EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4003: comm syz-executor.4: Allocating blocks 41-42 which overlap fs metadata
EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4003: comm syz-executor.4: Allocating blocks 41-42 which overlap fs metadata
==================================================================
BUG: KCSAN: data-race in data_push_tail / uuid_string

write to 0xffffffff86f43b20 of 1 bytes by task 3093 on cpu 0:
 string_nocheck lib/vsprintf.c:648 [inline]
 uuid_string+0x435/0x4b0 lib/vsprintf.c:1729
 pointer+0x3ee/0xd10 lib/vsprintf.c:2446
 vsnprintf+0x861/0xe20 lib/vsprintf.c:2821
 va_format lib/vsprintf.c:1681 [inline]
 pointer+0x8a1/0xd10 lib/vsprintf.c:2448
 vsnprintf+0x861/0xe20 lib/vsprintf.c:2821
 vscnprintf+0x42/0x80 lib/vsprintf.c:2923
 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2128
 vprintk_store+0x56f/0x800 kernel/printk/printk.c:2242
 vprintk_emit+0xd0/0x430 kernel/printk/printk.c:2288
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2318
 vprintk+0x83/0x90 kernel/printk/printk_safe.c:50
 _printk+0x7a/0xa0 kernel/printk/printk.c:2328
 __ext4_msg+0x18a/0x1a0 fs/ext4/super.c:937
 ext4_put_super+0x91/0x7f0 fs/ext4/super.c:1290
 generic_shutdown_super+0xd9/0x260 fs/super.c:499
 kill_block_super+0x3b/0x60 fs/super.c:1417
 deactivate_locked_super+0x6b/0xd0 fs/super.c:330
 deactivate_super+0x9b/0xb0 fs/super.c:361
 cleanup_mnt+0x272/0x2e0 fs/namespace.c:1254
 __cleanup_mnt+0x19/0x20 fs/namespace.c:1261
 task_work_run+0x135/0x1a0 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop+0xd1/0xe0 kernel/entry/common.c:171
 exit_to_user_mode_prepare+0x6c/0xb0 kernel/entry/common.c:204
 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline]
 syscall_exit_to_user_mode+0x26/0x140 kernel/entry/common.c:297
 do_syscall_64+0x4d/0xc0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffffffff86f43b20 of 8 bytes by task 11829 on cpu 1:
 data_make_reusable kernel/printk/printk_ringbuffer.c:590 [inline]
 data_push_tail+0x102/0x430 kernel/printk/printk_ringbuffer.c:675
 data_alloc+0xbe/0x2c0 kernel/printk/printk_ringbuffer.c:1046
 prb_reserve+0x893/0xbc0 kernel/printk/printk_ringbuffer.c:1555
 vprintk_store+0x53e/0x800 kernel/printk/printk.c:2232
 vprintk_emit+0xd0/0x430 kernel/printk/printk.c:2288
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2318
 vprintk+0x83/0x90 kernel/printk/printk_safe.c:50
 _printk+0x7a/0xa0 kernel/printk/printk.c:2328
 __ext4_error+0x21c/0x310 fs/ext4/super.c:769
 ext4_mb_mark_diskspace_used+0x3cc/0xa90 fs/ext4/mballoc.c:4002
 ext4_mb_new_blocks+0xa74/0x21e0 fs/ext4/mballoc.c:6152
 ext4_ext_map_blocks+0xe42/0x3630 fs/ext4/extents.c:4285
 ext4_map_blocks+0x704/0xf60 fs/ext4/inode.c:621
 ext4_getblk+0x112/0x4e0 fs/ext4/inode.c:819
 ext4_bread+0x2c/0x110 fs/ext4/inode.c:875
 ext4_quota_write+0x155/0x370 fs/ext4/super.c:7187
 write_blk fs/quota/quota_tree.c:64 [inline]
 get_free_dqblk+0x1c5/0x2d0 fs/quota/quota_tree.c:130
 do_insert_tree+0x14c/0xde0 fs/quota/quota_tree.c:340
 do_insert_tree+0x4ab/0xde0 fs/quota/quota_tree.c:375
 do_insert_tree+0x4ab/0xde0 fs/quota/quota_tree.c:375
 dq_insert_tree fs/quota/quota_tree.c:401 [inline]
 qtree_write_dquot+0x241/0x2b0 fs/quota/quota_tree.c:420
 v2_write_dquot+0x9e/0xd0 fs/quota/quota_v2.c:358
 dquot_acquire+0x1c8/0x2d0 fs/quota/dquot.c:444
 ext4_acquire_dquot+0x161/0x1a0 fs/ext4/super.c:6851
 dqget+0x667/0x830 fs/quota/dquot.c:914
 __dquot_initialize+0x18a/0x750 fs/quota/dquot.c:1492
 dquot_initialize+0x1a/0x20 fs/quota/dquot.c:1550
 ext4_evict_inode+0xd6/0xdc0 fs/ext4/inode.c:189
 evict+0x1aa/0x410 fs/inode.c:665
 iput_final fs/inode.c:1789 [inline]
 iput+0x42c/0x5b0 fs/inode.c:1815
 ext4_process_orphan+0x1a9/0x1c0 fs/ext4/orphan.c:360
 ext4_orphan_cleanup+0x669/0x9b0 fs/ext4/orphan.c:474
 __ext4_fill_super fs/ext4/super.c:5577 [inline]
 ext4_fill_super+0x3574/0x38b0 fs/ext4/super.c:5696
 get_tree_bdev+0x2b4/0x3b0 fs/super.c:1318
 ext4_get_tree+0x1c/0x20 fs/ext4/super.c:5728
 vfs_get_tree+0x51/0x190 fs/super.c:1519
 do_new_mount+0x203/0x660 fs/namespace.c:3335
 path_mount+0x496/0xb30 fs/namespace.c:3662
 do_mount fs/namespace.c:3675 [inline]
 __do_sys_mount fs/namespace.c:3884 [inline]
 __se_sys_mount+0x27f/0x2d0 fs/namespace.c:3861
 __x64_sys_mount+0x67/0x80 fs/namespace.c:3861
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x0000000100006f6f -> 0x302d303030302d30

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 11829 Comm: syz-executor.4 Not tainted 6.4.0-syzkaller-12069-gc17414a273b8 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
==================================================================
EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4003: comm syz-executor.4: Allocating blocks 41-42 which overlap fs metadata
EXT4-fs (loop4): 1 orphan inode deleted
EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
syz-executor.4 (11829) used greatest stack depth: 7640 bytes left