------------[ cut here ]------------
WARNING: CPU: 1 PID: 3504 at fs/ext4/page-io.c:231 ext4_put_io_end_defer+0x2d5/0x300 fs/ext4/page-io.c:297
Modules linked in:
CPU: 1 PID: 3504 Comm: udevd Not tainted 5.15.156-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:ext4_add_complete_io fs/ext4/page-io.c:231 [inline]
RIP: 0010:ext4_put_io_end_defer+0x2d5/0x300 fs/ext4/page-io.c:297
Code: 65 00 eb 05 e8 ec 59 5b ff 48 8b 3c 24 48 8b 74 24 08 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d0 18 02 08 e8 cb 59 5b ff <0f> 0b e9 b7 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 85 fd ff
RSP: 0018:ffffc90000dd0ad8 EFLAGS: 00010246
RAX: ffffffff82250315 RBX: ffff88814b760378 RCX: ffff88801bbc8000
RDX: 0000000080000101 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff88805ad73e98 R08: ffffffff822500c0 R09: ffffed100e975586
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888074baac00
R13: ffff88814b760000 R14: ffff88805ad73e70 R15: dffffc0000000000
FS: 00007f73afb0ac80(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffdb7f22fc8 CR3: 000000007a0da000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<IRQ>
ext4_end_bio+0x357/0x5b0 fs/ext4/page-io.c:360
req_bio_endio block/blk-core.c:261 [inline]
blk_update_request+0x87c/0x1470 block/blk-core.c:1441
scsi_end_request+0x83/0x980 drivers/scsi/scsi_lib.c:544
scsi_io_completion+0x1fa/0x540 drivers/scsi/scsi_lib.c:940
blk_complete_reqs block/blk-mq.c:587 [inline]
blk_done_softirq+0xf2/0x130 block/blk-mq.c:592
__do_softirq+0x3b3/0x93a kernel/softirq.c:558
invoke_softirq kernel/softirq.c:432 [inline]
__irq_exit_rcu+0x155/0x240 kernel/softirq.c:637
irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
common_interrupt+0xa4/0xc0 arch/x86/kernel/irq.c:240
</IRQ>
<TASK>
asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:629
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 kernel/locking/spinlock.c:202
Code: 91 80 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 be b4 3b f7 48 89 df e8 96 08 3d f7 e8 b1 bf 5f f7 fb bf 01 00 00 00 <e8> b6 44 30 f7 65 8b 05 87 52 db 75 85 c0 74 02 5b c3 e8 f4 70 d9
RSP: 0018:ffffc90002da7868 EFLAGS: 00000286
RAX: 5372ba57780fb600 RBX: ffff88805cf3b518 RCX: ffffffff913edf03
RDX: dffffc0000000000 RSI: ffffffff8a8b2980 RDI: 0000000000000001
RBP: ffff88805cf3b510 R08: ffffffff8186dd10 R09: ffffed100b9e76a4
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffea000157d600
R13: 00fff80000080017 R14: ffffea000157d608 R15: ffffea000157d600
spin_unlock_irq include/linux/spinlock.h:413 [inline]
delete_from_page_cache+0x12e/0x190 mm/filemap.c:267
truncate_inode_page+0x8d/0xb0 mm/truncate.c:219
shmem_undo_range+0x535/0x1b50 mm/shmem.c:960
shmem_truncate_range mm/shmem.c:1063 [inline]
shmem_evict_inode+0x21b/0xa00 mm/shmem.c:1145
evict+0x2a4/0x620 fs/inode.c:587
__dentry_kill+0x436/0x650 fs/dcache.c:582
dentry_kill+0xbb/0x290
dput+0xd8/0x1a0 fs/dcache.c:889
__fput+0x5ec/0x890 fs/file_table.c:288
task_work_run+0x129/0x1a0 kernel/task_work.c:164
tracehook_notify_resume include/linux/tracehook.h:189 [inline]
exit_to_user_mode_loop+0x106/0x130 kernel/entry/common.c:181
exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:214
__syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
syscall_exit_to_user_mode+0x5d/0x240 kernel/entry/common.c:307
do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f73afc360a8
Code: 48 8b 05 83 9d 0d 00 64 c7 00 16 00 00 00 83 c8 ff 48 83 c4 20 5b c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 5b 48 8b 15 51 9d 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffe33a6f0f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 00007f73afb0aae0 RCX: 00007f73afc360a8
RDX: 000055e51bdd693f RSI: 00007ffe33a6e8f8 RDI: 0000000000000008
RBP: 000055e045d96a50 R08: 0000000000000006 R09: 798091326ed9c07e
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000002
R13: 000055e045d78af0 R14: 0000000000000008 R15: 000055e045d6f910
</TASK>
----------------
Code disassembly (best guess):
0: 91 xchg %eax,%ecx
1: 80 f6 ff xor $0xff,%dh
4: 90 nop
5: 53 push %rbx
6: 48 89 fb mov %rdi,%rbx
9: 48 83 c7 18 add $0x18,%rdi
d: 48 8b 74 24 08 mov 0x8(%rsp),%rsi
12: e8 be b4 3b f7 call 0xf73bb4d5
17: 48 89 df mov %rbx,%rdi
1a: e8 96 08 3d f7 call 0xf73d08b5
1f: e8 b1 bf 5f f7 call 0xf75fbfd5
24: fb sti
25: bf 01 00 00 00 mov $0x1,%edi
* 2a: e8 b6 44 30 f7 call 0xf73044e5 <-- trapping instruction
2f: 65 8b 05 87 52 db 75 mov %gs:0x75db5287(%rip),%eax # 0x75db52bd
36: 85 c0 test %eax,%eax
38: 74 02 je 0x3c
3a: 5b pop %rbx
3b: c3 ret
3c: e8 .byte 0xe8
3d: f4 hlt
3e: 70 d9 jo 0x19