raw: 0000000000000000 0000000000000000 0000000400000000 ffff0000d07d4000 page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) ------------[ cut here ]------------ kernel BUG at mm/filemap.c:153! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 4691 Comm: syz.4.61 Not tainted 6.1.142-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : filemap_unaccount_folio+0x464/0x50c mm/filemap.c:153 lr : filemap_unaccount_folio+0x464/0x50c mm/filemap.c:153 sp : ffff8000211271c0 x29: ffff8000211271d0 x28: ffff800021127540 x27: dfff800000000000 x26: ffff700004224e4c x25: 0000000000000001 x24: ffff800021127540 x23: ffff800021127280 x22: ffff0000fae77b58 x21: fffffc000384c7d8 x20: ffff0000fae77b58 x19: fffffc000384c7c0 x18: ffff800011a8bce0 x17: 0000000000000000 x16: ffff8000082e7c3c x15: 0000000000000000 x14: 0000000000000000 x13: 1ffff00002a100b1 x12: 0000000000ff0100 x11: ff008000087ae04c x10: 0000000000000000 x9 : ffff8000087ae04c x8 : ffff0000da7cb780 x7 : ffff80000830ccc8 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff8000082e7d50 x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000039 Call trace: filemap_unaccount_folio+0x464/0x50c mm/filemap.c:153 __filemap_remove_folio+0xc0/0x4d4 mm/filemap.c:222 filemap_remove_folio+0xcc/0x1bc mm/filemap.c:255 truncate_inode_folio+0x6c/0x84 mm/truncate.c:195 shmem_undo_range+0x400/0x1610 mm/shmem.c:942 shmem_truncate_range mm/shmem.c:1062 [inline] shmem_evict_inode+0x204/0x8a0 mm/shmem.c:1171 evict+0x3c8/0x810 fs/inode.c:705 iput_final fs/inode.c:1834 [inline] iput+0x764/0x7f4 fs/inode.c:1860 dentry_unlink_inode+0x360/0x438 fs/dcache.c:405 __dentry_kill+0x320/0x598 fs/dcache.c:611 dentry_kill+0xc8/0x248 fs/dcache.c:-1 dput+0x238/0x454 fs/dcache.c:918 __fput+0x480/0x7c0 fs/file_table.c:328 ____fput+0x20/0x30 fs/file_table.c:348 task_work_run+0x1ec/0x270 kernel/task_work.c:203 exit_task_work include/linux/task_work.h:39 [inline] do_exit+0x54c/0x19a8 kernel/exit.c:880 __do_sys_exit kernel/exit.c:989 [inline] __se_sys_exit kernel/exit.c:987 [inline] do_group_exit+0x0/0x22c kernel/exit.c:987 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Code: f004a1a1 911c0021 aa1303e0 94037abd (d4210000) ---[ end trace 0000000000000000 ]---