NILFS (loop0): nilfs_get_block (ino=15): a race condition while inserting a data block at offset=4
------------[ cut here ]------------
kernel BUG at fs/buffer.c:3017!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 3960 Comm: syz-executor186 Not tainted 5.15.151-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : submit_bh_wbc+0x578/0x610 fs/buffer.c:3017
lr : submit_bh_wbc+0x578/0x610 fs/buffer.c:3017
sp : ffff800018e47390
x29: ffff800018e473c0 x28: ffff800008a68e60 x27: 0000000000000000
x26: ffff800008a69080 x25: 1fffe0001be9553f x24: dfff800000000000
x23: 0000000000000000 x22: ffff0000df4aa9f8 x21: 0000000000000000
x20: 0000000000000000 x19: 0000000000000004 x18: ffff800018e46820
x17: 1fffe0003690298e x16: ffff80001197884c x15: 000000000000bb64
x14: 1ffff0000292206a x13: dfff800000000000 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : ffff0000c87ab680
x8 : ffff800008a72650 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000000
x2 : ffff0000df4aa9f8 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 submit_bh_wbc+0x578/0x610 fs/buffer.c:3017
 ll_rw_block+0x1f0/0x35c
 __block_write_begin_int+0xb44/0x1608 fs/buffer.c:2042
 __block_write_begin fs/buffer.c:2062 [inline]
 block_write_begin+0x60/0xdc fs/buffer.c:2122
 nilfs_write_begin+0xb4/0x124 fs/nilfs2/inode.c:263
 generic_perform_write+0x24c/0x520 mm/filemap.c:3785
 __generic_file_write_iter+0x230/0x454 mm/filemap.c:3912
 generic_file_write_iter+0xb4/0x1b8 mm/filemap.c:3944
 do_iter_readv_writev+0x420/0x5f8
 do_iter_write+0x1b8/0x664 fs/read_write.c:855
 vfs_writev fs/read_write.c:928 [inline]
 do_pwritev+0x1ec/0x334 fs/read_write.c:1025
 __do_sys_pwritev2 fs/read_write.c:1084 [inline]
 __se_sys_pwritev2 fs/read_write.c:1075 [inline]
 __arm64_sys_pwritev2+0xd4/0x108 fs/read_write.c:1075
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: 17ffff44 97e93f8b d4210000 97e93f89 (d4210000) 
---[ end trace c3972b664df72317 ]---