do_iter_write+0x1f6/0x8d0 fs/read_write.c:860
 iter_file_splice_write+0x86d/0x1010 fs/splice.c:736
 do_splice_from fs/splice.c:933 [inline]
 direct_splice_actor+0xea/0x1c0 fs/splice.c:1142
 splice_direct_to_actor+0x376/0x9e0 fs/splice.c:1088
 do_splice_direct+0x2ac/0x3f0 fs/splice.c:1194
 do_sendfile+0x62c/0x1000 fs/read_write.c:1254
 __do_sys_sendfile64 fs/read_write.c:1322 [inline]
 __se_sys_sendfile64+0x17c/0x1e0 fs/read_write.c:1308
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x45/0x110 arch/x86/entry/common.c:82
------------[ cut here ]------------
kernel BUG at mm/filemap.c:1577!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 5513 Comm: segctord Not tainted 6.7.0-rc1-syzkaller-00331-gb8f1fa2419c1 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
RIP: 0010:folio_end_writeback+0x424/0x6f0 mm/filemap.c:1577
Code: 25 ff 0f 00 00 0f 84 f0 00 00 00 e8 36 29 cd ff e9 52 fc ff ff e8 2c 29 cd ff 4c 89 ff 48 c7 c6 c0 1e 73 8b e8 1d 05 10 00 90 <0f> 0b e8 15 29 cd ff 4c 89 ff 48 c7 c6 a0 29 73 8b e8 06 05 10 00
RSP: 0018:ffffc900095d76a0 EFLAGS: 00010246
RAX: 706b4c30b9b83a00 RBX: dffffc0000000000 RCX: ffffc900095d7503
RDX: 0000000000000001 RSI: ffffffff8b6ac0c0 RDI: ffffffff8bbdf3c0
RBP: 0000000000000000 R08: ffffffff8f00c0ef R09: 1ffffffff1e0181d
R10: dffffc0000000000 R11: fffffbfff1e0181e R12: ffff88807351aa08
R13: 1ffffd4000318121 R14: ffffea00018c0908 R15: ffffea00018c0900
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fecef57eff8 CR3: 00000000297fb000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 nilfs_segctor_complete_write fs/nilfs2/segment.c:1875 [inline]
 nilfs_segctor_wait fs/nilfs2/segment.c:1962 [inline]
 nilfs_segctor_do_construct+0x511a/0x6e40 fs/nilfs2/segment.c:2128
 nilfs_segctor_construct+0x145/0x8c0 fs/nilfs2/segment.c:2415
 nilfs_segctor_thread_construct fs/nilfs2/segment.c:2523 [inline]
 nilfs_segctor_thread+0x53a/0x1140 fs/nilfs2/segment.c:2606
 kthread+0x2d3/0x370 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:folio_end_writeback+0x424/0x6f0 mm/filemap.c:1577
Code: 25 ff 0f 00 00 0f 84 f0 00 00 00 e8 36 29 cd ff e9 52 fc ff ff e8 2c 29 cd ff 4c 89 ff 48 c7 c6 c0 1e 73 8b e8 1d 05 10 00 90 <0f> 0b e8 15 29 cd ff 4c 89 ff 48 c7 c6 a0 29 73 8b e8 06 05 10 00
RSP: 0018:ffffc900095d76a0 EFLAGS: 00010246
RAX: 706b4c30b9b83a00 RBX: dffffc0000000000 RCX: ffffc900095d7503
RDX: 0000000000000001 RSI: ffffffff8b6ac0c0 RDI: ffffffff8bbdf3c0
RBP: 0000000000000000 R08: ffffffff8f00c0ef R09: 1ffffffff1e0181d
R10: dffffc0000000000 R11: fffffbfff1e0181e R12: ffff88807351aa08
R13: 1ffffd4000318121 R14: ffffea00018c0908 R15: ffffea00018c0900
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056028c5e7950 CR3: 00000000297fb000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400