------------[ cut here ]------------ WARNING: CPU: 1 PID: 5393 at mm/mmap.c:1049 vma_merge+0x930/0xa80 mm/mmap.c:1049 Modules linked in: CPU: 1 PID: 5393 Comm: syz.2.175 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : vma_merge+0x930/0xa80 mm/mmap.c:1049 lr : vma_merge+0x930/0xa80 mm/mmap.c:1049 sp : ffff8000223f7740 x29: ffff8000223f7820 x28: ffff0000d2f76cd8 x27: ffff8000223f77a0 x26: ffff0000d1172870 x25: 0000000020000000 x24: dfff800000000000 x23: 0000000020000000 x22: 1fffe0001a5eed9b x21: 000000002000f000 x20: ffff0000d2ff20d8 x19: ffff0000d1172878 x18: 0000000000000000 x17: 0000000000000000 x16: ffff800011ba0e90 x15: 0000000000000002 x14: ffff70000394b5d8 x13: 1ffff0000394b5d8 x12: 0000000000080000 x11: 0000000000000b73 x10: ffff8000297ce000 x9 : ffff800008806c78 x8 : 0000000000000b74 x7 : ffff800011a81854 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800011a64f18 x2 : 0000000000000001 x1 : 0000000020000000 x0 : 000000002000f000 Call trace: vma_merge+0x930/0xa80 mm/mmap.c:1049 userfaultfd_register fs/userfaultfd.c:1462 [inline] userfaultfd_ioctl+0x3290/0x43ac fs/userfaultfd.c:2042 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 480 hardirqs last enabled at (479): [] kasan_quarantine_put+0xc4/0x200 mm/kasan/quarantine.c:242 hardirqs last disabled at (480): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (466): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (464): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]---