syzbot


KASAN: use-after-free Read in hdm_disconnect

Status: upstream: reported C repro on 2024/08/26 05:18
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+8142092e4d01872f00ae@syzkaller.appspotmail.com
Fix commit: 578eb18cd111 most: usb: Fix use-after-free in hdm_disconnect
Patched on: [ci2-linux-5-15-kasan ci2-linux-5-15-kasan-perf], missing on: [ci2-linux-5-15-kasan-arm64]
First crash: 469d, last: 40d
Fix bisection: fixed by (bisect log) :
commit 578eb18cd111addec94c43f61cd4b4429e454809
Author: Victoria Votokina <Victoria.Votokina@kaspersky.com>
Date: Fri Oct 10 10:52:40 2025 +0000

  most: usb: Fix use-after-free in hdm_disconnect

  
Bug presence (1)
Date Name Commit Repro Result
2025/01/02 upstream (ToT) 56e6a3499e14 C [report] KASAN: slab-use-after-free Read in hdm_disconnect
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 KASAN: use-after-free Read in hdm_disconnect 19 C done 153 40d 469d 3/3 fixed on 2025/12/06 22:47
upstream KASAN: slab-use-after-free Read in hdm_disconnect usb 19 C error 18706 40d 497d 29/29 fixed on 2025/11/18 08:45
linux-6.6 KASAN: slab-use-after-free Read in hdm_disconnect 19 C done 62 40d 159d 2/2 fixed on 2025/12/01 11:38
Last patch testing requests (9)
Created Duration User Patch Repo Result
2025/09/23 11:30 14m retest repro linux-5.15.y report log
2025/09/23 11:30 16m retest repro linux-5.15.y report log
2025/09/23 11:30 11m retest repro linux-5.15.y report log
2025/09/23 11:30 11m retest repro linux-5.15.y report log
2025/09/23 11:30 14m retest repro linux-5.15.y report log
2025/06/18 20:54 18m retest repro linux-5.15.y error
2025/05/18 06:44 18m retest repro linux-5.15.y report log
2025/05/18 06:44 15m retest repro linux-5.15.y report log
2025/05/18 06:44 19m retest repro linux-5.15.y report log

Sample crash report:
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: USB disconnect, device number 2
==================================================================
BUG: KASAN: use-after-free in hdm_disconnect+0xf8/0x190 drivers/most/most_usb.c:1125
Read of size 8 at addr ffff0000d919d978 by task kworker/1:2/1534

CPU: 1 PID: 1534 Comm: kworker/1:2 Not tainted 5.15.179-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue: usb_hub_wq hub_event
Call trace:
 dump_backtrace+0x0/0x530 arch/arm64/kernel/stacktrace.c:152
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
 print_address_description+0x7c/0x3f0 mm/kasan/report.c:248
 __kasan_report mm/kasan/report.c:434 [inline]
 kasan_report+0x174/0x1e4 mm/kasan/report.c:451
 __asan_report_load8_noabort+0x44/0x50 mm/kasan/report_generic.c:309
 hdm_disconnect+0xf8/0x190 drivers/most/most_usb.c:1125
 usb_unbind_interface+0x1a4/0x758 drivers/usb/core/driver.c:458
 __device_release_driver drivers/base/dd.c:1229 [inline]
 device_release_driver_internal+0x464/0x6ac drivers/base/dd.c:1262
 device_release_driver+0x28/0x38 drivers/base/dd.c:1285
 bus_remove_device+0x298/0x38c drivers/base/bus.c:531
 device_del+0x57c/0x9b4 drivers/base/core.c:3600
 usb_disable_device+0x354/0x760 drivers/usb/core/message.c:1414
 usb_disconnect+0x290/0x7e8 drivers/usb/core/hub.c:2259
 hub_port_connect drivers/usb/core/hub.c:5311 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5607 [inline]
 port_event drivers/usb/core/hub.c:5753 [inline]
 hub_event+0x1718/0x46b8 drivers/usb/core/hub.c:5835
 process_one_work+0x790/0x11b8 kernel/workqueue.c:2310
 process_scheduled_works kernel/workqueue.c:2373 [inline]
 worker_thread+0xb88/0x1034 kernel/workqueue.c:2459
 kthread+0x37c/0x45c kernel/kthread.c:334
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870

