program: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0x4000000, 0x105, 0xfffffff8, 0x3d}}, 0x0) [ 75.176337][ T4678] Bluetooth: hci0: command tx timeout [ 75.224113][ T5331] ------------[ cut here ]------------ [ 75.227776][ T5331] WARNING: CPU: 0 PID: 5331 at fs/nsfs.c:493 nsfs_fh_to_dentry+0xc56/0xd50 [ 75.237708][ T5331] Modules linked in: [ 75.239991][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.243681][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.248304][ T5331] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 75.251260][ T5331] Code: 64 24 40 e9 41 f8 ff ff e8 77 12 79 ff 90 0f 0b 90 e9 64 f6 ff ff e8 69 12 79 ff 90 0f 0b 90 e9 ab f6 ff ff e8 5b 12 79 ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 4d 12 79 ff 45 31 e4 4c 8b 7c 24 08 e9 [ 75.260133][ T5331] RSP: 0018:ffffc9000d44fa40 EFLAGS: 00010283 [ 75.262866][ T5331] RAX: ffffffff82456c95 RBX: 00000000effffffe RCX: 0000000000100000 [ 75.266375][ T5331] RDX: ffffc9000deb2000 RSI: 000000000000003c RDI: 000000000000003d [ 75.270088][ T5331] RBP: ffffc9000d44fb10 R08: ffffffff8f5ce537 R09: 1ffffffff1eb9ca6 [ 75.274062][ T5331] R10: dffffc0000000000 R11: fffffbfff1eb9ca7 R12: ffffffff8245617c [ 75.277534][ T5331] R13: dffffc0000000000 R14: ffff88804287d214 R15: 0000000000000000 [ 75.281882][ T5331] FS: 00007f6293df56c0(0000) GS:ffff88808d96d000(0000) knlGS:0000000000000000 [ 75.285640][ T5331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.288333][ T5331] CR2: 0000200000000000 CR3: 000000004284e000 CR4: 0000000000352ef0 [ 75.292325][ T5331] Call Trace: [ 75.294321][ T5331] [ 75.295856][ T5331] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 75.298450][ T5331] exportfs_decode_fh_raw+0x175/0x6e0 [ 75.301452][ T5331] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 75.304579][ T5331] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 75.307757][ T5331] do_handle_to_path+0xa4/0x1a0 [ 75.310156][ T5331] do_handle_open+0x6b4/0x8f0 [ 75.312332][ T5331] ? __pfx_do_handle_open+0x10/0x10 [ 75.314642][ T5331] ? rcu_is_watching+0x15/0xb0 [ 75.316655][ T5331] ? do_syscall_64+0xbe/0x3b0 [ 75.318824][ T5331] do_syscall_64+0xfa/0x3b0 [ 75.321084][ T5331] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.323563][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.326163][ T5331] ? clear_bhb_loop+0x60/0xb0 [ 75.328129][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.330917][ T5331] RIP: 0033:0x7f629798eec9 [ 75.332922][ T5331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.341265][ T5331] RSP: 002b:00007f6293df5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 75.344892][ T5331] RAX: ffffffffffffffda RBX: 00007f6297be5fa0 RCX: 00007f629798eec9 [ 75.348244][ T5331] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 75.351710][ T5331] RBP: 00007f6297a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.355049][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.358335][ T5331] R13: 00007f6297be6038 R14: 00007f6297be5fa0 R15: 00007ffea05811e8 [ 75.361904][ T5331] [ 75.363388][ T5331] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.366446][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.370518][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.375118][ T5331] Call Trace: [ 75.376642][ T5331] [ 75.377915][ T5331] dump_stack_lvl+0x99/0x250 [ 75.379835][ T5331] ? __asan_memcpy+0x40/0x70 [ 75.381726][ T5331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.383791][ T5331] ? __pfx__printk+0x10/0x10 [ 75.385815][ T5331] vpanic+0x281/0x750 [ 75.387543][ T5331] ? __pfx__printk+0x10/0x10 [ 75.389690][ T5331] ? __pfx_vpanic+0x10/0x10 [ 75.391694][ T5331] ? is_bpf_text_address+0x26/0x2b0 [ 75.393993][ T5331] panic+0xb9/0xc0 [ 75.395594][ T5331] ? __pfx_panic+0x10/0x10 [ 75.397526][ T5331] __warn+0x31b/0x4b0 [ 75.399260][ T5331] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 75.401537][ T5331] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 75.403749][ T5331] report_bug+0x2be/0x4f0 [ 75.405686][ T5331] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 75.407932][ T5331] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 75.410201][ T5331] ? nsfs_fh_to_dentry+0xc58/0xd50 [ 75.412429][ T5331] handle_bug+0x84/0x160 [ 75.414333][ T5331] exc_invalid_op+0x1a/0x50 [ 75.416314][ T5331] asm_exc_invalid_op+0x1a/0x20 [ 75.418383][ T5331] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 75.420901][ T5331] Code: 64 24 40 e9 41 f8 ff ff e8 77 12 79 ff 90 0f 0b 90 e9 64 f6 ff ff e8 69 12 79 ff 90 0f 0b 90 e9 ab f6 ff ff e8 5b 12 79 ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 4d 12 79 ff 45 31 e4 4c 8b 7c 24 08 e9 [ 75.429083][ T5331] RSP: 0018:ffffc9000d44fa40 EFLAGS: 00010283 [ 75.431797][ T5331] RAX: ffffffff82456c95 RBX: 00000000effffffe RCX: 0000000000100000 [ 75.435073][ T5331] RDX: ffffc9000deb2000 RSI: 000000000000003c RDI: 000000000000003d [ 75.438329][ T5331] RBP: ffffc9000d44fb10 R08: ffffffff8f5ce537 R09: 1ffffffff1eb9ca6 [ 75.441715][ T5331] R10: dffffc0000000000 R11: fffffbfff1eb9ca7 R12: ffffffff8245617c [ 75.445254][ T5331] R13: dffffc0000000000 R14: ffff88804287d214 R15: 0000000000000000 [ 75.448720][ T5331] ? nsfs_fh_to_dentry+0x13c/0xd50 [ 75.450970][ T5331] ? nsfs_fh_to_dentry+0xc55/0xd50 [ 75.453080][ T5331] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 75.455457][ T5331] exportfs_decode_fh_raw+0x175/0x6e0 [ 75.457850][ T5331] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 75.460229][ T5331] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 75.462626][ T5331] do_handle_to_path+0xa4/0x1a0 [ 75.464548][ T5331] do_handle_open+0x6b4/0x8f0 [ 75.466662][ T5331] ? __pfx_do_handle_open+0x10/0x10 [ 75.468931][ T5331] ? rcu_is_watching+0x15/0xb0 [ 75.471042][ T5331] ? do_syscall_64+0xbe/0x3b0 [ 75.473251][ T5331] do_syscall_64+0xfa/0x3b0 [ 75.475315][ T5331] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.477644][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.480377][ T5331] ? clear_bhb_loop+0x60/0xb0 [ 75.482446][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.484983][ T5331] RIP: 0033:0x7f629798eec9 [ 75.486943][ T5331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.494642][ T5331] RSP: 002b:00007f6293df5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 75.498362][ T5331] RAX: ffffffffffffffda RBX: 00007f6297be5fa0 RCX: 00007f629798eec9 [ 75.501873][ T5331] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 75.505523][ T5331] RBP: 00007f6297a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.508912][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.512395][ T5331] R13: 00007f6297be6038 R14: 00007f6297be5fa0 R15: 00007ffea05811e8 [ 75.515837][ T5331] [ 75.517506][ T5331] Kernel Offset: disabled [ 75.519392][ T5331] Rebooting in 86400 seconds..