raw: 05ffe00000082029 fffffdffc37775c8 fffffdffc3767d08 ffff0000d4933198 raw: 0000000000000000 0000000000000000 0000000400000000 ffff0000c195c000 page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) ------------[ cut here ]------------ kernel BUG at mm/filemap.c:162! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 6243 Comm: syz-executor304 Not tainted 6.9.0-rc4-syzkaller-g6a71d2909427 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 pstate: 604010c5 (nZCv daIF +PAN -UAO -TCO -DIT +SSBS BTYPE=--) pc : filemap_unaccount_folio+0x5b8/0x698 mm/filemap.c:162 lr : filemap_unaccount_folio+0x5b8/0x698 mm/filemap.c:162 sp : ffff8000a05e7330 x29: ffff8000a05e7330 x28: 0000000000000000 x27: 0000000000000000 x26: 1fffffbff86e7bf8 x25: 1fffffbff86e7bf9 x24: dfff800000000000 x23: ffff0000d4933198 x22: 0000000000000000 x21: fffffdffc373dfc8 x20: ffff0000d4933198 x19: fffffdffc373dfc0 x18: 0000000000000008 x17: 0000000000000000 x16: ffff80008ae725bc x15: 0000000000000001 x14: 1fffe000367bde02 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000003 x10: 0000000000ff0100 x9 : d45dee9f971b1c00 x8 : d45dee9f971b1c00 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff8000a05e6858 x4 : ffff80008ef650a0 x3 : ffff8000805e616c x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000039 Call trace: filemap_unaccount_folio+0x5b8/0x698 mm/filemap.c:162 __filemap_remove_folio+0xc8/0x558 mm/filemap.c:231 filemap_remove_folio+0xd4/0x1cc mm/filemap.c:264 truncate_inode_folio+0x6c/0x84 mm/truncate.c:195 shmem_undo_range+0x348/0x1308 mm/shmem.c:1007 shmem_truncate_range mm/shmem.c:1120 [inline] shmem_evict_inode+0x230/0x8b4 mm/shmem.c:1248 evict+0x260/0x68c fs/inode.c:667 iput_final fs/inode.c:1741 [inline] iput+0x760/0x844 fs/inode.c:1767 dentry_unlink_inode+0x36c/0x4ac fs/dcache.c:400 __dentry_kill+0x178/0x5e8 fs/dcache.c:603 dput+0x1b8/0x290 fs/dcache.c:845 __fput+0x4f8/0x738 fs/file_table.c:430 __fput_sync+0x60/0x9c fs/file_table.c:507 __do_sys_close fs/open.c:1556 [inline] __se_sys_close fs/open.c:1541 [inline] __arm64_sys_close+0x150/0x1e0 fs/open.c:1541 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:48 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:133 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:152 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 Code: d0054341 91378021 aa1303e0 940372c0 (d4210000) ---[ end trace 0000000000000000 ]---