Allocated by task 1534:
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track mm/kasan/common.c:46 [inline]
 set_alloc_info mm/kasan/common.c:434 [inline]
 ____kasan_kmalloc+0xbc/0xfc mm/kasan/common.c:513
 __kasan_kmalloc+0x10/0x1c mm/kasan/common.c:522
 kasan_kmalloc include/linux/kasan.h:264 [inline]
 kmem_cache_alloc_trace+0x27c/0x47c mm/slub.c:3247
 kmalloc include/linux/slab.h:591 [inline]
 kzalloc include/linux/slab.h:721 [inline]
 hdm_probe+0xa4/0x1044 drivers/most/most_usb.c:959
 usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x26c/0xaec drivers/base/dd.c:595
 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:755
 driver_probe_device+0x78/0x34c drivers/base/dd.c:785
 __device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:907
 bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:429
 __device_attach+0x2f0/0x480 drivers/base/dd.c:979
 device_initial_probe+0x24/0x34 drivers/base/dd.c:1028
 bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:489
 device_add+0xae0/0xef4 drivers/base/core.c:3412
 usb_set_configuration+0x15e0/0x1b60 drivers/usb/core/message.c:2165
 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
 usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x26c/0xaec drivers/base/dd.c:595
 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:755
 driver_probe_device+0x78/0x34c drivers/base/dd.c:785
 __device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:907
 bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:429
 __device_attach+0x2f0/0x480 drivers/base/dd.c:979
 device_initial_probe+0x24/0x34 drivers/base/dd.c:1028
 bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:489
 device_add+0xae0/0xef4 drivers/base/core.c:3412
 usb_new_device+0x900/0x1468 drivers/usb/core/hub.c:2604
 hub_port_connect drivers/usb/core/hub.c:5467 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5607 [inline]
 port_event drivers/usb/core/hub.c:5753 [inline]
 hub_event+0x236c/0x46b8 drivers/usb/core/hub.c:5835
 process_one_work+0x790/0x11b8 kernel/workqueue.c:2310
 worker_thread+0x910/0x1034 kernel/workqueue.c:2457
 kthread+0x37c/0x45c kernel/kthread.c:334
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870

Freed by task 1534:
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track+0x4c/0x84 mm/kasan/common.c:46
 kasan_set_free_info+0x28/0x4c mm/kasan/generic.c:360
 ____kasan_slab_free+0x118/0x164 mm/kasan/common.c:366
 __kasan_slab_free+0x18/0x28 mm/kasan/common.c:374
 kasan_slab_free include/linux/kasan.h:230 [inline]
 slab_free_hook mm/slub.c:1705 [inline]
 slab_free_freelist_hook+0x128/0x1ec mm/slub.c:1731
 slab_free mm/slub.c:3499 [inline]
 kfree+0x178/0x410 mm/slub.c:4559
 release_mdev+0x20/0x30 drivers/most/most_usb.c:932
 device_release+0x8c/0x1ac drivers/base/core.c:-1
 kobject_cleanup lib/kobject.c:713 [inline]
 kobject_release lib/kobject.c:744 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x2c4/0x438 lib/kobject.c:761
 put_device drivers/base/core.c:3520 [inline]
 device_unregister+0x3c/0xcc drivers/base/core.c:3634
 most_deregister_interface+0x3e0/0x42c drivers/most/core.c:1402
 hdm_disconnect+0xe0/0x190 drivers/most/most_usb.c:1123
 usb_unbind_interface+0x1a4/0x758 drivers/usb/core/driver.c:458
 __device_release_driver drivers/base/dd.c:1229 [inline]
 device_release_driver_internal+0x464/0x6ac drivers/base/dd.c:1262
 device_release_driver+0x28/0x38 drivers/base/dd.c:1285
 bus_remove_device+0x298/0x38c drivers/base/bus.c:531
 device_del+0x57c/0x9b4 drivers/base/core.c:3600
 usb_disable_device+0x354/0x760 drivers/usb/core/message.c:1414
 usb_disconnect+0x290/0x7e8 drivers/usb/core/hub.c:2259
 hub_port_connect drivers/usb/core/hub.c:5311 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5607 [inline]
 port_event drivers/usb/core/hub.c:5753 [inline]
 hub_event+0x1718/0x46b8 drivers/usb/core/hub.c:5835
 process_one_work+0x790/0x11b8 kernel/workqueue.c:2310
 process_scheduled_works kernel/workqueue.c:2373 [inline]
 worker_thread+0xb88/0x1034 kernel/workqueue.c:2459
 kthread+0x37c/0x45c kernel/kthread.c:334
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870

