------------[ cut here ]------------
WARNING: CPU: 1 PID: 18969 at mm/mmap.c:1008 vma_merge+0x3de/0x8c0
Modules linked in:
CPU: 1 PID: 18969 Comm: syz-executor.1 Tainted: G    B             5.17.0-rc5-next-20220225 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:vma_merge+0x3de/0x8c0
Code: e8 57 b3 da ff 4c 89 ee 4c 89 e7 e8 3c b7 da ff 4d 39 ec 0f 86 dd 01 00 00 e8 3e b3 da ff e8 39 b3 da ff eb a1 e8 32 b3 da ff <0f> 0b e9 a5 fd ff ff e8 26 b3 da ff 48 8d bd 88 00 00 00 48 b8 00
RSP: 0018:ffff888017617d28 EFLAGS: 00010212
RAX: 0000000000000744 RBX: 0000000020ffd000 RCX: ffffc90007e00000
RDX: 0000000000040000 RSI: ffffffff8168b61e RDI: 0000000000000003
RBP: ffff88801d1c8a90 R08: 0000000020ffd000 R09: ffffffff858cc397
R10: ffffffff8168b3c1 R11: 0000000000000001 R12: 0000000020ffe000
R13: 0000000020ffd000 R14: ffff88801d1c89c0 R15: ffff88801d1c89c0
FS:  00007fd0d105e700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002000b000 CR3: 000000001dcd4000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 mlock_fixup+0x23b/0x630
 apply_mlockall_flags+0x2be/0x440
 __do_sys_mlockall+0x222/0x4b0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fd0d3b09b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fd0d105e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
RAX: ffffffffffffffda RBX: 00007fd0d3c1d020 RCX: 00007fd0d3b09b19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
RBP: 00007fd0d3b63f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff4b5752ef R14: 00007fd0d105e300 R15: 0000000000022000
 </TASK>
irq event stamp: 0
hardirqs last  enabled at (0): [<0000000000000000>] 0x0
hardirqs last disabled at (0): [<ffffffff81146b9c>] copy_process+0x1cec/0x6d00
softirqs last  enabled at (0): [<ffffffff81146be0>] copy_process+0x1d30/0x6d00
softirqs last disabled at (0): [<0000000000000000>] 0x0
---[ end trace 0000000000000000 ]---