igt@fbdev@(eof|write) - incomplete - kernel BUG at include/linux/mm.h:1164!

https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_11505/fi-kbl-8809g/igt@fbdev@eof.html

6> [25.354856] [IGT] fbdev: starting subtest eof
<4> [25.354940] page:ffffea0004ab3240 refcount:0 mapcount:0 mapping:dead000000000400 index:0x0 pfn:0x12acc9
<4> [25.354952] invalid mapping:dead000000000400
<4> [25.354953] flags: 0x8000000000000000(zone=2)
<4> [25.354956] raw: 8000000000000000 ffffea0004ab3248 ffffea0004ab3248 dead000000000400
<4> [25.354958] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
<4> [25.354959] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
<4> [25.354970] ------------[ cut here ]------------
<2> [25.354972] kernel BUG at include/linux/mm.h:1164!
<4> [25.355018] invalid opcode: 0000 [#1] PREEMPT SMP PTI
<4> [25.355022] CPU: 6 PID: 1113 Comm: fbdev Not tainted 5.18.0-rc2-CI_DRM_11505-g8fa1c99886cd+ #1
<4> [25.355027] Hardware name: Intel Corporation NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0047.2018.0718.1706 07/18/2018
<4> [25.355044] RIP: 0010:fb_deferred_io_fault+0xd8/0xe0
<4> [25.355051] Code: 74 a0 48 8b 43 48 48 8d 78 ff a8 01 48 0f 44 fb eb 90 48 83 ef 01 eb 8a b8 02 00 00 00 c3 48 c7 c6 60 17 2e 82 e8 28 91 bd ff <0f> 0b 0f 0b 0f 1f 40 00 41 54 55 53 48 8b 9f 08 04 00 00 48 85 db
<4> [25.355079] RSP: 0000:ffffc900018bbdb8 EFLAGS: 00010246
<4> [25.355083] RAX: 000000000000005c RBX: ffffea0004ab3240 RCX: 0000000000000001
<4> [25.355087] RDX: 0000000000000000 RSI: ffffffff8231667d RDI: 00000000ffffffff
<4> [25.355090] RBP: ffffc900018bbe00 R08: 0000000000000000 R09: c0000000ffff7fff
<4> [25.355094] R10: 0000000000000001 R11: ffffc900018bbbe0 R12: 0400000000000080
<4> [25.355097] R13: ffff88813877a948 R14: fff000003fffffff R15: 00007fd1cf60bfff
<4> [25.355101] FS:  00007fd1d080fc00(0000) GS:ffff888276900000(0000) knlGS:0000000000000000
<4> [25.355105] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
<4> [25.355124] CR2: 00007fd1cf60bfff CR3: 0000000128a80003 CR4: 00000000003706e0
<4> [25.355127] Call Trace:
<4> [25.355129]  <TASK>
<4> [25.355131]  __do_fault+0x33/0x1d0
<4> [25.355135]  __handle_mm_fault+0xec9/0x10f0
<4> [25.355143]  handle_mm_fault+0x75/0x1b0
<4> [25.355148]  do_user_addr_fault+0x1e7/0x670
<4> [25.355156]  exc_page_fault+0x62/0x230
<4> [25.355162]  ? asm_exc_page_fault+0x8/0x30
<4> [25.355167]  asm_exc_page_fault+0x1e/0x30
<4> [25.355172] RIP: 0033:0x561f15001732
<4> [25.355177] Code: 8b 5c 24 30 8b 7c 24 0c 44 8d 60 ff 4c 01 e3 4c 89 e1 4c 01 e5 c6 03 55 48 89 de e8 d8 f7 ff ff 48 83 f8 01 0f 85 af 07 00 00 <0f> b6 45 00 0f b6 13 38 d0 0f 85 74 07 00 00 4d 8d 74 24 01 4c 8d
<4> [25.355192] RSP: 002b:00007fff04fbf490 EFLAGS: 00010246
<4> [25.355197] RAX: 0000000000000001 RBX: 00007fd1ced4100f RCX: 00007fd1d2780c7a
<4> [25.355204] RDX: 0000000000000002 RSI: 00007fd1ced4100f RDI: 0000000000000005
<4> [25.355210] RBP: 00007fd1cf60bfff R08: 0000000000000000 R09: 0000000000000000
<4> [25.355216] R10: 00000000008c9fff R11: 0000000000000246 R12: 00000000008c9fff
<4> [25.355220] R13: 00007fff04fbf6d0 R14: 0000000000000000 R15: 0000000000000000
<4> [25.355225]  </TASK>
<4> [25.355226] Modules linked in: fuse amdgpu i915 x86_pkg_temp_thermal coretemp kvm_intel snd_hda_codec_realtek kvm snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi irqbypass btusb crct10dif_pclmul drm_ttm_helper btrtl ttm btbcm crc32_pclmul ghash_clmulni_intel gpu_sched btintel drm_buddy bluetooth snd_hda_intel drm_dp_helper e1000e snd_intel_dspcfg drm_kms_helper ecdh_generic i2c_i801 igb ecc snd_hda_codec i2c_smbus syscopyarea ptp snd_hwdep sysfillrect pps_core snd_hda_core snd_pcm sysimgblt fb_sys_fops intel_lpss_pci prime_numbers pinctrl_sunrisepoint
<4> [25.355313] ---[ end trace 0000000000000000 ]---