------------[ cut here ]------------
WARNING: CPU: 1 PID: 3504 at fs/ext4/page-io.c:231 ext4_put_io_end_defer+0x2d5/0x300 fs/ext4/page-io.c:297
Modules linked in:
CPU: 1 PID: 3504 Comm: udevd Not tainted 5.15.156-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:ext4_add_complete_io fs/ext4/page-io.c:231 [inline]
RIP: 0010:ext4_put_io_end_defer+0x2d5/0x300 fs/ext4/page-io.c:297
Code: 65 00 eb 05 e8 ec 59 5b ff 48 8b 3c 24 48 8b 74 24 08 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d0 18 02 08 e8 cb 59 5b ff <0f> 0b e9 b7 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 85 fd ff
RSP: 0018:ffffc90000dd0ad8 EFLAGS: 00010246
RAX: ffffffff82250315 RBX: ffff88814b760378 RCX: ffff88801bbc8000
RDX: 0000000080000101 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff88805ad73e98 R08: ffffffff822500c0 R09: ffffed100e975586
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888074baac00
R13: ffff88814b760000 R14: ffff88805ad73e70 R15: dffffc0000000000
FS:  00007f73afb0ac80(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffdb7f22fc8 CR3: 000000007a0da000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 ext4_end_bio+0x357/0x5b0 fs/ext4/page-io.c:360
 req_bio_endio block/blk-core.c:261 [inline]
 blk_update_request+0x87c/0x1470 block/blk-core.c:1441
 scsi_end_request+0x83/0x980 drivers/scsi/scsi_lib.c:544
 scsi_io_completion+0x1fa/0x540 drivers/scsi/scsi_lib.c:940
 blk_complete_reqs block/blk-mq.c:587 [inline]
 blk_done_softirq+0xf2/0x130 block/blk-mq.c:592
 __do_softirq+0x3b3/0x93a kernel/softirq.c:558
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu+0x155/0x240 kernel/softirq.c:637
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
 common_interrupt+0xa4/0xc0 arch/x86/kernel/irq.c:240
 </IRQ>
 <TASK>
 asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:629
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 kernel/locking/spinlock.c:202
Code: 91 80 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 be b4 3b f7 48 89 df e8 96 08 3d f7 e8 b1 bf 5f f7 fb bf 01 00 00 00 <e8> b6 44 30 f7 65 8b 05 87 52 db 75 85 c0 74 02 5b c3 e8 f4 70 d9
RSP: 0018:ffffc90002da7868 EFLAGS: 00000286
RAX: 5372ba57780fb600 RBX: ffff88805cf3b518 RCX: ffffffff913edf03
RDX: dffffc0000000000 RSI: ffffffff8a8b2980 RDI: 0000000000000001
RBP: ffff88805cf3b510 R08: ffffffff8186dd10 R09: ffffed100b9e76a4
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffea000157d600
R13: 00fff80000080017 R14: ffffea000157d608 R15: ffffea000157d600
 spin_unlock_irq include/linux/spinlock.h:413 [inline]
 delete_from_page_cache+0x12e/0x190 mm/filemap.c:267
 truncate_inode_page+0x8d/0xb0 mm/truncate.c:219
 shmem_undo_range+0x535/0x1b50 mm/shmem.c:960
 shmem_truncate_range mm/shmem.c:1063 [inline]
 shmem_evict_inode+0x21b/0xa00 mm/shmem.c:1145
 evict+0x2a4/0x620 fs/inode.c:587
 __dentry_kill+0x436/0x650 fs/dcache.c:582
 dentry_kill+0xbb/0x290
 dput+0xd8/0x1a0 fs/dcache.c:889
 __fput+0x5ec/0x890 fs/file_table.c:288
 task_work_run+0x129/0x1a0 kernel/task_work.c:164
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 exit_to_user_mode_loop+0x106/0x130 kernel/entry/common.c:181
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x5d/0x240 kernel/entry/common.c:307
 do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f73afc360a8
Code: 48 8b 05 83 9d 0d 00 64 c7 00 16 00 00 00 83 c8 ff 48 83 c4 20 5b c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 5b 48 8b 15 51 9d 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffe33a6f0f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 00007f73afb0aae0 RCX: 00007f73afc360a8
RDX: 000055e51bdd693f RSI: 00007ffe33a6e8f8 RDI: 0000000000000008
RBP: 000055e045d96a50 R08: 0000000000000006 R09: 798091326ed9c07e
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000002
R13: 000055e045d78af0 R14: 0000000000000008 R15: 000055e045d6f910
 </TASK>
----------------
Code disassembly (best guess):
   0:	91                   	xchg   %eax,%ecx
   1:	80 f6 ff             	xor    $0xff,%dh
   4:	90                   	nop
   5:	53                   	push   %rbx
   6:	48 89 fb             	mov    %rdi,%rbx
   9:	48 83 c7 18          	add    $0x18,%rdi
   d:	48 8b 74 24 08       	mov    0x8(%rsp),%rsi
  12:	e8 be b4 3b f7       	call   0xf73bb4d5
  17:	48 89 df             	mov    %rbx,%rdi
  1a:	e8 96 08 3d f7       	call   0xf73d08b5
  1f:	e8 b1 bf 5f f7       	call   0xf75fbfd5
  24:	fb                   	sti
  25:	bf 01 00 00 00       	mov    $0x1,%edi
* 2a:	e8 b6 44 30 f7       	call   0xf73044e5 <-- trapping instruction
  2f:	65 8b 05 87 52 db 75 	mov    %gs:0x75db5287(%rip),%eax        # 0x75db52bd
  36:	85 c0                	test   %eax,%eax
  38:	74 02                	je     0x3c
  3a:	5b                   	pop    %rbx
  3b:	c3                   	ret
  3c:	e8                   	.byte 0xe8
  3d:	f4                   	hlt
  3e:	70 d9                	jo     0x19