head: 05ffc0000029080d ffff800020237c80 ffff800020237c80 ffff0000da345111
head: 0000000400000200 0000000000000000 000000baffffffff ffff0000cac10000
page dumped because: VM_BUG_ON_PAGE(1 && PageTail(page))
------------[ cut here ]------------
kernel BUG at include/linux/page-flags.h:431!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 5210 Comm: syz.2.28 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : TestClearPageMlocked include/linux/page-flags.h:431 [inline]
pc : clear_page_mlock+0x4dc/0x5b4 mm/mlock.c:64
lr : TestClearPageMlocked include/linux/page-flags.h:431 [inline]
lr : clear_page_mlock+0x4dc/0x5b4 mm/mlock.c:64
sp : ffff800020237460
x29: ffff800020237460 x28: ffff0000d16c2108 x27: 1fffff80007a7a41
x26: ffff0000d16c2108 x25: 1fffff80007a7a41 x24: dfff800000000000
x23: fffffc0003d38001 x22: 0000000000000001 x21: fffffc0003d38001
x20: fffffc0003d3d208 x19: fffffc0003d3d200 x18: 0000000000000002
x17: 0000000000000000 x16: ffff800008304c04 x15: 00000000ffffffff
x14: 0000000000000001 x13: 1ffff00004046d50 x12: 0000000000ff0100
x11: 0000000000000001 x10: 0000000000000000 x9 : 82222350ae57a000
x8 : 82222350ae57a000 x7 : 0000000000000000 x6 : 0000000000000001
x5 : ffff800020236a98 x4 : 0000000000000008 x3 : 0000000000000030
x2 : 000000000000000c x1 : 0000000000000000 x0 : ffff700004046e38
Call trace:
 TestClearPageMlocked include/linux/page-flags.h:431 [inline]
 clear_page_mlock+0x4dc/0x5b4 mm/mlock.c:64
 page_remove_rmap+0xbd4/0xf90 mm/rmap.c:1375
 try_to_migrate_one+0xac0/0xe1c mm/rmap.c:1938
 rmap_walk_anon+0x2fc/0x4cc mm/rmap.c:2323
 try_to_migrate+0x3f8/0x4f4 mm/rmap.c:-1
 __unmap_and_move mm/migrate.c:1072 [inline]
 unmap_and_move mm/migrate.c:1218 [inline]
 migrate_pages+0x194c/0x2f48 mm/migrate.c:1493
 do_mbind mm/mempolicy.c:1325 [inline]
 kernel_mbind mm/mempolicy.c:1472 [inline]
 __do_sys_mbind mm/mempolicy.c:1479 [inline]
 __se_sys_mbind mm/mempolicy.c:1475 [inline]
 __arm64_sys_mbind+0x678/0x804 mm/mempolicy.c:1475
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:181
 el0_svc+0x78/0x1d0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: b00466e1 91250021 aa1303e0 97ff554e (d4210000) 
---[ end trace 3fa3674d0c3c0a09 ]---