VFS: Found a Xenix FS (block size = 1024) on device loop6 syz.6.842: attempt to access beyond end of device loop6: rw=0, sector=6491536, nr_sectors = 2 limit=128 Buffer I/O error on dev loop6, logical block 3245768, async page read ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9762 at fs/inode.c:393 inc_nlink+0x15a/0x170 fs/inode.c:393 Modules linked in: CPU: 1 UID: 0 PID: 9762 Comm: syz.6.842 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:inc_nlink+0x15a/0x170 fs/inode.c:393 Code: ff ff ff 4c 89 e7 e8 25 b7 e6 ff e9 f5 fe ff ff 4c 89 e7 e8 18 b7 e6 ff eb d4 e8 11 b7 e6 ff e9 53 ff ff ff e8 c7 08 86 ff 90 <0f> 0b 90 e9 62 ff ff ff e8 29 b7 e6 ff e9 78 ff ff ff 0f 1f 40 00 RSP: 0018:ffffc9000316fdc8 EFLAGS: 00010283 RAX: 000000000000f2e5 RBX: ffff8880585cc038 RCX: ffffc90013c26000 RDX: 0000000000040000 RSI: ffffffff820772a9 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880585cc080 R13: ffffffff8b9cde80 R14: ffff8880585cc060 R15: ffff8880585cc058 FS: 00007fe0a2e666c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f6a55f5950 CR3: 000000007e2f6000 CR4: 0000000000350ef0 Call Trace: inode_inc_link_count include/linux/fs.h:2504 [inline] sysv_mkdir+0x22/0x150 fs/sysv/namei.c:119 vfs_mkdir+0x580/0x860 fs/namei.c:4257 do_mkdirat+0x301/0x3a0 fs/namei.c:4280 __do_sys_mkdir fs/namei.c:4300 [inline] __se_sys_mkdir fs/namei.c:4298 [inline] __x64_sys_mkdir+0xef/0x140 fs/namei.c:4298 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe0a1f7e719 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe0a2e66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 RAX: ffffffffffffffda RBX: 00007fe0a2135f80 RCX: 00007fe0a1f7e719 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 RBP: 00007fe0a1ff132e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fe0a2135f80 R15: 00007fffc07b72a8