VFS: Found a Xenix FS (block size = 1024) on device loop3
Bad inode number on dev loop3: 2 is out of range
SysV FS: get root inode failed
------------[ cut here ]------------
VFS: brelse: Trying to free free buffer
WARNING: CPU: 1 PID: 4137 at fs/buffer.c:1148 __brelse+0x8c/0xec fs/buffer.c:1148
Modules linked in:
CPU: 1 PID: 4137 Comm: syz.3.16 Not tainted 5.15.177-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __brelse+0x8c/0xec fs/buffer.c:1148
lr : __brelse+0x8c/0xec fs/buffer.c:1148
sp : ffff8000200f7900
x29: ffff8000200f7900 x28: ffff800011f12e00 x27: 0000000000000000
x26: ffff0000dd8a4ae0 x25: ffff0000dd8a4ae0 x24: 0000000000000002
x23: ffff0000ea40a160 x22: ffff0000c1005c40 x21: 0000000000000000
x20: 0000000000000000 x19: ffff0000dd8a4b40 x18: 0000000000000001
x17: 0000000000000002 x16: ffff800011b4efd4 x15: 00000000ffffffff
x14: ffff0000d9a20000 x13: 0000000000000001 x12: 0000000000080000
x11: 0000000000071d81 x10: ffff800024539000 x9 : f50f5c0f3582ae00
x8 : f50f5c0f3582ae00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff8000200f7078 x4 : ffff800014c50660 x3 : ffff8000085568c0
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000027
Call trace:
 __brelse+0x8c/0xec fs/buffer.c:1148
 brelse include/linux/buffer_head.h:325 [inline]
 sysv_fill_super+0x510/0x5f8 fs/sysv/super.c:415
 mount_bdev+0x274/0x370 fs/super.c:1400
 sysv_mount+0x44/0x58 fs/sysv/super.c:534
 legacy_get_tree+0xd4/0x16c fs/fs_context.c:611
 vfs_get_tree+0x90/0x274 fs/super.c:1530
 do_new_mount+0x278/0x8fc fs/namespace.c:3012
 path_mount+0x594/0x101c fs/namespace.c:3342
 do_mount fs/namespace.c:3355 [inline]
 __do_sys_mount fs/namespace.c:3563 [inline]
 __se_sys_mount fs/namespace.c:3540 [inline]
 __arm64_sys_mount+0x510/0x5e0 fs/namespace.c:3540
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 1954
hardirqs last  enabled at (1953): [<ffff80000832c1b4>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (1954): [<ffff800011b4a688>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (1932): [<ffff8000081b6920>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (1932): [<ffff8000081b6920>] handle_softirqs+0xb88/0xdbc kernel/softirq.c:586
softirqs last disabled at (1921): [<ffff8000081b6fb8>] __do_softirq kernel/softirq.c:592 [inline]
softirqs last disabled at (1921): [<ffff8000081b6fb8>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (1921): [<ffff8000081b6fb8>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (1921): [<ffff8000081b6fb8>] __irq_exit_rcu+0x268/0x4d8 kernel/softirq.c:641
---[ end trace 713c5f561a5d59f7 ]---
oldfs: cannot read superblock