shmem_truncate_range mm/shmem.c:1114 [inline]
 shmem_evict_inode+0x29b/0xa60 mm/shmem.c:1242
 evict+0x2a8/0x630 fs/inode.c:667
 __dentry_kill+0x20d/0x630 fs/dcache.c:603
 dput+0x19f/0x2b0 fs/dcache.c:845
 __fput+0x5f8/0x8a0 fs/file_table.c:430
 task_work_run+0x24f/0x310 kernel/task_work.c:180
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0xa27/0x27e0 kernel/exit.c:876
 do_group_exit+0x207/0x2c0 kernel/exit.c:1025
 get_signal+0x16a1/0x1740 kernel/signal.c:2909
 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0xc9/0x360 kernel/entry/common.c:218
 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
------------[ cut here ]------------
kernel BUG at mm/filemap.c:1507!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 1 PID: 2424 Comm: kworker/u8:6 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Workqueue: btrfs-delalloc btrfs_work_helper
RIP: 0010:folio_unlock+0x18b/0x2f0 mm/filemap.c:1507
Code: 4c 89 f0 48 25 ff 0f 00 00 74 62 e8 4f d8 c9 ff e9 eb fe ff ff e8 45 d8 c9 ff 4c 89 f7 48 c7 c6 60 8c d3 8b e8 26 c2 10 00 90 <0f> 0b e8 2e d8 c9 ff 4c 89 f7 48 c7 c6 60 95 d3 8b e8 0f c2 10 00
RSP: 0018:ffffc9000908f6a8 EFLAGS: 00010246
RAX: 5d8809d1e911ae00 RBX: 1ffffd40002e8888 RCX: 0000000000000001
RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001
RBP: 00fff0000000412c R08: ffffffff92f716c7 R09: 1ffffffff25ee2d8
R10: dffffc0000000000 R11: fffffbfff25ee2d9 R12: ffffea0001744448
R13: 1ffffd40002e8889 R14: ffffea0001744440 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b33d1fffc CR3: 00000000242e2000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 submit_uncompressed_range+0x36b/0x400 fs/btrfs/inode.c:1141
 submit_one_async_extent fs/btrfs/inode.c:1179 [inline]
 submit_compressed_extents+0x656/0x14a0 fs/btrfs/inode.c:1641
 run_ordered_work fs/btrfs/async-thread.c:245 [inline]
 btrfs_work_helper+0x56b/0xc50 fs/btrfs/async-thread.c:324
 process_one_work kernel/workqueue.c:3248 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329
 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:folio_unlock+0x18b/0x2f0 mm/filemap.c:1507
Code: 4c 89 f0 48 25 ff 0f 00 00 74 62 e8 4f d8 c9 ff e9 eb fe ff ff e8 45 d8 c9 ff 4c 89 f7 48 c7 c6 60 8c d3 8b e8 26 c2 10 00 90 <0f> 0b e8 2e d8 c9 ff 4c 89 f7 48 c7 c6 60 95 d3 8b e8 0f c2 10 00
RSP: 0018:ffffc9000908f6a8 EFLAGS: 00010246
RAX: 5d8809d1e911ae00 RBX: 1ffffd40002e8888 RCX: 0000000000000001
RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001
RBP: 00fff0000000412c R08: ffffffff92f716c7 R09: 1ffffffff25ee2d8
R10: dffffc0000000000 R11: fffffbfff25ee2d9 R12: ffffea0001744448
R13: 1ffffd40002e8889 R14: ffffea0001744440 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffc64972fa8 CR3: 000000007e00a000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400