------------[ cut here ]------------ WARNING: CPU: 1 PID: 10030 at fs/nilfs2/dat.c:193 nilfs_dat_commit_end+0x5ac/0x6f8 Modules linked in: CPU: 1 PID: 10030 Comm: syz-executor.2 Not tainted 6.2.0-syzkaller-18302-g596b6b709632 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : nilfs_dat_commit_end+0x5ac/0x6f8 lr : nilfs_dat_commit_end+0x5a8/0x6f8 fs/nilfs2/dat.c:193 sp : ffff800021757600 x29: ffff800021757620 x28: 1fffe00025d3ccdd x27: 1ffff000042eaed7 x26: dfff800000000000 x25: 0000000000000003 x24: ffff0000d2cb4820 x23: 0000000000000003 x22: ffff00012e9e66e8 x21: ffff8000217576b8 x20: ffff00012e9e51c0 x19: ffff8000217576a0 x18: 1fffe0003689f976 x17: ffff800015b8d000 x16: ffff800008269ec8 x15: 0000000000000000 x14: 1ffff00002b720af x13: dfff800000000000 x12: 0000000000040000 x11: 00000000000376ac x10: ffff8000287dd000 x9 : ffff800009e1c8a0 x8 : 00000000000376ad x7 : ffff800009e4dbdc x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff0000d2cb4000 x2 : ffff0000de279000 x1 : 0000000000000003 x0 : 00000000a3190002 Call trace: nilfs_dat_commit_end+0x5ac/0x6f8 nilfs_bmap_commit_end_ptr fs/nilfs2/bmap.h:219 [inline] nilfs_direct_delete+0x278/0x2c0 fs/nilfs2/direct.c:157 nilfs_bmap_do_delete fs/nilfs2/bmap.c:176 [inline] nilfs_bmap_do_truncate fs/nilfs2/bmap.c:264 [inline] nilfs_bmap_truncate+0x2a0/0x4c0 fs/nilfs2/bmap.c:297 nilfs_truncate_bmap+0x198/0x314 fs/nilfs2/inode.c:846 nilfs_evict_inode+0x14c/0x3a4 fs/nilfs2/inode.c:933 evict+0x260/0x68c fs/inode.c:664 iput_final fs/inode.c:1747 [inline] iput+0x968/0xa4c fs/inode.c:1773 do_unlinkat+0x520/0x820 fs/namei.c:4327 __do_sys_unlinkat fs/namei.c:4363 [inline] __se_sys_unlinkat fs/namei.c:4356 [inline] __arm64_sys_unlinkat+0xcc/0xfc fs/namei.c:4356 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 irq event stamp: 10706 hardirqs last enabled at (10705): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:242 hardirqs last disabled at (10706): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (10212): [] softirq_handle_end kernel/softirq.c:414 [inline] softirqs last enabled at (10212): [] __do_softirq+0xd4c/0xfa4 kernel/softirq.c:600 softirqs last disabled at (10087): [] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 ---[ end trace 0000000000000000 ]--- NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed