program:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc4, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1, 0x4, 0x3, 0x5, 0x7fff, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1000, 0x10009, 0x6})
syz_mount_image$nilfs2(&(0x7f0000000b80), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x77ffff7, 0x4012011, r2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x8000, 0x0)
sendfile(r3, r4, 0x0, 0xfffe82)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
open(0x0, 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000003c0)={0xda2, 0x8166, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6})
r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
dup(r1)
close_range(r0, 0xffffffffffffffff, 0x0)
r7 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
[ 83.750712][ T4650] Bluetooth: hci0: command tx timeout
[ 83.882277][ T5320] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[ 83.916248][ T5320] loop0: detected capacity change from 0 to 2048
[ 84.043006][ T5322] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 84.156539][ T5321] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12
[ 84.244479][ T5321] Remounting filesystem read-only
[ 84.284762][ T5322] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=4)
[ 84.299587][ T5322] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=5)
[ 84.315426][ T5322] ------------[ cut here ]------------
[ 84.318855][ T5322] ret
[ 84.318870][ T5322] WARNING: fs/nilfs2/segment.c:1507 at nilfs_segctor_abort_construction+0xd89/0xdf0, CPU#0: segctord/5322
[ 84.324834][ T5322] Modules linked in:
[ 84.327488][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: segctord Not tainted syzkaller #0 PREEMPT(full)
[ 84.332734][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 84.337250][ T5322] RIP: 0010:nilfs_segctor_abort_construction+0xd89/0xdf0
[ 84.340121][ T5322] Code: 8b 05 3b fc 98 0f 48 3b 84 24 a0 00 00 00 75 3e 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 88 5e f2 fd 90 <0f> 0b 90 e9 cc f9 ff ff e8 7a 5e f2 fd 90 0f 0b 90 e9 60 fb ff ff
[ 84.348512][ T5322] RSP: 0018:ffffc9000e7bf600 EFLAGS: 00010293
[ 84.351219][ T5322] RAX: ffffffff83d42408 RBX: ffff88801add1008 RCX: ffff888000fb2540
[ 84.354633][ T5322] RDX: 0000000000000000 RSI: 00000000fffffffb RDI: 0000000000000000
[ 84.358564][ T5322] RBP: ffffc9000e7bf6f0 R08: ffff88803ffd3c07 R09: 1ffff11007ffa780
[ 84.362106][ T5322] R10: dffffc0000000000 R11: ffffed1007ffa781 R12: 0000000000000000
[ 84.365543][ T5322] R13: ffff88801add1078 R14: ffff88801ad665b0 R15: 00000000fffffffb
[ 84.369375][ T5322] FS: 0000000000000000(0000) GS:ffff88808c54e000(0000) knlGS:0000000000000000
[ 84.373364][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 84.376166][ T5322] CR2: 0000200000000180 CR3: 00000000129b7000 CR4: 0000000000352ef0
[ 84.379275][ T5322] Call Trace:
[ 84.380863][ T5322]
[ 84.382487][ T5322] ? __pfx_nilfs_cpfile_create_checkpoint+0x10/0x10
[ 84.386007][ T5322] ? __pfx_nilfs_segctor_abort_construction+0x10/0x10
[ 84.388858][ T5322] ? nilfs_segbuf_extend_segsum+0x2c8/0x3d0
[ 84.391332][ T5322] nilfs_segctor_do_construct+0x72e1/0x7bb0
[ 84.393999][ T5322] ? unwind_next_frame+0x8f/0x2550
[ 84.396387][ T5322] ? __pfx_nilfs_segctor_do_construct+0x10/0x10
[ 84.399131][ T5322] ? do_raw_spin_lock+0x12b/0x2f0
[ 84.401682][ T5322] ? do_raw_spin_unlock+0x4d/0x210
[ 84.404328][ T5322] ? _raw_spin_unlock+0x28/0x50
[ 84.406493][ T5322] ? nilfs_segctor_confirm+0x24d/0x2d0
[ 84.409390][ T5322] nilfs_segctor_construct+0x170/0x690
[ 84.412267][ T5322] nilfs_segctor_thread+0x6c9/0xdb0
[ 84.415108][ T5322] ? __pfx_nilfs_segctor_thread+0x10/0x10
[ 84.418401][ T5322] ? __pfx_autoremove_wake_function+0x10/0x10
[ 84.420998][ T5322] ? __kthread_parkme+0x71/0x1f0
[ 84.422993][ T5322] ? __kthread_parkme+0x196/0x1f0
[ 84.425273][ T5322] kthread+0x388/0x470
[ 84.427212][ T5322] ? __pfx_nilfs_segctor_thread+0x10/0x10
[ 84.430191][ T5322] ? __pfx_kthread+0x10/0x10
[ 84.432417][ T5322] ret_from_fork+0x514/0xb70
[ 84.434477][ T5322] ? __pfx_ret_from_fork+0x10/0x10
[ 84.436657][ T5322] ? __switch_to+0xc89/0x1420
[ 84.438463][ T5322] ? __pfx_kthread+0x10/0x10
[ 84.440811][ T5322] ret_from_fork_asm+0x1a/0x30
[ 84.442996][ T5322]
[ 84.444983][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 84.448022][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: segctord Not tainted syzkaller #0 PREEMPT(full)
[ 84.451817][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 84.455868][ T5322] Call Trace:
[ 84.457289][ T5322]
[ 84.458732][ T5322] vpanic+0x56c/0xa60
[ 84.460809][ T5322] ? __pfx__printk+0x10/0x10
[ 84.463230][ T5322] ? __pfx_vpanic+0x10/0x10
[ 84.465285][ T5322] ? is_bpf_text_address+0x292/0x2b0
[ 84.467470][ T5322] ? is_bpf_text_address+0x26/0x2b0
[ 84.469547][ T5322] panic+0xc5/0xd0
[ 84.471151][ T5322] ? __pfx_panic+0x10/0x10
[ 84.473103][ T5322] ? ret_from_fork_asm+0x1a/0x30
[ 84.475219][ T5322] __warn+0x315/0x4c0
[ 84.477051][ T5322] ? nilfs_segctor_abort_construction+0xd89/0xdf0
[ 84.480129][ T5322] ? nilfs_segctor_abort_construction+0xd89/0xdf0
[ 84.483066][ T5322] __report_bug+0x331/0x530
[ 84.484880][ T5322] ? nilfs_segctor_abort_construction+0xd89/0xdf0
[ 84.487407][ T5322] ? __pfx___report_bug+0x10/0x10
[ 84.489592][ T5322] ? nilfs_sufile_set_segment_usage+0x36a/0x420
[ 84.492183][ T5322] ? nilfs_segctor_abort_construction+0xd89/0xdf0
[ 84.495193][ T5322] report_bug+0x16a/0x220
[ 84.497518][ T5322] ? nilfs_segctor_abort_construction+0xd89/0xdf0
[ 84.500889][ T5322] ? nilfs_segctor_abort_construction+0xd8b/0xdf0
[ 84.503859][ T5322] handle_bug+0x9c/0x200
[ 84.505597][ T5322] exc_invalid_op+0x1a/0x50
[ 84.507260][ T5322] asm_exc_invalid_op+0x1a/0x20
[ 84.509191][ T5322] RIP: 0010:nilfs_segctor_abort_construction+0xd89/0xdf0
[ 84.511951][ T5322] Code: 8b 05 3b fc 98 0f 48 3b 84 24 a0 00 00 00 75 3e 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 88 5e f2 fd 90 <0f> 0b 90 e9 cc f9 ff ff e8 7a 5e f2 fd 90 0f 0b 90 e9 60 fb ff ff
[ 84.520624][ T5322] RSP: 0018:ffffc9000e7bf600 EFLAGS: 00010293
[ 84.523323][ T5322] RAX: ffffffff83d42408 RBX: ffff88801add1008 RCX: ffff888000fb2540
[ 84.526812][ T5322] RDX: 0000000000000000 RSI: 00000000fffffffb RDI: 0000000000000000
[ 84.530383][ T5322] RBP: ffffc9000e7bf6f0 R08: ffff88803ffd3c07 R09: 1ffff11007ffa780
[ 84.534370][ T5322] R10: dffffc0000000000 R11: ffffed1007ffa781 R12: 0000000000000000
[ 84.538215][ T5322] R13: ffff88801add1078 R14: ffff88801ad665b0 R15: 00000000fffffffb
[ 84.541503][ T5322] ? nilfs_segctor_abort_construction+0xd88/0xdf0
[ 84.543961][ T5322] ? __pfx_nilfs_cpfile_create_checkpoint+0x10/0x10
[ 84.546606][ T5322] ? __pfx_nilfs_segctor_abort_construction+0x10/0x10
[ 84.549975][ T5322] ? nilfs_segbuf_extend_segsum+0x2c8/0x3d0
[ 84.552819][ T5322] nilfs_segctor_do_construct+0x72e1/0x7bb0
[ 84.555244][ T5322] ? unwind_next_frame+0x8f/0x2550
[ 84.557486][ T5322] ? __pfx_nilfs_segctor_do_construct+0x10/0x10
[ 84.560360][ T5322] ? do_raw_spin_lock+0x12b/0x2f0
[ 84.562870][ T5322] ? do_raw_spin_unlock+0x4d/0x210
[ 84.565500][ T5322] ? _raw_spin_unlock+0x28/0x50
[ 84.567970][ T5322] ? nilfs_segctor_confirm+0x24d/0x2d0
[ 84.570339][ T5322] nilfs_segctor_construct+0x170/0x690
[ 84.572716][ T5322] nilfs_segctor_thread+0x6c9/0xdb0
[ 84.574931][ T5322] ? __pfx_nilfs_segctor_thread+0x10/0x10
[ 84.577473][ T5322] ? __pfx_autoremove_wake_function+0x10/0x10
[ 84.580288][ T5322] ? __kthread_parkme+0x71/0x1f0
[ 84.582977][ T5322] ? __kthread_parkme+0x196/0x1f0
[ 84.585788][ T5322] kthread+0x388/0x470
[ 84.587738][ T5322] ? __pfx_nilfs_segctor_thread+0x10/0x10
[ 84.590215][ T5322] ? __pfx_kthread+0x10/0x10
[ 84.592267][ T5322] ret_from_fork+0x514/0xb70
[ 84.594200][ T5322] ? __pfx_ret_from_fork+0x10/0x10
[ 84.596348][ T5322] ? __switch_to+0xc89/0x1420
[ 84.598394][ T5322] ? __pfx_kthread+0x10/0x10
[ 84.600829][ T5322] ret_from_fork_asm+0x1a/0x30
[ 84.603492][ T5322]
[ 84.605644][ T5322] Kernel Offset: disabled
[ 84.607524][ T5322] Rebooting in 86400 seconds..