program: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2, &(0x7f0000000540)=ANY=[], 0xd, 0x192, &(0x7f0000000700)="$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") ftruncate(0xffffffffffffffff, 0xc17a) r0 = socket$inet(0x2, 0x2000000000003, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) close(r3) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000140)={r5, @in={{0x2, 0x4624, @dev={0xac, 0x14, 0x14, 0x15}}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000280)={r5, 0xa4, "9d752ce23706035f755db36f385a32222b331a5d023b1e88bdcf8742caf315679e9b8d51a9a6c23d087431c1400f05f5f449af4349f81de2c317883acb8532e37de419a30ff98e0e5c84704ac5979f7ba3f6bdf11d57d3f0ee0d7656bc91c0303bcf3709ee1f5059189ad61ee961d9efd66b0ae70ac5abe594ae5adfc3455188cc8a34fc9399480475dae8c74ec89eed7be0f01cba4684dc6df6f08b068c969b49627e49"}, &(0x7f0000000000)=0xac) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0], &(0x7f0000000940)=[{}, {}, {}, {}], &(0x7f0000000640)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2f4, 0x1, 0x1, 0x0, r7}) [ 68.046218][ T5353] loop0: detected capacity change from 0 to 47 [ 68.112304][ T4702] Bluetooth: hci0: command tx timeout [ 68.126271][ T5353] VFS_BUG_ON_INODE(!IS_ANON_FILE(inode)) encountered for inode ffff888044634ad0 [ 68.126439][ T5353] ------------[ cut here ]------------ [ 68.132950][ T5353] kernel BUG at fs/namei.c:3474! [ 68.152637][ T5353] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 68.155012][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 68.158792][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.163638][ T5353] RIP: 0010:may_open+0x4b1/0x4c0 [ 68.166204][ T5353] Code: 38 c1 0f 8c 1e fd ff ff 4c 89 e7 e8 69 c5 eb ff e9 11 fd ff ff e8 af d5 86 ff 4c 89 f7 48 c7 c6 40 64 99 8b e8 70 49 ef fe 90 <0f> 0b 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 68.174297][ T5353] RSP: 0018:ffffc9000d3bf940 EFLAGS: 00010246 [ 68.176894][ T5353] RAX: 000000000000004d RBX: dffffc0000000000 RCX: 76f270d04183f700 [ 68.180153][ T5353] RDX: ffffc9000ddd2000 RSI: 00000000000009e4 RDI: 00000000000009e5 [ 68.183156][ T5353] RBP: 0000000000109740 R08: 0000000000000003 R09: 0000000000000004 [ 68.186533][ T5353] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: 0000000000000000 [ 68.189852][ T5353] R13: ffffffff8e2985a0 R14: ffff888044634ad0 R15: 000000000000000e [ 68.192992][ T5353] FS: 00007f78e512d6c0(0000) GS:ffff88808d20d000(0000) knlGS:0000000000000000 [ 68.196942][ T5353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.199781][ T5353] CR2: 00007feba2235000 CR3: 0000000031f67000 CR4: 0000000000352ef0 [ 68.203114][ T5353] Call Trace: [ 68.204574][ T5353] [ 68.205789][ T5353] path_openat+0x2d91/0x3830 [ 68.207836][ T5353] ? arch_stack_walk+0xfc/0x150 [ 68.209983][ T5353] ? __pfx_path_openat+0x10/0x10 [ 68.212233][ T5353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.214931][ T5353] do_filp_open+0x1fa/0x410 [ 68.216906][ T5353] ? __lock_acquire+0xab9/0xd20 [ 68.219023][ T5353] ? __pfx_do_filp_open+0x10/0x10 [ 68.221320][ T5353] ? _raw_spin_unlock+0x28/0x50 [ 68.223261][ T5353] ? alloc_fd+0x64c/0x6c0 [ 68.224796][ T5353] do_sys_openat2+0x121/0x1c0 [ 68.226548][ T5353] ? __pfx_do_sys_openat2+0x10/0x10 [ 68.228674][ T5353] ? rcu_is_watching+0x15/0xb0 [ 68.230674][ T5353] __x64_sys_openat+0x138/0x170 [ 68.232711][ T5353] do_syscall_64+0xfa/0x3b0 [ 68.234604][ T5353] ? lockdep_hardirqs_on+0x9c/0x150 [ 68.236623][ T5353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.239295][ T5353] ? clear_bhb_loop+0x60/0xb0 [ 68.241382][ T5353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.244042][ T5353] RIP: 0033:0x7f78e438ebe9 [ 68.245951][ T5353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.253793][ T5353] RSP: 002b:00007f78e512d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 68.257424][ T5353] RAX: ffffffffffffffda RBX: 00007f78e45c5fa0 RCX: 00007f78e438ebe9 [ 68.260698][ T5353] RDX: 0000000000101740 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 68.264153][ T5353] RBP: 00007f78e4411e19 R08: 0000000000000000 R09: 0000000000000000 [ 68.267570][ T5353] R10: 0000000000000179 R11: 0000000000000246 R12: 0000000000000000 [ 68.270654][ T5353] R13: 00007f78e45c6038 R14: 00007f78e45c5fa0 R15: 00007ffc891afd58 [ 68.273911][ T5353] [ 68.275309][ T5353] Modules linked in: [ 68.277340][ T5353] ---[ end trace 0000000000000000 ]--- [ 68.288339][ T5353] RIP: 0010:may_open+0x4b1/0x4c0 [ 68.290547][ T5353] Code: 38 c1 0f 8c 1e fd ff ff 4c 89 e7 e8 69 c5 eb ff e9 11 fd ff ff e8 af d5 86 ff 4c 89 f7 48 c7 c6 40 64 99 8b e8 70 49 ef fe 90 <0f> 0b 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 68.299582][ T5353] RSP: 0018:ffffc9000d3bf940 EFLAGS: 00010246 [ 68.302931][ T5353] RAX: 000000000000004d RBX: dffffc0000000000 RCX: 76f270d04183f700 [ 68.306393][ T5353] RDX: ffffc9000ddd2000 RSI: 00000000000009e4 RDI: 00000000000009e5 [ 68.309971][ T5353] RBP: 0000000000109740 R08: 0000000000000003 R09: 0000000000000004 [ 68.314551][ T5353] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: 0000000000000000 [ 68.318112][ T5353] R13: ffffffff8e2985a0 R14: ffff888044634ad0 R15: 000000000000000e [ 68.322418][ T5353] FS: 00007f78e512d6c0(0000) GS:ffff88808d20d000(0000) knlGS:0000000000000000 [ 68.325957][ T5353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.328762][ T5353] CR2: 0000200000001000 CR3: 0000000031f67000 CR4: 0000000000352ef0 [ 68.332615][ T5353] Kernel panic - not syncing: Fatal exception [ 68.335513][ T5353] Kernel Offset: disabled [ 68.337092][ T5353] Rebooting in 86400 seconds..