------------[ cut here ]------------
WARNING: CPU: 1 PID: 7855 at fs/nsfs.c:493 nsfs_fh_to_dentry+0xa14/0xb04 fs/nsfs.c:493
Modules linked in:
CPU: 1 UID: 0 PID: 7855 Comm: syz.3.239 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : nsfs_fh_to_dentry+0xa14/0xb04 fs/nsfs.c:493
lr : nsfs_fh_to_dentry+0xa14/0xb04 fs/nsfs.c:493
sp : ffff80009d0378a0
x29: ffff80009d037920 x28: 0000000000000000 x27: 1fffe00018e01032
x26: dfff800000000000 x25: ffff80009d0378a0 x24: ffff700013a06f14
x23: 1ffff00012579b5d x22: ffff0000c7008194 x21: 0000000000000000
x20: 00000000effffffe x19: ffff800092bcdae8 x18: 0000000000000000
x17: ffff800093305000 x16: ffff800080529c98 x15: 0000000000000001
x14: 1ffff00011ec31ab x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000080000 x10: 00000000000002bd x9 : ffff8000a9173000
x8 : 00000000000002be x7 : ffff800080e5de30 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff800080457068
x2 : 0000000000000000 x1 : 0000000000000000 x0 : 00000000effffffe
Call trace:
 nsfs_fh_to_dentry+0xa14/0xb04 fs/nsfs.c:493 (P)
 exportfs_decode_fh_raw+0x15c/0x5d8 fs/exportfs/expfs.c:456
 do_handle_to_path+0xa0/0x198 fs/fhandle.c:276
 handle_to_path fs/fhandle.c:400 [inline]
 do_handle_open+0x59c/0x74c fs/fhandle.c:415
 __do_sys_open_by_handle_at fs/fhandle.c:455 [inline]
 __se_sys_open_by_handle_at fs/fhandle.c:446 [inline]
 __arm64_sys_open_by_handle_at+0x80/0x94 fs/fhandle.c:446
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:746
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:765
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
irq event stamp: 678
hardirqs last  enabled at (677): [<ffff800080457000>] seqcount_lockdep_reader_access include/linux/seqlock.h:74 [inline]
hardirqs last  enabled at (677): [<ffff800080457000>] read_seqbegin include/linux/seqlock.h:836 [inline]
hardirqs last  enabled at (677): [<ffff800080457000>] ns_tree_lookup_rcu+0x218/0x474 kernel/nstree.c:191
hardirqs last disabled at (678): [<ffff80008ade9670>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434
softirqs last  enabled at (670): [<ffff8000801f95fc>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (668): [<ffff8000801f95c8>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---