------------[ cut here ]------------
NETDEV WATCHDOG: sl0 (): transmit queue 0 timed out
WARNING: CPU: 0 PID: 3582 at net/sched/sch_generic.c:526 dev_watchdog+0x6c0/0x700 net/sched/sch_generic.c:525
Modules linked in:
CPU: 0 PID: 3582 Comm: syz-executor.1 Not tainted 6.1.82-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
RIP: 0010:dev_watchdog+0x6c0/0x700 net/sched/sch_generic.c:525
Code: ed f8 c6 05 9b af c2 05 01 48 8b 1c 24 48 89 df e8 15 63 e5 ff 48 c7 c7 80 cb e3 8b 48 89 de 48 89 c2 44 89 f1 e8 80 bb b5 f8 <0f> 0b e9 8b fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c c1 fb ff
RSP: 0018:ffffc90000007b00 EFLAGS: 00010246
RAX: db95241c9feb7400 RBX: ffff8880ac34c000 RCX: ffff88807af29dc0
RDX: 0000000000000101 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000100016480 R08: ffffffff81527e8e R09: fffff52000000ec1
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11015869889
R13: 0000000100015dd2 R14: 0000000000000000 R15: 0000000000000110
FS:  0000555555850480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020004280 CR3: 000000015cfd5000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 call_timer_fn+0x1ad/0x6b0 kernel/time/timer.c:1474
 expire_timers kernel/time/timer.c:1519 [inline]
 __run_timers+0x67c/0x890 kernel/time/timer.c:1790
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1803
 __do_softirq+0x2e9/0xa4c kernel/softirq.c:571
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x155/0x240 kernel/softirq.c:650
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:662
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1106
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 kernel/kcov.c:206
Code: 00 0f 0b 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 58 e1 e8 0c 48 89 de 5b e9 37 9e 56 00 cc cc cc cc cc cc cc 48 8b 04 24 <65> 48 8b 0d a4 eb 77 7e 65 8b 15 a5 eb 77 7e f7 c2 00 01 ff 00 74
RSP: 0018:ffffc90003faf698 EFLAGS: 00000246
RAX: ffffffff81b7c341 RBX: 0000000000000000 RCX: ffff88807af29dc0
RDX: ffff88807af29dc0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffffffff81b7c32d R09: fffff94000bb02e1
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffea0005d81708
R13: ffffea0005d81700 R14: 0000000000000762 R15: ffffea0005d81708
 arch_static_branch arch/x86/include/asm/jump_label.h:27 [inline]
 page_fixed_fake_head include/linux/page-flags.h:216 [inline]
 page_is_fake_head include/linux/page-flags.h:248 [inline]
 PageTail include/linux/page-flags.h:292 [inline]
 folio_flags include/linux/page-flags.h:319 [inline]
 folio_test_swapbacked include/linux/page-flags.h:502 [inline]
 folio_test_swapcache include/linux/page-flags.h:543 [inline]
 folio_index include/linux/pagemap.h:687 [inline]
 folio_contains+0xb1/0x580 include/linux/pagemap.h:736
 find_lock_entries+0x7da/0xda0 mm/filemap.c:2106
 shmem_undo_range+0x294/0x2390 mm/shmem.c:925
 shmem_truncate_range mm/shmem.c:1062 [inline]
 shmem_evict_inode+0x265/0xa60 mm/shmem.c:1171
 evict+0x2a4/0x620 fs/inode.c:666
 __dentry_kill+0x436/0x650 fs/dcache.c:607
 dentry_kill+0xbb/0x290
 dput+0xfb/0x1d0 fs/dcache.c:914
 __fput+0x5e4/0x890 fs/file_table.c:328
 task_work_run+0x246/0x300 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop+0xde/0x100 kernel/entry/common.c:171
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:204
 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline]
 syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:297
 do_syscall_64+0x49/0xb0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f035ca7f0d7
Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffe3423fed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f035ca7f0d7
RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe3423ff90
RBP: 00007ffe3423ff90 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe34241050
R13: 00007f035cac93b9 R14: 0000000000127fe4 R15: 0000000000000003
 </TASK>
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	0f 0b                	ud2
   2:	0f 1f 00             	nopl   (%rax)
   5:	53                   	push   %rbx
   6:	48 89 fb             	mov    %rdi,%rbx
   9:	e8 17 00 00 00       	call   0x25
   e:	48 8b 3d 58 e1 e8 0c 	mov    0xce8e158(%rip),%rdi        # 0xce8e16d
  15:	48 89 de             	mov    %rbx,%rsi
  18:	5b                   	pop    %rbx
  19:	e9 37 9e 56 00       	jmp    0x569e55
  1e:	cc                   	int3
  1f:	cc                   	int3
  20:	cc                   	int3
  21:	cc                   	int3
  22:	cc                   	int3
  23:	cc                   	int3
  24:	cc                   	int3
  25:	48 8b 04 24          	mov    (%rsp),%rax
* 29:	65 48 8b 0d a4 eb 77 	mov    %gs:0x7e77eba4(%rip),%rcx        # 0x7e77ebd5 <-- trapping instruction
  30:	7e
  31:	65 8b 15 a5 eb 77 7e 	mov    %gs:0x7e77eba5(%rip),%edx        # 0x7e77ebdd
  38:	f7 c2 00 01 ff 00    	test   $0xff0100,%edx
  3e:	74                   	.byte 0x74