------------[ cut here ]------------
WARNING: CPU: 1 PID: 2859 at block/genhd.c:144 bdev_count_inflight_rw+0x3ba/0x510 block/genhd.c:144
Modules linked in:
CPU: 1 UID: 0 PID: 2859 Comm: udevd Not tainted 6.16.0-rc2-syzkaller-00047-geb90d36bfa06 #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:bdev_count_inflight_rw+0x3ba/0x510 block/genhd.c:144
Code: b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 4b 01 00 00 c7 43 04 00 00 00 00 e9 5f ff ff ff e8 97 55 0a ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6
RSP: 0000:ffffc9000158f2e8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffffc9000158f370 RCX: ffffffff82737628
RDX: ffff88811b040000 RSI: ffffffff827376e9 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000001 R12: 00000000ffffffff
R13: dffffc0000000000 R14: ffffc9000158f374 R15: 0000000000000000
FS:  00007f8dfed7e880(0000) GS:ffff888269264000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8dfe936aca CR3: 000000011abfe000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 bdev_count_inflight+0x74/0xb0 block/genhd.c:163
 update_io_ticks+0x22a/0x2a0 block/blk-core.c:1021
 blk_account_io_start block/blk-mq.c:1116 [inline]
 blk_account_io_start+0x3e9/0x730 block/blk-mq.c:1092
 blk_mq_bio_to_request block/blk-mq.c:2675 [inline]
 blk_mq_submit_bio+0xcc4/0x20a0 block/blk-mq.c:3191
 __submit_bio+0x1c2/0x620 block/blk-core.c:635
 __submit_bio_noacct_mq block/blk-core.c:722 [inline]
 submit_bio_noacct_nocheck+0x660/0xd30 block/blk-core.c:751
 submit_bio_noacct+0x2fa/0x1370 block/blk-core.c:874
 ext4_mpage_readpages+0x665/0x13e0 fs/ext4/readpage.c:395
 ext4_readahead+0x102/0x140 fs/ext4/inode.c:3337
 read_pages+0x1a7/0xb80 mm/readahead.c:160
 page_cache_ra_unbounded+0x541/0x700 mm/readahead.c:264
 do_page_cache_ra mm/readahead.c:327 [inline]
 page_cache_ra_order+0x205/0x2c0 mm/readahead.c:532
 do_sync_mmap_readahead mm/filemap.c:3271 [inline]
 filemap_fault+0x15f1/0x2880 mm/filemap.c:3412
 __do_fault+0x10d/0x490 mm/memory.c:5189
 do_read_fault mm/memory.c:5610 [inline]
 do_fault mm/memory.c:5744 [inline]
 do_pte_missing mm/memory.c:4251 [inline]
 handle_pte_fault mm/memory.c:6089 [inline]
 __handle_mm_fault+0x162b/0x3200 mm/memory.c:6232
 handle_mm_fault+0x589/0xd10 mm/memory.c:6401
 do_user_addr_fault+0x613/0x1240 arch/x86/mm/fault.c:1336
 handle_page_fault arch/x86/mm/fault.c:1476 [inline]
 exc_page_fault+0x5c/0xb0 arch/x86/mm/fault.c:1532
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7f8dfef3ee99
Code: 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 <c5> fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66
RSP: 002b:00007fffecc0cc48 EFLAGS: 00010283
RAX: 0000000000000aca RBX: 0000000000000001 RCX: 00007fffecc0cda0
RDX: 00007f8dfe936aca RSI: 00007f8dfe4ff640 RDI: 00007f8dfe936aca
RBP: 000055e9e0cbee55 R08: 000055e9e0cbee55 R09: 00007fffecc0c400
R10: 00007fffecc0cdaa R11: 0000000000000000 R12: 00007f8dfe936aca
R13: 00007f8dfe4ff640 R14: 000055e9e0a6ff90 R15: 00007fffecc0cda0
 </TASK>