WARNING: lock held when returning to user space in lock_next_vma

Status: auto-obsoleted due to no activity on 2025/10/24 17:10
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+80011ad33eec39e6ce42@syzkaller.appspotmail.com
First crash: 398d, last: 390d
Cause bisection: introduced by (bisect log) :
commit 6772c457a86536f3496bf5b3716f34a5ac125783
Author: Suren Baghdasaryan <surenb@google.com>
Date: Tue Jun 24 19:33:59 2025 +0000

  fs/proc/task_mmu:: execute PROCMAP_QUERY ioctl under per-vma locks

Crash: BUG: unable to handle kernel paging request in lock_next_vma (log)
Repro: C syz .config
  
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [mm?] WARNING: lock held when returning to user space in lock_next_vma 11 (18) 2025/07/11 05:44
▶ ▼ Last patch testing requests (8)
Created Duration User Patch Repo Result
2025/10/09 17:43 25m retest repro linux-next OK log
2025/09/19 08:38 25m retest repro linux-next OK log
2025/07/30 23:22 32m retest repro linux-next error
2025/07/11 05:09 16m hdanton@sina.com linux-next report log
2025/07/11 04:03 24m hdanton@sina.com patch linux-next OK log
2025/07/11 03:54 0m hdanton@sina.com patch https://web.git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master error
2025/07/11 02:26 0m hdanton@sina.com patch linux-next error
2025/07/11 00:32 19m hdanton@sina.com patch linux-next report log

Sample crash report:
================================================
WARNING: lock held when returning to user space!
6.16.0-rc6-next-20250716-syzkaller #0 Not tainted
------------------------------------------------
syz.2.3199/16830 is leaving the kernel with locks still held!
1 lock held by syz.2.3199/16830:
 #0: ffff888066173308 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x146/0xdc0 mm/mmap_lock.c:220

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/16 17:09 linux-next e8352908bdcd c118d736 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING: lock held when returning to user space in lock_next_vma
2025/07/13 08:45 linux-next a62b7a37e6fc 3cda49cf .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING: lock held when returning to user space in lock_next_vma
2025/07/08 08:48 linux-next 26ffb3d6f02c 4f67c4ae .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING: lock held when returning to user space in lock_next_vma
* Struck through repros no longer work on HEAD.