------------[ cut here ]------------
DEBUG_RWSEMS_WARN_ON((rwsem_owner(sem) != current) && !rwsem_test_oflags(sem, RWSEM_NONSPINNABLE)): count = 0x0, magic = 0xffff0000ddfb0328, owner = 0x0, curr 0xffff0000c91c1e80, list empty
WARNING: CPU: 0 PID: 7639 at kernel/locking/rwsem.c:1368 __up_write kernel/locking/rwsem.c:1367 [inline]
WARNING: CPU: 0 PID: 7639 at kernel/locking/rwsem.c:1368 up_write+0x47c/0x5b4 kernel/locking/rwsem.c:1630
Modules linked in:
CPU: 0 UID: 0 PID: 7639 Comm: syz.1.324 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __up_write kernel/locking/rwsem.c:1367 [inline]
pc : up_write+0x47c/0x5b4 kernel/locking/rwsem.c:1630
lr : __up_write kernel/locking/rwsem.c:1367 [inline]
lr : up_write+0x47c/0x5b4 kernel/locking/rwsem.c:1630
sp : ffff80009ddd7c20
x29: ffff80009ddd7c30 x28: ffff0000c91c1e80 x27: ffff80009ddd7c80
x26: dfff800000000000 x25: 1fffe0001bbf6072 x24: ffff0000ddfb0380
x23: 0000000000000000 x22: 0000000000000000 x21: ffff0000c91c1e80
x20: ffff0000ddfb0328 x19: ffff0000ddfb0328 x18: 1fffe0003386aa76
x17: ffff80008f31e000 x16: ffff80008adbe9e4 x15: 0000000000000001
x14: 1fffe0001baf7440 x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000080000 x10: 0000000000000003 x9 : 09c8b87376f7b000
x8 : 09c8b87376f7b000 x7 : ffff800080485878 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008047843c
x2 : 0000000000000001 x1 : ffff80008b3ebc40 x0 : 0000000000000001
Call trace:
 __up_write kernel/locking/rwsem.c:1367 [inline] (P)
 up_write+0x47c/0x5b4 kernel/locking/rwsem.c:1630 (P)
 inode_unlock include/linux/fs.h:872 [inline]
 done_path_create fs/namei.c:4170 [inline]
 do_mkdirat+0x25c/0x4c8 fs/namei.c:4397
 __do_sys_mkdirat fs/namei.c:4409 [inline]
 __se_sys_mkdirat fs/namei.c:4407 [inline]
 __arm64_sys_mkdirat+0x8c/0xa4 fs/namei.c:4407
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767
 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600
irq event stamp: 230
hardirqs last  enabled at (229): [<ffff80008048590c>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1525 [inline]
hardirqs last  enabled at (229): [<ffff80008048590c>] finish_lock_switch+0xb0/0x1c0 kernel/sched/core.c:5130
hardirqs last disabled at (230): [<ffff80008adb9eb8>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511
softirqs last  enabled at (8): [<ffff8000801fbf10>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (6): [<ffff8000801fbedc>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---