------------[ cut here ]------------
WARNING: CPU: 1 PID: 12016 at fs/nilfs2/btree.c:2275 nilfs_btree_assign+0x4dc/0x4e8 fs/nilfs2/btree.c:2275
Modules linked in:
CPU: 1 PID: 12016 Comm: segctord Not tainted 6.0.0-rc6-syzkaller-17742-gc194837ebb57 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : nilfs_btree_assign+0x4dc/0x4e8 fs/nilfs2/btree.c:2275
lr : nilfs_btree_assign+0x4dc/0x4e8 fs/nilfs2/btree.c:2275
sp : ffff80001a263ad0
x29: ffff80001a263b20 x28: ffff80001a263bf8 x27: 0000000000000000
x26: 0000000000000000 x25: 0000000000000001 x24: 00000000fffffffe
x23: ffff80001a263bf0 x22: ffff0000ca65df18 x21: 0000000000000064
x20: 0000000000040013 x19: ffff0000c9177700 x18: fffffffffffffff5
x17: ffff80000bffd6bc x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000000 x13: 00000000ffffffef x12: ffff80000d569440
x11: ff80800008f5e06c x10: 0000000000000000 x9 : ffff800008f5e06c
x8 : ffff0000c10ab500 x7 : ffff8000083d41c8 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000020000 x3 : 000000000000000a
x2 : 0000000000000000 x1 : 00000000fffffffe x0 : 00000000fffffffe
Call trace:
 nilfs_btree_assign+0x4dc/0x4e8 fs/nilfs2/btree.c:2275
 nilfs_bmap_assign+0x54/0xc0 fs/nilfs2/bmap.c:382
 nilfs_segctor_update_payload_blocknr+0x1a8/0x3c8 fs/nilfs2/segment.c:1589
 nilfs_segctor_assign fs/nilfs2/segment.c:1623 [inline]
 nilfs_segctor_do_construct+0x740/0xee8 fs/nilfs2/segment.c:2050
 nilfs_segctor_construct+0xa0/0x380 fs/nilfs2/segment.c:2375
 nilfs_segctor_thread_construct fs/nilfs2/segment.c:2483 [inline]
 nilfs_segctor_thread+0x180/0x660 fs/nilfs2/segment.c:2566
 kthread+0x12c/0x158 kernel/kthread.c:376
 ret_from_fork+0x10/0x20
irq event stamp: 450
hardirqs last  enabled at (449): [<ffff80000bfcbc5c>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last  enabled at (449): [<ffff80000bfcbc5c>] _raw_spin_unlock_irqrestore+0x48/0x8c kernel/locking/spinlock.c:194
hardirqs last disabled at (450): [<ffff80000bfb9264>] el1_dbg+0x24/0x5c arch/arm64/kernel/entry-common.c:404
softirqs last  enabled at (34): [<ffff8000080102e4>] _stext+0x2e4/0x37c
softirqs last disabled at (23): [<ffff800008017c14>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---