------------[ cut here ]------------ WARNING: CPU: 0 PID: 18067 at fs/nilfs2/dat.c:193 nilfs_dat_commit_end+0x5ac/0x6f8 Modules linked in: CPU: 0 PID: 18067 Comm: syz-executor.5 Not tainted 6.2.0-syzkaller-18302-g596b6b709632 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : nilfs_dat_commit_end+0x5ac/0x6f8 lr : nilfs_dat_commit_end+0x5a8/0x6f8 fs/nilfs2/dat.c:193 sp : ffff800022007600 x29: ffff800022007620 x28: 1fffe000199b6975 x27: 1ffff00004400ed7 x26: dfff800000000000 x25: 0000000000000003 x24: ffff0000ef272820 x23: 0000000000000003 x22: ffff0000ccdb4ba8 x21: ffff8000220076b8 x20: ffff0000ccdb3680 x19: ffff8000220076a0 x18: ffff800022006a00 x17: ffff80001058843c x16: ffff800008269ec8 x15: ffff800008a76b8c x14: 1ffff00002b720af x13: dfff800000000000 x12: 0000000000040000 x11: 0000000000028d34 x10: ffff800022bda000 x9 : ffff800009e1c8a0 x8 : 0000000000028d35 x7 : ffff800009e4dbdc x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff0000ef272000 x2 : ffff000130e2d3a0 x1 : 0000000000000003 x0 : 00000000a3190002 Call trace: nilfs_dat_commit_end+0x5ac/0x6f8 nilfs_bmap_commit_end_ptr fs/nilfs2/bmap.h:219 [inline] nilfs_direct_delete+0x278/0x2c0 fs/nilfs2/direct.c:157 nilfs_bmap_do_delete fs/nilfs2/bmap.c:176 [inline] nilfs_bmap_do_truncate fs/nilfs2/bmap.c:264 [inline] nilfs_bmap_truncate+0x2a0/0x4c0 fs/nilfs2/bmap.c:297 nilfs_truncate_bmap+0x198/0x314 fs/nilfs2/inode.c:846 nilfs_evict_inode+0x14c/0x3a4 fs/nilfs2/inode.c:933 evict+0x260/0x68c fs/inode.c:664 iput_final fs/inode.c:1747 [inline] iput+0x968/0xa4c fs/inode.c:1773 do_unlinkat+0x520/0x820 fs/namei.c:4327 __do_sys_unlinkat fs/namei.c:4363 [inline] __se_sys_unlinkat fs/namei.c:4356 [inline] __arm64_sys_unlinkat+0xcc/0xfc fs/namei.c:4356 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 irq event stamp: 7930 hardirqs last enabled at (7929): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:242 hardirqs last disabled at (7930): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (7696): [] softirq_handle_end kernel/softirq.c:414 [inline] softirqs last enabled at (7696): [] __do_softirq+0xd4c/0xfa4 kernel/softirq.c:600 softirqs last disabled at (7665): [] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 ---[ end trace 0000000000000000 ]--- NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed