Re: [syzbot] [bridge?] KASAN: use-after-free Read in filemap_map_pages

[Hillf Danton]

> Date: Sat, 15 Aug 2026 05:51:23 -0700	[thread overview]
> syzbot has found a reproducer for the following issue on:
> 
> HEAD commit:    15ef2f78c49d Merge tag 'input-for-v7.2-rc7' of git://git.k..
> git tree:       upstream
> console output: https://syzkaller.appspot.com/x/log.txt?x=11cfe279580000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=1d67342c314f228d
> dashboard link: https://syzkaller.appspot.com/bug?extid=b72767277f29b6407083
> compiler:       gcc (Debian 14.2.0-19) 14.2.0, GNU ld (GNU Binutils for Debian) 2.44
> C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=15cfe279580000

#syz test

--- x/mm/mmu_gather.c
+++ y/mm/mmu_gather.c
@@ -358,7 +358,7 @@ static inline void __tlb_remove_table_on
 #else
 static inline void __tlb_remove_table_one(void *table)
 {
-	tlb_remove_table_sync_rcu();
+	tlb_remove_table_sync_one();
 	__tlb_remove_table(table);
 }
 #endif /* CONFIG_PT_RECLAIM */
--