The buggy address belongs to the object at ffff0000d919c000
 which belongs to the cache kmalloc-8k of size 8192
The buggy address is located 6520 bytes inside of
 8192-byte region [ffff0000d919c000, ffff0000d919e000)
The buggy address belongs to the page:
page:000000000354411f refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119198
head:000000000354411f order:3 compound_mapcount:0 compound_pincount:0
flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002c00
raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff0000d919d800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff0000d919d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff0000d919d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                                ^
 ffff0000d919d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff0000d919da00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
------------[ cut here ]------------
refcount_t: underflow; use-after-free.
WARNING: CPU: 1 PID: 1534 at lib/refcount.c:28 refcount_warn_saturate+0x1c8/0x20c lib/refcount.c:28
Modules linked in:
CPU: 1 PID: 1534 Comm: kworker/1:2 Tainted: G    B             5.15.179-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue: usb_hub_wq hub_event
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : refcount_warn_saturate+0x1c8/0x20c lib/refcount.c:28
lr : refcount_warn_saturate+0x1c8/0x20c lib/refcount.c:28
sp : ffff800023d072f0
x29: ffff800023d072f0 x28: ffff800016ad14c0 x27: ffff0000caa72000
x26: 1fffe0001954ea07 x25: dfff800000000000 x24: ffff0000caa73030
x23: 1fffe0001b2338bb x22: ffff0000caa7503c x21: 0000000000000003
x20: ffff0000caa75038 x19: ffff800016fd2000 x18: 0000000000000001
x17: 0000000000000000 x16: ffff800011b59ca8 x15: 00000000ffffffff
x14: ffff0000ccce1b40 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : dfb4ed2fcf04b900
x8 : dfb4ed2fcf04b900 x7 : 0000000000000000 x6 : ffff800011c1d92c
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800008046154
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026
Call trace:
 refcount_warn_saturate+0x1c8/0x20c lib/refcount.c:28
 __refcount_sub_and_test include/linux/refcount.h:283 [inline]
 __refcount_dec_and_test include/linux/refcount.h:315 [inline]
 refcount_dec_and_test include/linux/refcount.h:333 [inline]
 kref_put include/linux/kref.h:64 [inline]
 kobject_put+0x1a8/0x438 lib/kobject.c:761
 put_device+0x28/0x40 drivers/base/core.c:3520
 hdm_disconnect+0x170/0x190 drivers/most/most_usb.c:1129
 usb_unbind_interface+0x1a4/0x758 drivers/usb/core/driver.c:458
 __device_release_driver drivers/base/dd.c:1229 [inline]
 device_release_driver_internal+0x464/0x6ac drivers/base/dd.c:1262
 device_release_driver+0x28/0x38 drivers/base/dd.c:1285
 bus_remove_device+0x298/0x38c drivers/base/bus.c:531
 device_del+0x57c/0x9b4 drivers/base/core.c:3600
 usb_disable_device+0x354/0x760 drivers/usb/core/message.c:1414
 usb_disconnect+0x290/0x7e8 drivers/usb/core/hub.c:2259
 hub_port_connect drivers/usb/core/hub.c:5311 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5607 [inline]
 port_event drivers/usb/core/hub.c:5753 [inline]
 hub_event+0x1718/0x46b8 drivers/usb/core/hub.c:5835
 process_one_work+0x790/0x11b8 kernel/workqueue.c:2310
 process_scheduled_works kernel/workqueue.c:2373 [inline]
 worker_thread+0xb88/0x1034 kernel/workqueue.c:2459
 kthread+0x37c/0x45c kernel/kthread.c:334
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
irq event stamp: 41648
hardirqs last  enabled at (41647): [<ffff8000088d8b90>] kasan_quarantine_put+0xdc/0x204 mm/kasan/quarantine.c:231
hardirqs last disabled at (41648): [<ffff800011c31844>] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline]
hardirqs last disabled at (41648): [<ffff800011c31844>] _raw_spin_lock_irqsave+0xfc/0x14c kernel/locking/spinlock.c:162
softirqs last  enabled at (41426): [<ffff8000081b70b8>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (41426): [<ffff8000081b70b8>] handle_softirqs+0xb88/0xdbc kernel/softirq.c:586
