fs/splice.c:1204 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1230
 do_sendfile+0x382/0x650 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64 fs/read_write.c:1419 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1419
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88810360c3a8 of 8 bytes by task 3746 on cpu 0:
 filemap_read+0x6f/0xa10 mm/filemap.c:2774
 generic_file_read_iter+0x79/0x330 mm/filemap.c:2992
 ext4_file_read_iter+0x1cc/0x290 fs/ext4/file.c:-1
 copy_splice_read+0x471/0x6c0 fs/splice.c:363
 do_splice_read fs/splice.c:981 [inline]
 splice_direct_to_actor+0x28f/0x670 fs/splice.c:1086
 do_splice_direct_actor fs/splice.c:1204 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1230
 do_sendfile+0x382/0x650 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64 fs/read_write.c:1419 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1419
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x000000000000019d -> 0x000000000000019e

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3746 Comm: syz.4.75 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
==================================================================