Re: [syzbot] [bridge?] KASAN: use-after-free Read in filemap_map_pages
Hillf Danton <[email protected]>
| Newsgroups | gmane.linux.kernel |
|---|---|
| Message-ID | <[email protected]> |
> Date: Sat, 15 Aug 2026 05:51:23 -0700 [thread overview]
> syzbot has found a reproducer for the following issue on:
>
> HEAD commit: 15ef2f78c49d Merge tag 'input-for-v7.2-rc7' of git://git.k..
> git tree: upstream
> console output: https://syzkaller.appspot.com/x/log.txt?x=11cfe279580000
> kernel config: https://syzkaller.appspot.com/x/.config?x=1d67342c314f228d
> dashboard link: https://syzkaller.appspot.com/bug?extid=b72767277f29b6407083
> compiler: gcc (Debian 14.2.0-19) 14.2.0, GNU ld (GNU Binutils for Debian) 2.44
> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=15cfe279580000
#syz test
--- x/mm/mmu_gather.c
+++ y/mm/mmu_gather.c
@@ -358,7 +358,7 @@ static inline void __tlb_remove_table_on
#else
static inline void __tlb_remove_table_one(void *table)
{
- tlb_remove_table_sync_rcu();
+ tlb_remove_table_sync_one();
__tlb_remove_table(table);
}
#endif /* CONFIG_PT_RECLAIM */
--