------------[ cut here ]------------
NETDEV WATCHDOG: sl0 (): transmit queue 0 timed out 39650 ms
WARNING: CPU: 0 PID: 6555 at net/sched/sch_generic.c:526 dev_watchdog+0x74f/0x760 net/sched/sch_generic.c:525
Modules linked in:
CPU: 0 PID: 6555 Comm: udevd Not tainted 6.7.0-syzkaller-01727-gab27740f7665 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
RIP: 0010:dev_watchdog+0x74f/0x760 net/sched/sch_generic.c:525
Code: 6b cf 05 01 90 48 8b 1c 24 48 89 df e8 9a 25 e4 ff 48 c7 c7 60 45 5f 8c 48 89 de 48 89 c2 44 89 f1 45 89 e0 e8 02 ff 37 f8 90 <0f> 0b 90 90 e9 15 ff ff ff 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55
RSP: 0018:ffffc90000007b40 EFLAGS: 00010246
RAX: e8cc0b1088a9a500 RBX: ffff88807b9e6000 RCX: ffff88801cefd940
RDX: 0000000000000102 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000010000cdd3 R08: ffffffff8154b922 R09: 1ffff92000000f08
R10: dffffc0000000000 R11: fffff52000000f09 R12: 0000000000009ae2
R13: ffff88807b9e6548 R14: 0000000000000000 R15: 0000000000000110
FS:  00007f2537ae4c80(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055bfebfaa798 CR3: 000000002f72c000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 call_timer_fn+0x17a/0x5f0 kernel/time/timer.c:1700
 expire_timers kernel/time/timer.c:1751 [inline]
 __run_timers+0x621/0x830 kernel/time/timer.c:2038
 run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2051
 __do_softirq+0x2b8/0x939 kernel/softirq.c:553
 invoke_softirq kernel/softirq.c:427 [inline]
 __irq_exit_rcu+0xf1/0x1b0 kernel/softirq.c:632
 irq_exit_rcu+0x9/0x20 kernel/softirq.c:644
 sysvec_apic_timer_interrupt+0x97/0xb0 arch/x86/kernel/apic/apic.c:1076
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:check_kcov_mode kernel/kcov.c:184 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 kernel/kcov.c:207
Code: a0 cb 74 7e 65 8b 15 a1 cb 74 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 fc 15 00 00 00 74 2c 8b 91 d8 15 00 00 <83> fa 02 75 21 48 8b 91 e0 15 00 00 48 8b 32 48 8d 7e 01 8b 89 dc
RSP: 0018:ffffc9000372f1c0 EFLAGS: 00000246
RAX: ffffffff813e1b65 RBX: ffffc90003730000 RCX: ffff88801cefd940
RDX: 0000000000000000 RSI: ffffc9000372fd28 RDI: ffffc9000372fd68
RBP: ffffc9000372f2a0 R08: ffffffff813e1b00 R09: ffffffff813e1680
R10: 0000000000000003 R11: ffff88801cefd940 R12: ffffc9000372fd68
R13: dffffc0000000000 R14: ffffc90003728000 R15: ffffc9000372fd70
 unwind_next_frame+0x1e55/0x29e0 arch/x86/kernel/unwind_orc.c:665
 arch_stack_walk+0x146/0x1a0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x117/0x1c0 kernel/stacktrace.c:122
 save_stack+0xfa/0x1e0 mm/page_owner.c:129
 __reset_page_owner+0x44/0x2d0 mm/page_owner.c:150
 reset_page_owner include/linux/page_owner.h:24 [inline]
 free_pages_prepare mm/page_alloc.c:1133 [inline]
 free_unref_page_prepare+0x907/0xa20 mm/page_alloc.c:2339
 free_unref_page_list+0x5a3/0x840 mm/page_alloc.c:2525
 release_pages+0x2117/0x2400 mm/swap.c:1042
 __folio_batch_release+0x84/0x100 mm/swap.c:1062
 folio_batch_release include/linux/pagevec.h:83 [inline]
 shmem_undo_range+0x6b5/0x1da0 mm/shmem.c:1004
 shmem_truncate_range mm/shmem.c:1113 [inline]
 shmem_evict_inode+0x29b/0xa60 mm/shmem.c:1241
 evict+0x2a4/0x630 fs/inode.c:666
 __dentry_kill+0x436/0x660 fs/dcache.c:609
 dentry_kill+0xbb/0x290
 dput+0x21e/0x470 fs/dcache.c:915
 __fput+0x672/0x890 fs/file_table.c:390
 task_work_run+0x24a/0x300 kernel/task_work.c:180
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:108 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:201 [inline]
 syscall_exit_to_user_mode+0x167/0x370 kernel/entry/common.c:212
 do_syscall_64+0x102/0x230 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7f25377170a8
Code: 48 8b 05 83 9d 0d 00 64 c7 00 16 00 00 00 83 c8 ff 48 83 c4 20 5b c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 5b 48 8b 15 51 9d 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffe4f0942b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 00007f2537ae4ae0 RCX: 00007f25377170a8
RDX: 000055bab0077b2e RSI: 00007ffe4f093ab8 RDI: 0000000000000008
RBP: 000055bfebf99d00 R08: 0000000000000006 R09: ad25b36b81694b1e
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000002
R13: 000055bfebf8d5b0 R14: 0000000000000008 R15: 000055bfebf78910
 </TASK>
----------------
Code disassembly (best guess):
   0:	a0 cb 74 7e 65 8b 15 	movabs 0xcba1158b657e74cb,%al
   7:	a1 cb
   9:	74 7e                	je     0x89
   b:	f7 c2 00 01 ff 00    	test   $0xff0100,%edx
  11:	74 11                	je     0x24
  13:	f7 c2 00 01 00 00    	test   $0x100,%edx
  19:	74 35                	je     0x50
  1b:	83 b9 fc 15 00 00 00 	cmpl   $0x0,0x15fc(%rcx)
  22:	74 2c                	je     0x50
  24:	8b 91 d8 15 00 00    	mov    0x15d8(%rcx),%edx
* 2a:	83 fa 02             	cmp    $0x2,%edx <-- trapping instruction
  2d:	75 21                	jne    0x50
  2f:	48 8b 91 e0 15 00 00 	mov    0x15e0(%rcx),%rdx
  36:	48 8b 32             	mov    (%rdx),%rsi
  39:	48 8d 7e 01          	lea    0x1(%rsi),%rdi
  3d:	8b                   	.byte 0x8b
  3e:	89 dc                	mov    %ebx,%esp