softirqs last disabled at (41415): [<ffff8000081b7750>] __do_softirq kernel/softirq.c:592 [inline]
softirqs last disabled at (41415): [<ffff8000081b7750>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (41415): [<ffff8000081b7750>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (41415): [<ffff8000081b7750>] __irq_exit_rcu+0x268/0x4d8 kernel/softirq.c:641
---[ end trace 4091f0d58e001bfa ]---
usb 1-1: new full-speed USB device number 3 using dummy_hcd
usb 1-1: not running at top speed; connect to a high speed hub
usb 1-1: config 8 has an invalid interface number: 33 but max is 0
usb 1-1: config 8 has no interface number 0
usb 1-1: config 8 interface 33 has no altsetting 0
usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=56.06
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: USB disconnect, device number 3
usb 1-1: new full-speed USB device number 4 using dummy_hcd
usb 1-1: not running at top speed; connect to a high speed hub
usb 1-1: config 8 has an invalid interface number: 33 but max is 0
usb 1-1: config 8 has no interface number 0
usb 1-1: config 8 interface 33 has no altsetting 0
usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=56.06
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: USB disconnect, device number 4
usb 1-1: new full-speed USB device number 5 using dummy_hcd
usb 1-1: not running at top speed; connect to a high speed hub
usb 1-1: config 8 has an invalid interface number: 33 but max is 0
usb 1-1: config 8 has no interface number 0
usb 1-1: config 8 interface 33 has no altsetting 0
usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=56.06
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: USB disconnect, device number 5
usb 1-1: new full-speed USB device number 6 using dummy_hcd
usb 1-1: not running at top speed; connect to a high speed hub
usb 1-1: config 8 has an invalid interface number: 33 but max is 0
usb 1-1: config 8 has no interface number 0
usb 1-1: config 8 interface 33 has no altsetting 0
usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=56.06
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: USB disconnect, device number 6
usb 1-1: new full-speed USB device number 7 using dummy_hcd
usb 1-1: not running at top speed; connect to a high speed hub
usb 1-1: config 8 has an invalid interface number: 33 but max is 0
usb 1-1: config 8 has no interface number 0
usb 1-1: config 8 interface 33 has no altsetting 0
usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=56.06
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: USB disconnect, device number 7
usb 1-1: new full-speed USB device number 8 using dummy_hcd
usb 1-1: not running at top speed; connect to a high speed hub
usb 1-1: config 8 has an invalid interface number: 33 but max is 0
usb 1-1: config 8 has no interface number 0
usb 1-1: config 8 interface 33 has no altsetting 0
usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=56.06
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: USB disconnect, device number 8
usb 1-1: new full-speed USB device number 9 using dummy_hcd
usb 1-1: not running at top speed; connect to a high speed hub
usb 1-1: config 8 has an invalid interface number: 33 but max is 0
usb 1-1: config 8 has no interface number 0
usb 1-1: config 8 interface 33 has no altsetting 0
usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=56.06
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: USB disconnect, device number 9
usb 1-1: new full-speed USB device number 10 using dummy_hcd
usb 1-1: not running at top speed; connect to a high speed hub
usb 1-1: config 8 has an invalid interface number: 33 but max is 0
usb 1-1: config 8 has no interface number 0
usb 1-1: config 8 interface 33 has no altsetting 0
usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=56.06
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz

