raw: 05ffc00000002000 0000000000000000 dead000000000122 ffff0000c934a478
raw: 00000000000002fc 0000000000000000 0000000300000000 0000000000000000
page dumped because: VM_BUG_ON_FOLIO(!folio_test_locked(folio))
------------[ cut here ]------------
kernel BUG at mm/memory.c:2979!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 6615 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller-00135-g707081b61156 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : do_page_mkwrite+0x2d8/0x2dc mm/memory.c:2979
lr : do_page_mkwrite+0x2d8/0x2dc mm/memory.c:2979
sp : ffff800097977650
x29: ffff800097977650 x28: fffffdffc31ca480 x27: 0000000000000088
x26: ffff0000d42b3b00 x25: 1ffff00012f2ef8f x24: 0000000000000a55
x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000000200
x20: 05ffc00000002000 x19: fffffdffc31ca480 x18: 1fffe00036804396
x17: ffff80008ec9d000 x16: ffff80008ad6b09c x15: 0000000000000001
x14: 1fffe00036804402 x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000000001 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000c2a80000 x7 : ffff800080297c0c x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff8000805ba130
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000003f
Call trace:
 do_page_mkwrite+0x2d8/0x2dc mm/memory.c:2979
 wp_page_shared mm/memory.c:3353 [inline]
 do_wp_page+0x178c/0x3270 mm/memory.c:3493
 handle_pte_fault mm/memory.c:5180 [inline]
 __handle_mm_fault mm/memory.c:5305 [inline]
 handle_mm_fault+0x10c8/0x546c mm/memory.c:5470
 __do_page_fault arch/arm64/mm/fault.c:505 [inline]
 do_page_fault+0x4f8/0xa64 arch/arm64/mm/fault.c:620
 do_mem_abort+0x74/0x200 arch/arm64/mm/fault.c:840
 el0_da+0x60/0x178 arch/arm64/kernel/entry-common.c:580
 el0t_64_sync_handler+0xcc/0xfc arch/arm64/kernel/entry-common.c:733
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598
Code: 90053541 91080021 aa1303e0 97ff21d3 (d4210000) 
---[ end trace 0000000000000000 ]---