program: syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x90, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1, 0xdaf, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) semget(0x3, 0x2, 0x284) r1 = semget(0x1, 0x3, 0x204) semctl$IPC_RMID(r1, 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {&(0x7f0000000340)=[0x6, 0x3], 0x2, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) [ 83.570278][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.573608][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 83.577464][ T5299] Bluetooth: hci0: command tx timeout [ 83.762072][ T5324] loop0: detected capacity change from 0 to 4096 [ 83.811745][ T5324] NILFS (loop0): invalid segment: Checksum error in segment payload [ 83.826246][ T5324] NILFS (loop0): trying rollback from an earlier position [ 83.860007][ T5324] NILFS (loop0): recovery complete [ 83.872415][ T5329] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.892482][ T5324] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 83.898731][ T5324] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 83.903460][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 83.907547][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.912260][ T5324] RIP: 0010:nilfs_mdt_save_to_shadow_map+0x141/0x1c0 [ 83.915212][ T5324] Code: 3f 4c 8d 63 d8 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 1e ac 84 fe 4d 8b 24 24 49 83 c4 30 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 00 ac 84 fe 49 8b 34 24 4c 89 ff [ 83.925533][ T5324] RSP: 0018:ffffc9000df5f708 EFLAGS: 00010206 [ 83.928355][ T5324] RAX: 0000000000000006 RBX: ffff88801fcc47a8 RCX: 0000000000000002 [ 83.931736][ T5324] RDX: ffff88801c3124c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.935290][ T5324] RBP: 0000000000000000 R08: ffff88801c3124c0 R09: 0000000000000003 [ 83.939330][ T5324] R10: 0000000000000406 R11: 0000000000000002 R12: 0000000000000030 [ 83.943111][ T5324] R13: dffffc0000000000 R14: ffff88801f1a1d40 R15: ffff88801fcbfc48 [ 83.946726][ T5324] FS: 00007fb846a666c0(0000) GS:ffff88808ca55000(0000) knlGS:0000000000000000 [ 83.951536][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.954775][ T5324] CR2: 0000555574a554e0 CR3: 000000004429b000 CR4: 0000000000352ef0 [ 83.958338][ T5324] Call Trace: [ 83.960053][ T5324] [ 83.961426][ T5324] nilfs_clean_segments+0x162/0xa50 [ 83.963808][ T5324] ? nilfs_ioctl_move_blocks+0x94b/0xda0 [ 83.966694][ T5324] ? __pfx_nilfs_clean_segments+0x10/0x10 [ 83.969988][ T5324] ? _copy_from_user+0x94/0xb0 [ 83.972572][ T5324] nilfs_ioctl+0x261f/0x2780 [ 83.974594][ T5324] ? __pfx_nilfs_ioctl+0x10/0x10 [ 83.976693][ T5324] ? kasan_save_track+0x4f/0x80 [ 83.979159][ T5324] ? kasan_save_track+0x3e/0x80 [ 83.981707][ T5324] ? kasan_save_free_info+0x46/0x50 [ 83.984634][ T5324] ? __kasan_slab_free+0x5c/0x80 [ 83.987204][ T5324] ? kfree+0x1c1/0x630 [ 83.988977][ T5324] ? tomoyo_path_number_perm+0x501/0x630 [ 83.991493][ T5324] ? security_file_ioctl+0xc3/0x2a0 [ 83.993819][ T5324] ? __se_sys_ioctl+0x47/0x170 [ 83.995890][ T5324] ? do_syscall_64+0x14d/0xf80 [ 83.998195][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.001726][ T5324] ? kasan_quarantine_put+0xbb/0x1f0 [ 84.004295][ T5324] ? tomoyo_path_number_perm+0x219/0x630 [ 84.006774][ T5324] ? tomoyo_path_number_perm+0x219/0x630 [ 84.009316][ T5324] ? do_vfs_ioctl+0x1166/0x1530 [ 84.011664][ T5324] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 84.013955][ T5324] ? do_futex+0x333/0x420 [ 84.016249][ T5324] ? semctl_down+0x271/0x8b0 [ 84.018671][ T5324] ? __fget_files+0x2a/0x420 [ 84.020882][ T5324] ? __fget_files+0x2a/0x420 [ 84.022844][ T5324] ? __fget_files+0x3a0/0x420 [ 84.024933][ T5324] ? __fget_files+0x2a/0x420 [ 84.027351][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20 [ 84.029917][ T5324] ? __pfx_nilfs_ioctl+0x10/0x10 [ 84.032592][ T5324] __se_sys_ioctl+0xfc/0x170 [ 84.034909][ T5324] do_syscall_64+0x14d/0xf80 [ 84.037023][ T5324] ? trace_irq_disable+0x3b/0x150 [ 84.039354][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.042408][ T5324] ? clear_bhb_loop+0x40/0x90 [ 84.044984][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.048057][ T5324] RIP: 0033:0x7fb845b9c799 [ 84.050167][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.059315][ T5324] RSP: 002b:00007fb846a65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.063081][ T5324] RAX: ffffffffffffffda RBX: 00007fb845e15fa0 RCX: 00007fb845b9c799 [ 84.066741][ T5324] RDX: 0000200000000640 RSI: 0000000040786e88 RDI: 0000000000000004 [ 84.070810][ T5324] RBP: 00007fb845c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 84.074317][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.077692][ T5324] R13: 00007fb845e16038 R14: 00007fb845e15fa0 R15: 00007ffc474f89f8 [ 84.082140][ T5324] [ 84.083855][ T5324] Modules linked in: [ 84.086202][ T5324] ---[ end trace 0000000000000000 ]--- [ 84.094742][ T5324] RIP: 0010:nilfs_mdt_save_to_shadow_map+0x141/0x1c0 [ 84.098650][ T5324] Code: 3f 4c 8d 63 d8 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 1e ac 84 fe 4d 8b 24 24 49 83 c4 30 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 00 ac 84 fe 49 8b 34 24 4c 89 ff [ 84.108732][ T5324] RSP: 0018:ffffc9000df5f708 EFLAGS: 00010206 [ 84.113275][ T5324] RAX: 0000000000000006 RBX: ffff88801fcc47a8 RCX: 0000000000000002 [ 84.117274][ T5324] RDX: ffff88801c3124c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.121746][ T5324] RBP: 0000000000000000 R08: ffff88801c3124c0 R09: 0000000000000003 [ 84.125902][ T5324] R10: 0000000000000406 R11: 0000000000000002 R12: 0000000000000030 [ 84.129643][ T5324] R13: dffffc0000000000 R14: ffff88801f1a1d40 R15: ffff88801fcbfc48 [ 84.133911][ T5324] FS: 00007fb846a666c0(0000) GS:ffff88808ca55000(0000) knlGS:0000000000000000 [ 84.138506][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.141636][ T5324] CR2: 00007f23863d2d20 CR3: 000000004429b000 CR4: 0000000000352ef0 [ 84.146361][ T5324] Kernel panic - not syncing: Fatal exception [ 84.149563][ T5324] Kernel Offset: disabled [ 84.151464][ T5324] Rebooting in 86400 seconds..