Crashes (135):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/04/09 17:57 linux-5.15.y 0c935c049b5c 47d015b1 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2024/08/26 06:55 linux-5.15.y fa93fa65db6e d7d32352 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2024/08/26 06:23 linux-5.15.y fa93fa65db6e d7d32352 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2024/08/26 05:52 linux-5.15.y fa93fa65db6e d7d32352 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2025/10/29 05:44 linux-5.15.y ac56c046adf4 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/10/28 10:38 linux-5.15.y ac56c046adf4 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/10/27 23:20 linux-5.15.y ac56c046adf4 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/10/27 21:56 linux-5.15.y ac56c046adf4 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/10/20 10:34 linux-5.15.y ac56c046adf4 1c8c8cd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/10/18 18:50 linux-5.15.y 29e53a5b1c4f 1c8c8cd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/10/16 14:38 linux-5.15.y 29e53a5b1c4f 19568248 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/10/16 09:05 linux-5.15.y 29e53a5b1c4f 19568248 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/10/16 00:25 linux-5.15.y 29e53a5b1c4f 19568248 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/10/13 04:24 linux-5.15.y 29e53a5b1c4f ff1712fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/10/08 15:41 linux-5.15.y 29e53a5b1c4f 7e2882b3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/10/05 22:41 linux-5.15.y 29e53a5b1c4f 49379ee0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/10/03 14:30 linux-5.15.y 29e53a5b1c4f 49379ee0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/10/02 06:29 linux-5.15.y 43bb85222e53 267f56c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/09/30 06:18 linux-5.15.y 43bb85222e53 86341da6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/09/03 02:08 linux-5.15.y 01879f56bdde 96a211bc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/09/01 04:43 linux-5.15.y 01879f56bdde 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/08/22 23:01 linux-5.15.y c79648372d02 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/08/16 05:27 linux-5.15.y c79648372d02 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/08/08 21:58 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/07/27 19:54 linux-5.15.y c79648372d02 fb8f743d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/07/27 12:32 linux-5.15.y c79648372d02 fb8f743d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/07/26 22:14 linux-5.15.y c79648372d02 fb8f743d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/07/24 19:19 linux-5.15.y c79648372d02 65d60d73 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/07/02 17:55 linux-5.15.y 3dea0e7f549e bc80e4f0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/07/02 01:57 linux-5.15.y 3dea0e7f549e 091a06cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/06/26 05:29 linux-5.15.y 1c700860e8bc 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/06/23 00:23 linux-5.15.y 1c700860e8bc d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/06/03 21:01 linux-5.15.y 98f47d0e9b8c a30356b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/05/25 08:05 linux-5.15.y 98f47d0e9b8c ed351ea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/05/03 10:48 linux-5.15.y 16fdf2c7111b b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/04/27 11:27 linux-5.15.y f7347f400572 c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/04/26 13:41 linux-5.15.y f7347f400572 c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/04/23 14:18 linux-5.15.y f7347f400572 53a8b9bd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/04/22 08:55 linux-5.15.y f7347f400572 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/04/18 23:36 linux-5.15.y f7347f400572 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2024/12/28 14:11 linux-5.15.y 91786f140358 d3ccff63 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: use-after-free Read in hdm_disconnect
2025/08/09 21:08 linux-5.15.y c79648372d02 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2025/04/17 21:58 linux-5.15.y f7347f400572 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2025/04/17 09:41 linux-5.15.y f7347f400572 229db4cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2025/04/17 04:41 linux-5.15.y f7347f400572 a95239b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2025/04/15 22:53 linux-5.15.y f7347f400572 a95239b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2025/04/15 10:40 linux-5.15.y f7347f400572 23b969b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2025/04/13 01:30 linux-5.15.y f7347f400572 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2025/04/10 16:35 linux-5.15.y f7347f400572 1ef3ab4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2025/04/10 13:30 linux-5.15.y f7347f400572 988b336c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2025/04/09 22:43 linux-5.15.y 0c935c049b5c 988b336c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2025/04/09 20:35 linux-5.15.y 0c935c049b5c 47d015b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
2024/08/26 05:17 linux-5.15.y fa93fa65db6e d7d32352 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: use-after-free Read in hdm_disconnect
* Struck through repros no longer work on HEAD.