1 files changed, 6 insertions, 0 deletions
diff --git a/mm/vma.c b/mm/vma.c
index 58264a717b9e..11e664fc3f20 100644
--- a/mm/vma.c
+++ b/mm/vma.c
@@ -2802,6 +2802,12 @@ static int mmap_validate_vma_flags(const vma_flags_t *flags)
 		return -EINVAL;
 #endif
 
+	if (!vma_flags_test_any(flags, VMA_PFNMAP_BIT, VMA_MIXEDMAP_BIT)) {
+		/* Only kernel-owned mappings may set VMA_IO_BIT. */
+		if (WARN_ON_ONCE(vma_flags_test(flags, VMA_IO_BIT)))
+			return -EINVAL;
+	}
+
 	return 0;
 }