page:00000000cdda00b7 refcount:36 mapcount:1 mapping:0000000000000000 index:0x4000003df pfn:0x1347df
head:00000000ee75e907 order:9 compound_mapcount:1 compound_pincount:0
memcg:ffff0000e7af4000
anon flags: 0x5ffc0000029080d(locked|uptodate|dirty|arch_1|head|swapbacked|mlocked|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc00000000800 fffffc0003d18001 fffffc0003d1f7c8 dead000000000400
raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
head: 05ffc0000029080d ffff80001fd47c80 ffff80001fd47c80 ffff0000f2280bb1
head: 0000000400000200 0000000000000000 00000024ffffffff ffff0000e7af4000
page dumped because: VM_BUG_ON_PAGE(1 && PageTail(page))
------------[ cut here ]------------
kernel BUG at include/linux/page-flags.h:431!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 5281 Comm: syz.3.40 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : TestClearPageMlocked include/linux/page-flags.h:431 [inline]
pc : clear_page_mlock+0x4dc/0x5b4 mm/mlock.c:64
lr : TestClearPageMlocked include/linux/page-flags.h:431 [inline]
lr : clear_page_mlock+0x4dc/0x5b4 mm/mlock.c:64
sp : ffff80001fd47500
x29: ffff80001fd47500 x28: ffff80001fd476c0 x27: 1fffff80007a3ef9
x26: 1fffff80007a3000 x25: 1fffff80007a3ef9 x24: dfff800000000000
x23: fffffc0003d18001 x22: 0000000000000001 x21: fffffc0003d18001
x20: fffffc0003d1f7c8 x19: fffffc0003d1f7c0 x18: 0000000000000002
x17: 0000000000000000 x16: ffff8000083049fc x15: 00000000ffffffff
x14: 0000000000000001 x13: 1ffff00003fa8d64 x12: 0000000000ff0100
x11: 0000000000000001 x10: 0000000000000000 x9 : 2c55872b07a77000
x8 : 2c55872b07a77000 x7 : 0000000000000000 x6 : 0000000000000001
x5 : ffff80001fd46b38 x4 : 0000000000000004 x3 : ffff800008304b0c
x2 : ffffffffffffffc0 x1 : 0000000000000000 x0 : ffff700003fa8e4c
Call trace:
 TestClearPageMlocked include/linux/page-flags.h:431 [inline]
 clear_page_mlock+0x4dc/0x5b4 mm/mlock.c:64
 page_remove_rmap+0xbd4/0xf90 mm/rmap.c:1375
 try_to_migrate_one+0x9e8/0xd98 mm/rmap.c:1938
 rmap_walk_anon+0x2fc/0x4cc mm/rmap.c:2323
 try_to_migrate+0x3f8/0x4f4 mm/rmap.c:-1
 __unmap_and_move mm/migrate.c:1072 [inline]
 unmap_and_move mm/migrate.c:1218 [inline]
 migrate_pages+0x194c/0x2f48 mm/migrate.c:1493
 do_mbind mm/mempolicy.c:1325 [inline]
 kernel_mbind mm/mempolicy.c:1472 [inline]
 __do_sys_mbind mm/mempolicy.c:1479 [inline]
 __se_sys_mbind mm/mempolicy.c:1475 [inline]
 __arm64_sys_mbind+0x678/0x804 mm/mempolicy.c:1475
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:181
 el0_svc+0x78/0x1d0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: d00466e1 91240021 aa1303e0 97ff5553 (d4210000) 
---[ end trace 489ae8c26bfcc2f8 ]---