program: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x190, &(0x7f0000000200)="$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") r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x101000, 0x42) renameat2(r0, &(0x7f00000000c0)='./file1/file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x0) [ 74.981672][ T5319] Bluetooth: hci0: command tx timeout [ 75.006108][ T5340] loop0: detected capacity change from 0 to 64 [ 75.092511][ T5340] VFS_BUG_ON_INODE(!IS_ANON_FILE(inode)) encountered for inode ffff888052cac588 [ 75.092661][ T5340] ------------[ cut here ]------------ [ 75.099099][ T5340] kernel BUG at fs/namei.c:3483! [ 75.105377][ T5340] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 75.108884][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 75.114621][ T5340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.119409][ T5340] RIP: 0010:may_open+0x4b1/0x4c0 [ 75.121777][ T5340] Code: 38 c1 0f 8c 1e fd ff ff 4c 89 e7 e8 19 21 ec ff e9 11 fd ff ff e8 6f 9e 88 ff 4c 89 f7 48 c7 c6 c0 54 99 8b e8 10 67 f0 fe 90 <0f> 0b 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 75.131594][ T5340] RSP: 0018:ffffc9000d4b7940 EFLAGS: 00010246 [ 75.135053][ T5340] RAX: 000000000000004d RBX: dffffc0000000000 RCX: baf0a1d33b2fa600 [ 75.139196][ T5340] RDX: ffffc9000ddb2000 RSI: 0000000000000a14 RDI: 0000000000000a15 [ 75.142894][ T5340] RBP: 0000000000109000 R08: ffff88801fc24293 R09: 1ffff11003f84852 [ 75.146596][ T5340] R10: dffffc0000000000 R11: ffffed1003f84853 R12: 0000000000000000 [ 75.150419][ T5340] R13: ffffffff8e29e6c0 R14: ffff888052cac588 R15: 0000000000000004 [ 75.154127][ T5340] FS: 00007f8c4be8d6c0(0000) GS:ffff88808d21c000(0000) knlGS:0000000000000000 [ 75.158341][ T5340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.161173][ T5340] CR2: 00007ffdf733ab9c CR3: 0000000033557000 CR4: 0000000000352ef0 [ 75.164563][ T5340] Call Trace: [ 75.166047][ T5340] [ 75.167358][ T5340] path_openat+0x2d91/0x3830 [ 75.169317][ T5340] ? __pfx_path_openat+0x10/0x10 [ 75.171611][ T5340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.174229][ T5340] do_filp_open+0x1fa/0x410 [ 75.176499][ T5340] ? __lock_acquire+0xab9/0xd20 [ 75.178724][ T5340] ? __pfx_do_filp_open+0x10/0x10 [ 75.180916][ T5340] ? _raw_spin_unlock+0x28/0x50 [ 75.183207][ T5340] ? alloc_fd+0x64c/0x6c0 [ 75.185143][ T5340] do_sys_openat2+0x121/0x1c0 [ 75.187417][ T5340] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.189975][ T5340] ? rcu_is_watching+0x15/0xb0 [ 75.192180][ T5340] __x64_sys_open+0x11e/0x150 [ 75.194240][ T5340] do_syscall_64+0xfa/0x3b0 [ 75.196156][ T5340] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.198335][ T5340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.201106][ T5340] ? clear_bhb_loop+0x60/0xb0 [ 75.203468][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.206207][ T5340] RIP: 0033:0x7f8c4af8e929 [ 75.208243][ T5340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.216888][ T5340] RSP: 002b:00007f8c4be8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 75.220865][ T5340] RAX: ffffffffffffffda RBX: 00007f8c4b1b5fa0 RCX: 00007f8c4af8e929 [ 75.224594][ T5340] RDX: 0000000000000042 RSI: 0000000000101000 RDI: 0000200000000040 [ 75.228048][ T5340] RBP: 00007f8c4b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.231838][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.235421][ T5340] R13: 0000000000000000 R14: 00007f8c4b1b5fa0 R15: 00007ffe560baaa8 [ 75.239017][ T5340] [ 75.240422][ T5340] Modules linked in: [ 75.242723][ T5340] ---[ end trace 0000000000000000 ]--- [ 75.250487][ T5340] RIP: 0010:may_open+0x4b1/0x4c0 [ 75.253188][ T5340] Code: 38 c1 0f 8c 1e fd ff ff 4c 89 e7 e8 19 21 ec ff e9 11 fd ff ff e8 6f 9e 88 ff 4c 89 f7 48 c7 c6 c0 54 99 8b e8 10 67 f0 fe 90 <0f> 0b 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 75.262535][ T5340] RSP: 0018:ffffc9000d4b7940 EFLAGS: 00010246 [ 75.265465][ T5340] RAX: 000000000000004d RBX: dffffc0000000000 RCX: baf0a1d33b2fa600 [ 75.269856][ T5340] RDX: ffffc9000ddb2000 RSI: 0000000000000a14 RDI: 0000000000000a15 [ 75.274071][ T5340] RBP: 0000000000109000 R08: ffff88801fc24293 R09: 1ffff11003f84852 [ 75.278627][ T5340] R10: dffffc0000000000 R11: ffffed1003f84853 R12: 0000000000000000 [ 75.283037][ T5340] R13: ffffffff8e29e6c0 R14: ffff888052cac588 R15: 0000000000000004 [ 75.287022][ T5340] FS: 00007f8c4be8d6c0(0000) GS:ffff88808d21c000(0000) knlGS:0000000000000000 [ 75.290679][ T5340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.293526][ T5340] CR2: 00007f8c4be6bfc8 CR3: 0000000033557000 CR4: 0000000000352ef0 [ 75.296586][ T5340] Kernel panic - not syncing: Fatal exception [ 75.299560][ T5340] Kernel Offset: disabled [ 75.301635][ T5340] Rebooting in 86400 seconds..