F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 netlink: 'syz.3.137': attribute type 4 has an invalid length. netlink: 224 bytes leftover after parsing attributes in process `syz.3.137'. ------------[ cut here ]------------ WARNING: CPU: 1 PID: 4986 at fs/inode.c:389 inc_nlink+0x128/0x150 fs/inode.c:389 Modules linked in: CPU: 1 PID: 4986 Comm: syz.3.137 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : inc_nlink+0x128/0x150 fs/inode.c:389 lr : inc_nlink+0x128/0x150 fs/inode.c:389 sp : ffff800022987070 x29: ffff800022987070 x28: ffff700004530e24 x27: ffff800022987260 x26: 0000000000000004 x25: fffffc0003338100 x24: dfff800000000000 x23: 1fffe0001c37e7f0 x22: dfff800000000000 x21: 0000000000004001 x20: ffff0000e1bf3f38 x19: ffff0000e1bf3f80 x18: 0000000000000000 x17: 0000000000000000 x16: ffff8000082f4984 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffff8000667026 x12: 0000000000000000 x11: ff00800008a2115c x10: 0000000000000000 x9 : ffff800008a2115c x8 : ffff0000dc1e8000 x7 : 0000000007bfa480 x6 : 0000000000000045 x5 : ffff0000e1bf59b0 x4 : ffff0000e1bf5970 x3 : ffff80000a368614 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: inc_nlink+0x128/0x150 fs/inode.c:389 f2fs_i_links_write fs/f2fs/f2fs.h:3056 [inline] f2fs_update_parent_metadata+0xa8/0x2a0 fs/f2fs/dir.c:666 f2fs_add_inline_entry+0x4c4/0x68c fs/f2fs/inline.c:682 f2fs_add_dentry fs/f2fs/dir.c:843 [inline] f2fs_do_add_link+0x264/0x4f8 fs/f2fs/dir.c:886 f2fs_add_link fs/f2fs/f2fs.h:3547 [inline] f2fs_mkdir+0x290/0x4d0 fs/f2fs/namei.c:712 vfs_mkdir+0x314/0x4d8 fs/namei.c:4157 ovl_do_mkdir fs/overlayfs/overlayfs.h:186 [inline] ovl_mkdir_real+0xa8/0x204 fs/overlayfs/dir.c:146 ovl_workdir_create+0x2c8/0x66c fs/overlayfs/super.c:799 ovl_make_workdir fs/overlayfs/super.c:1389 [inline] ovl_get_workdir+0x31c/0x1084 fs/overlayfs/super.c:1539 ovl_fill_super+0x17d0/0x3938 fs/overlayfs/super.c:2095 mount_nodev+0x68/0x108 fs/super.c:1500 ovl_mount+0x3c/0x50 fs/overlayfs/super.c:2186 legacy_get_tree+0xd8/0x174 fs/fs_context.c:632 vfs_get_tree+0x90/0x278 fs/super.c:1584 do_new_mount+0x228/0x804 fs/namespace.c:3078 path_mount+0x5ac/0xe6c fs/namespace.c:3408 do_mount fs/namespace.c:3421 [inline] __do_sys_mount fs/namespace.c:3629 [inline] __se_sys_mount fs/namespace.c:3606 [inline] __arm64_sys_mount+0x4a0/0x5a0 fs/namespace.c:3606 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x12c arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 288414 hardirqs last enabled at (288413): [] folio_memcg_lock+0xe8/0x1f8 mm/memcontrol.c:2113 hardirqs last disabled at (288414): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (288118): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (288116): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]---