anon flags: 0x5ffc00000020178(uptodate|dirty|lru|active|head|swapbacked|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc00000020178 fffffdffc40a5088 fffffdffc40a50c8 ffff0000f02e2aa1
raw: 0000000000020000 0000000000000000 00000001ffffffff ffff0000c19c1900
head: 05ffc00000020178 fffffdffc40a5088 fffffdffc40a50c8 ffff0000f02e2aa1
head: 0000000000020000 0000000000000000 00000001ffffffff ffff0000c19c1900
head: 05ffc00000010a09 fffffdffc4028001 00000000ffffffff 00000001ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200
page dumped because: VM_BUG_ON_PAGE(!PageAnonExclusive(&folio->page) && !PageAnonExclusive(page))
------------[ cut here ]------------
kernel BUG at mm/gup.c:71!
Internal error: Oops - BUG: 00000000f2000800 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 276 Comm: kworker/u8:5 Not tainted 6.16.0-rc2-syzkaller-g9aa9b43d689e #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: iou_exit io_ring_exit_work
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : sanity_check_pinned_pages+0x7cc/0x7d0 mm/gup.c:70
lr : sanity_check_pinned_pages+0x7cc/0x7d0 mm/gup.c:70
sp : ffff80009bfe7640
x29: ffff80009bfe7660 x28: dfff800000000000 x27: 1fffffbff8805000
x26: 05ffc00000020178 x25: 05ffc00000020178 x24: fffffdffc4028000
x23: fffffdffc4028000 x22: ffff80009bfe76e0 x21: 05ffc00000020178
x20: 0000000000000000 x19: ffff80009bfe76e0 x18: 00000000ffffffff
x17: 703e2d6f696c6f66 x16: ffff80008ae33808 x15: ffff700011ed61d4
x14: 1ffff00011ed61d4 x13: 0000000000000004 x12: ffffffffffffffff
x11: ffff700011ed61d4 x10: 0000000000ff0100 x9 : 3c6e6ae0b2cc5b00
x8 : 3c6e6ae0b2cc5b00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80009bfe6d58 x4 : ffff80008f727060 x3 : ffff80008054c348
x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000061
Call trace:
 sanity_check_pinned_pages+0x7cc/0x7d0 mm/gup.c:70 (P)
 unpin_user_page+0x80/0x10c mm/gup.c:192
 io_release_ubuf+0x84/0xf8 io_uring/rsrc.c:116
 io_buffer_unmap io_uring/rsrc.c:143 [inline]
 io_free_rsrc_node+0x250/0x57c io_uring/rsrc.c:516
 io_put_rsrc_node io_uring/rsrc.h:103 [inline]
 io_rsrc_data_free+0x148/0x298 io_uring/rsrc.c:200
 io_sqe_buffers_unregister+0x84/0xa0 io_uring/rsrc.c:610
 io_ring_ctx_free+0x48/0x480 io_uring/io_uring.c:2729
 io_ring_exit_work+0x764/0x7d8 io_uring/io_uring.c:2971
 process_one_work+0x7e8/0x155c kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3321 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3402
 kthread+0x5fc/0x75c kernel/kthread.c:464
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847
Code: b0052bc1 91008021 aa1703e0 97fff8ab (d4210000) 
---[ end trace 0000000000000000 ]---