head: 05ffc0000029080d ffff8000203c7c80 ffff8000203c7c80 ffff0000ee7afee1
head: 0000000400000200 0000000000000000 00000197ffffffff ffff0000ed950000
page dumped because: VM_BUG_ON_PAGE(1 && PageTail(page))
------------[ cut here ]------------
kernel BUG at include/linux/page-flags.h:431!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 5319 Comm: syz.2.31 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : TestClearPageMlocked include/linux/page-flags.h:431 [inline]
pc : clear_page_mlock+0x4dc/0x5bc mm/mlock.c:64
lr : TestClearPageMlocked include/linux/page-flags.h:431 [inline]
lr : clear_page_mlock+0x4dc/0x5bc mm/mlock.c:64
sp : ffff8000203c7520
x29: ffff8000203c7520 x28: ffff8000203c76e0 x27: 1fffff80007ab361
x26: 1fffff80007ab000 x25: 1fffff80007ab361 x24: dfff800000000000
x23: fffffc0003d58001 x22: 0000000000000001 x21: fffffc0003d58001
x20: fffffc0003d59b08 x19: fffffc0003d59b00 x18: 0000000000000002
x17: 0000000000000000 x16: ffff8000111ceed0 x15: 00000000ffffffff
x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100
x11: 0000000000000001 x10: 0000000000000000 x9 : 7d421ae180247c00
x8 : 7d421ae180247c00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff8000203c6b38 x4 : ffff80001426f5a0 x3 : ffff8000085043fc
x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000038
Call trace:
 TestClearPageMlocked include/linux/page-flags.h:431 [inline]
 clear_page_mlock+0x4dc/0x5bc mm/mlock.c:64
 page_remove_rmap+0xbe4/0xfd0 mm/rmap.c:1375
 try_to_migrate_one+0x9d4/0xd78 mm/rmap.c:1938
 rmap_walk_anon+0x2fc/0x4cc mm/rmap.c:2323
 try_to_migrate+0x3f8/0x4ec mm/rmap.c:-1
 __unmap_and_move mm/migrate.c:1072 [inline]
 unmap_and_move mm/migrate.c:1218 [inline]
 migrate_pages+0x193c/0x3020 mm/migrate.c:1495
 do_mbind mm/mempolicy.c:1325 [inline]
 kernel_mbind mm/mempolicy.c:1472 [inline]
 __do_sys_mbind mm/mempolicy.c:1479 [inline]
 __se_sys_mbind mm/mempolicy.c:1475 [inline]
 __arm64_sys_mbind+0x618/0x7b8 mm/mempolicy.c:1475
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: b00462a1 91060021 aa1303e0 97ff5589 (d4210000) 
---[ end trace ca8964acede4ac66 ]---