------------[ cut here ]------------
WARNING: CPU: 1 PID: 10030 at fs/nilfs2/dat.c:193 nilfs_dat_commit_end+0x5ac/0x6f8
Modules linked in:
CPU: 1 PID: 10030 Comm: syz-executor.2 Not tainted 6.2.0-syzkaller-18302-g596b6b709632 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : nilfs_dat_commit_end+0x5ac/0x6f8
lr : nilfs_dat_commit_end+0x5a8/0x6f8 fs/nilfs2/dat.c:193
sp : ffff800021757600
x29: ffff800021757620 x28: 1fffe00025d3ccdd x27: 1ffff000042eaed7
x26: dfff800000000000 x25: 0000000000000003 x24: ffff0000d2cb4820
x23: 0000000000000003 x22: ffff00012e9e66e8 x21: ffff8000217576b8
x20: ffff00012e9e51c0 x19: ffff8000217576a0 x18: 1fffe0003689f976
x17: ffff800015b8d000 x16: ffff800008269ec8 x15: 0000000000000000
x14: 1ffff00002b720af x13: dfff800000000000 x12: 0000000000040000
x11: 00000000000376ac x10: ffff8000287dd000 x9 : ffff800009e1c8a0
x8 : 00000000000376ad x7 : ffff800009e4dbdc x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff0000d2cb4000
x2 : ffff0000de279000 x1 : 0000000000000003 x0 : 00000000a3190002
Call trace:
 nilfs_dat_commit_end+0x5ac/0x6f8
 nilfs_bmap_commit_end_ptr fs/nilfs2/bmap.h:219 [inline]
 nilfs_direct_delete+0x278/0x2c0 fs/nilfs2/direct.c:157
 nilfs_bmap_do_delete fs/nilfs2/bmap.c:176 [inline]
 nilfs_bmap_do_truncate fs/nilfs2/bmap.c:264 [inline]
 nilfs_bmap_truncate+0x2a0/0x4c0 fs/nilfs2/bmap.c:297
 nilfs_truncate_bmap+0x198/0x314 fs/nilfs2/inode.c:846
 nilfs_evict_inode+0x14c/0x3a4 fs/nilfs2/inode.c:933
 evict+0x260/0x68c fs/inode.c:664
 iput_final fs/inode.c:1747 [inline]
 iput+0x968/0xa4c fs/inode.c:1773
 do_unlinkat+0x520/0x820 fs/namei.c:4327
 __do_sys_unlinkat fs/namei.c:4363 [inline]
 __se_sys_unlinkat fs/namei.c:4356 [inline]
 __arm64_sys_unlinkat+0xcc/0xfc fs/namei.c:4356
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591
irq event stamp: 10706
hardirqs last  enabled at (10705): [<ffff800008974114>] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:242
hardirqs last disabled at (10706): [<ffff800012358d60>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (10212): [<ffff800008020ea8>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last  enabled at (10212): [<ffff800008020ea8>] __do_softirq+0xd4c/0xfa4 kernel/softirq.c:600
softirqs last disabled at (10087): [<ffff80000802b4a4>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80
---[ end trace 0000000000000000 ]---
NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed