------------[ cut here ]------------
WARNING: CPU: 1 PID: 30156 at fs/nilfs2/dat.c:193 nilfs_dat_commit_end+0x5ac/0x6f8
Modules linked in:
CPU: 1 PID: 30156 Comm: syz-executor.2 Not tainted 6.2.0-syzkaller-18300-g2ebd1fbb946d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : nilfs_dat_commit_end+0x5ac/0x6f8
lr : nilfs_dat_commit_end+0x5a8/0x6f8 fs/nilfs2/dat.c:193
sp : ffff80002ca07600
x29: ffff80002ca07620 x28: 1fffe0001b82c60d x27: 1ffff00005940ed7
x26: dfff800000000000 x25: 0000000000000003 x24: ffff0000d89f0820
x23: 0000000000000003 x22: ffff0000dc163068 x21: ffff80002ca076b8
x20: ffff0000dc161b40 x19: ffff80002ca076a0 x18: 1fffe0003689f976
x17: ffff800015b8d000 x16: ffff800008269ec8 x15: 0000000000000000
x14: 1ffff00002b720af x13: dfff800000000000 x12: 0000000000040000
x11: 000000000001fa30 x10: ffff800022cea000 x9 : ffff800009e1c8a0
x8 : 000000000001fa31 x7 : ffff800009e4dbdc x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff0000d89f0000
x2 : ffff0000e080f570 x1 : 0000000000000003 x0 : 00000000a3190002
Call trace:
 nilfs_dat_commit_end+0x5ac/0x6f8
 nilfs_bmap_commit_end_ptr fs/nilfs2/bmap.h:219 [inline]
 nilfs_direct_delete+0x278/0x2c0 fs/nilfs2/direct.c:157
 nilfs_bmap_do_delete fs/nilfs2/bmap.c:176 [inline]
 nilfs_bmap_do_truncate fs/nilfs2/bmap.c:264 [inline]
 nilfs_bmap_truncate+0x2a0/0x4c0 fs/nilfs2/bmap.c:297
 nilfs_truncate_bmap+0x198/0x314 fs/nilfs2/inode.c:846
 nilfs_evict_inode+0x14c/0x3a4 fs/nilfs2/inode.c:933
 evict+0x260/0x68c fs/inode.c:664
 iput_final fs/inode.c:1747 [inline]
 iput+0x968/0xa4c fs/inode.c:1773
 do_unlinkat+0x520/0x820 fs/namei.c:4327
 __do_sys_unlinkat fs/namei.c:4363 [inline]
 __se_sys_unlinkat fs/namei.c:4356 [inline]
 __arm64_sys_unlinkat+0xcc/0xfc fs/namei.c:4356
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591
irq event stamp: 8212
hardirqs last  enabled at (8211): [<ffff800008288cf8>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1370 [inline]
hardirqs last  enabled at (8211): [<ffff800008288cf8>] finish_lock_switch+0xbc/0x1e4 kernel/sched/core.c:5055
hardirqs last disabled at (8212): [<ffff800012358d60>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (8074): [<ffff800008020ea8>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last  enabled at (8074): [<ffff800008020ea8>] __do_softirq+0xd4c/0xfa4 kernel/softirq.c:600
softirqs last disabled at (7825): [<ffff80000802b4a4>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80
---[ end trace 0000000000000000 ]---
NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed