program: syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) write(r0, &(0x7f0000000380)="2cd889f03e14f3c3", 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800001, 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) [ 74.910861][ T5334] Bluetooth: hci0: command tx timeout [ 74.924389][ T5355] loop0: detected capacity change from 0 to 47 [ 74.961327][ T5355] ======================================================= [ 74.961327][ T5355] WARNING: The mand mount option has been deprecated and [ 74.961327][ T5355] and is ignored by this kernel. Remove the mand [ 74.961327][ T5355] option from the mount to silence this warning. [ 74.961327][ T5355] ======================================================= [ 75.033725][ T5356] VFS_BUG_ON_INODE(!IS_ANON_FILE(inode)) encountered for inode ffff88804462d018 [ 75.033879][ T5356] ------------[ cut here ]------------ [ 75.039991][ T5356] kernel BUG at fs/namei.c:3474! [ 75.045227][ T5356] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 75.047829][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.051443][ T5356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.055664][ T5356] RIP: 0010:may_open+0x4b1/0x4c0 [ 75.057733][ T5356] Code: 38 c1 0f 8c 1e fd ff ff 4c 89 e7 e8 69 c5 eb ff e9 11 fd ff ff e8 af d5 86 ff 4c 89 f7 48 c7 c6 40 64 99 8b e8 70 49 ef fe 90 <0f> 0b 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 75.065130][ T5356] RSP: 0018:ffffc9000d2a7940 EFLAGS: 00010246 [ 75.067707][ T5356] RAX: 000000000000004d RBX: dffffc0000000000 RCX: 5d54f76e4de63300 [ 75.071139][ T5356] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 75.074456][ T5356] RBP: 0000000000008042 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 75.077822][ T5356] R10: dffffc0000000000 R11: ffffed1003f8484b R12: 0000000000000000 [ 75.081213][ T5356] R13: ffffffff8e2985a0 R14: ffff88804462d018 R15: 0000000000000006 [ 75.084642][ T5356] FS: 00007fee7f0b46c0(0000) GS:ffff88808d20d000(0000) knlGS:0000000000000000 [ 75.088487][ T5356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.091449][ T5356] CR2: 00007fee7f0b3fc8 CR3: 000000003dfca000 CR4: 0000000000352ef0 [ 75.094607][ T5356] Call Trace: [ 75.096134][ T5356] [ 75.097384][ T5356] path_openat+0x2d91/0x3830 [ 75.099430][ T5356] ? arch_stack_walk+0xfc/0x150 [ 75.101635][ T5356] ? __pfx_path_openat+0x10/0x10 [ 75.103865][ T5356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.106512][ T5356] do_filp_open+0x1fa/0x410 [ 75.108366][ T5356] ? __lock_acquire+0xab9/0xd20 [ 75.110302][ T5356] ? __pfx_do_filp_open+0x10/0x10 [ 75.112562][ T5356] ? _raw_spin_unlock+0x28/0x50 [ 75.114442][ T5356] ? alloc_fd+0x64c/0x6c0 [ 75.116222][ T5356] do_sys_openat2+0x121/0x1c0 [ 75.118246][ T5356] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.120452][ T5356] ? rcu_is_watching+0x15/0xb0 [ 75.122540][ T5356] __x64_sys_openat+0x138/0x170 [ 75.124898][ T5356] do_syscall_64+0xfa/0x3b0 [ 75.127058][ T5356] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.129572][ T5356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.132441][ T5356] ? clear_bhb_loop+0x60/0xb0 [ 75.134719][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.137368][ T5356] RIP: 0033:0x7fee7e18ebe9 [ 75.139053][ T5356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.146991][ T5356] RSP: 002b:00007fee7f0b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 75.150490][ T5356] RAX: ffffffffffffffda RBX: 00007fee7e3c6090 RCX: 00007fee7e18ebe9 [ 75.153800][ T5356] RDX: 0000000000000042 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 75.157020][ T5356] RBP: 00007fee7e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 75.160175][ T5356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.163457][ T5356] R13: 00007fee7e3c6128 R14: 00007fee7e3c6090 R15: 00007ffffb08af98 [ 75.166767][ T5356] [ 75.168173][ T5356] Modules linked in: [ 75.170411][ T5356] ---[ end trace 0000000000000000 ]--- [ 75.178046][ T5356] RIP: 0010:may_open+0x4b1/0x4c0 [ 75.180080][ T5356] Code: 38 c1 0f 8c 1e fd ff ff 4c 89 e7 e8 69 c5 eb ff e9 11 fd ff ff e8 af d5 86 ff 4c 89 f7 48 c7 c6 40 64 99 8b e8 70 49 ef fe 90 <0f> 0b 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 75.188366][ T5356] RSP: 0018:ffffc9000d2a7940 EFLAGS: 00010246 [ 75.191438][ T5356] RAX: 000000000000004d RBX: dffffc0000000000 RCX: 5d54f76e4de63300 [ 75.195015][ T5356] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 75.198546][ T5356] RBP: 0000000000008042 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 75.202811][ T5356] R10: dffffc0000000000 R11: ffffed1003f8484b R12: 0000000000000000 [ 75.206138][ T5356] R13: ffffffff8e2985a0 R14: ffff88804462d018 R15: 0000000000000006 [ 75.209614][ T5356] FS: 00007fee7f0b46c0(0000) GS:ffff88808d20d000(0000) knlGS:0000000000000000 [ 75.214198][ T5356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.217251][ T5356] CR2: 00007fee7f0b3fc8 CR3: 000000003dfca000 CR4: 0000000000352ef0 [ 75.220972][ T5356] Kernel panic - not syncing: Fatal exception [ 75.223804][ T5356] Kernel Offset: disabled [ 75.225691][ T5356] Rebooting in 86400 seconds..