F2FS-fs (loop8): invalid crc value
F2FS-fs (loop8): Found nat_bits in checkpoint
F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
BUG: MAX_LOCKDEP_CHAINS too low!
turning off the locking correctness validator.
CPU: 0 PID: 12813 Comm: syz.8.1708 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
Call trace:
 dump_backtrace+0x1c0/0x1ec arch/arm64/kernel/stacktrace.c:158
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
 __dump_stack+0x30/0x40 lib/dump_stack.c:88
 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106
 dump_stack+0x1c/0x5c lib/dump_stack.c:113
 add_chain_cache kernel/locking/lockdep.c:-1 [inline]
 lookup_chain_cache_add kernel/locking/lockdep.c:3772 [inline]
 validate_chain kernel/locking/lockdep.c:3793 [inline]
 __lock_acquire+0x1864/0x6800 kernel/locking/lockdep.c:5049
 lock_acquire+0x20c/0x63c kernel/locking/lockdep.c:5662
 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
 _raw_spin_lock+0x54/0x6c kernel/locking/spinlock.c:154
 spin_lock include/linux/spinlock.h:351 [inline]
 f2fs_allocate_data_block+0x1bd8/0x2e54 fs/f2fs/segment.c:3318
 do_write_page+0x138/0x5e8 fs/f2fs/segment.c:3363
 f2fs_outplace_write_data+0xc8/0x1a8 fs/f2fs/segment.c:3429
 f2fs_convert_inline_page+0x5f4/0xb7c fs/f2fs/inline.c:180
 f2fs_convert_inline_inode+0x528/0x5c4 fs/f2fs/inline.c:232
 f2fs_preallocate_blocks fs/f2fs/file.c:4670 [inline]
 f2fs_file_write_iter+0xbac/0x1c80 fs/f2fs/file.c:4893
 do_iter_readv_writev fs/read_write.c:-1 [inline]
 do_iter_write+0x53c/0x940 fs/read_write.c:861
 vfs_iter_write+0x88/0xac fs/read_write.c:902
 iter_file_splice_write+0x520/0xa7c fs/splice.c:685
 do_splice_from fs/splice.c:763 [inline]
 direct_splice_actor+0xe4/0x134 fs/splice.c:950
 splice_direct_to_actor+0x3a0/0x954 fs/splice.c:896
 do_splice_direct+0x168/0x25c fs/splice.c:1002
 do_sendfile+0x478/0xcc8 fs/read_write.c:1255
 __do_sys_sendfile64 fs/read_write.c:1323 [inline]
 __se_sys_sendfile64 fs/read_write.c:1309 [inline]
 __arm64_sys_sendfile64+0x134/0x36c fs/read_write.c:1309
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
syz.8.1708: attempt to access beyond end of device
loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427
syz.8.1708: attempt to access beyond end of device
loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427