------------[ cut here ]------------
WARNING: mm/rmap.c:528 at unlink_anon_vmas+0x564/0x780, CPU#0: syz-executor.6/42168
Modules linked in:
CPU: 0 UID: 0 PID: 42168 Comm: syz-executor.6 Not tainted 6.19.0-rc7-next-20260126 #1 PREEMPT(lazy) 
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:unlink_anon_vmas+0x564/0x780
Code: 8b 44 24 08 48 8b 40 30 4c 39 e0 0f 85 98 00 00 00 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f e9 f2 64 cf ff e8 ed 64 cf ff 90 <0f> 0b 90 e9 64 ff ff ff e8 df 64 cf ff 90 0f 0b 90 e9 1d ff ff ff
RSP: 0018:ffff88805125f798 EFLAGS: 00010293
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81a61e87
RDX: ffff88804d7bd280 RSI: ffffffff81a61f23 RDI: 0000000000000007
RBP: ffff8880162e13c0 R08: 0000000000000001 R09: ffffed1003d004ef
R10: ffffffffffffffff R11: 0000000000000000 R12: ffff88801e802770
R13: ffff88801b2328e0 R14: ffff88801b2328f0 R15: ffffffffffffffff
FS:  0000000000000000(0000) GS:ffff8880e5336000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055b13282baf8 CR3: 000000001a5af000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 free_pgtables+0x2e1/0x1020
 exit_mmap+0x3f1/0x930
 mmput+0xd5/0x390
 do_exit+0x7ad/0x2950
 do_group_exit+0xd3/0x2a0
 get_signal+0x24aa/0x25d0
 arch_do_signal_or_restart+0x80/0x7a0
 exit_to_user_mode_loop+0x89/0x4c0
 do_syscall_64+0x3c3/0x420
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f30d537bb19
Code: Unable to access opcode bytes at 0x7f30d537baef.
RSP: 002b:00007f30d28f1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f30d548ef68 RCX: 00007f30d537bb19
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f30d548ef68
RBP: 00007f30d548ef60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f30d548ef6c
R13: 00007fff608fe09f R14: 00007f30d28f1300 R15: 0000000000022000
 </TASK>
irq event stamp: 1423
hardirqs last  enabled at (1435): [<ffffffff815549c8>] __up_console_sem+0x78/0x80
hardirqs last disabled at (1448): [<ffffffff815549ad>] __up_console_sem+0x5d/0x80
softirqs last  enabled at (1774): [<ffffffff813c25b4>] __irq_exit_rcu+0xc4/0x100
softirqs last disabled at (1785): [<ffffffff813c25b4>] __irq_exit_rcu+0xc4/0x100
---[ end trace 0000000000000000 ]---
loop4: detected capacity change from 0 to 2048
EXT4-fs (loop4): inodes count not valid: 131104 vs 32
loop4: detected capacity change from 0 to 2048
EXT4-fs (loop4): inodes count not valid: 131104 vs 32
loop4: detected capacity change from 0 to 2048
EXT4-fs (loop4): inodes count not valid: 196640 vs 32
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 42489 Comm: syz-executor.6 Tainted: G        W           6.19.0-rc7-next-20260126 #1 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xfa/0x120
 should_fail_ex+0x4d7/0x5e0
 should_failslab+0xc2/0x120
 kmem_cache_alloc_noprof+0x69/0x630
 mas_preallocate+0xb3d/0xd90
 commit_merge+0x253/0xe50
 vma_modify+0xee8/0x2950
 vma_modify_flags+0x1e7/0x340
 mlock_fixup+0x231/0x1070
 apply_vma_lock_flags+0x248/0x370
 __x64_sys_munlock+0x136/0x300
 do_syscall_64+0xbf/0x420
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f30d537bb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f30d28f1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000096
RAX: ffffffffffffffda RBX: 00007f30d548ef60 RCX: 00007f30d537bb19
RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ff9000
RBP: 00007f30d28f11d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fff608fe09f R14: 00007f30d28f1300 R15: 0000000000022000
 </TASK>
loop4: detected capacity change from 0 to 2048
EXT4-fs (loop4): inodes count not valid: 262176 vs 32
loop4: detected capacity change from 0 to 2048
EXT4-fs (loop4): inodes count not valid: 262176 vs 32
loop4: detected capacity change from 0 to 2048
EXT4-fs (loop4): inodes count not valid: 327712 vs 32