syzbot

 sign-in | mailing list | source | docs
🐞 Open [769]
🐞 Fixed [123]
🐞 Invalid [813]
⬇ Missing Backports [75]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

KASAN: use-after-free Read in ext4_find_extent

Status: upstream: reported C repro on 2023/09/19 00:11
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+d51866deebd5281b2c88@syzkaller.appspotmail.com
First crash: 672d, last: 6d00h
Fix commit to backport (bisect log) :
tree: upstream
commit a898cb621ac589b0b9e959309689a027e765aa12
Author: Jan Kara <jack@suse.cz>
Date: Wed Feb 7 18:12:15 2024 +0000

  quota: Detect loops in quota tree

[report pending]
  
Fix bisection: the issue occurs on the latest tested release (bisect log)
Crash: KASAN: use-after-free Read in ext4_find_extent (log)
Repro: C syz .config
  
▶ ▼ Bug presence (3)
Date Name Commit Repro Result
2024/04/29 linux-6.1.y (ToT) f2295faba5e8 C [report] KASAN: use-after-free Read in ext4_find_extent
2023/09/19 upstream (ToT) 2cf0f7156238 C [report] KASAN: use-after-free Read in ext4_find_extent
2024/04/29 upstream (ToT) e67572cd2204 C Didn't crash
▶ ▼ Similar bugs (11)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-54 KASAN: use-after-free Read in ext4_find_extent 19 C 2 60d 158d 0/2 upstream: reported C repro on 2025/02/13 21:05
android-5-10 KASAN: use-after-free Read in ext4_find_extent ext4 19 C error inconclusive 39 8d04h 939d 0/2 upstream: reported C repro on 2022/12/26 07:59
android-6-1 KASAN: use-after-free Read in ext4_find_extent missing-backport 19 C error done 3 268d 765d 0/2 auto-obsoleted due to no activity on 2025/02/04 04:57
linux-5.15 KASAN: use-after-free Read in ext4_find_extent origin:lts-only 19 C inconclusive 7 9d22h 734d 0/3 upstream: reported C repro on 2023/07/19 14:49
upstream KASAN: use-after-free Read in ext4_find_extent ext4 19 2 1371d 1432d 0/29 auto-closed as invalid on 2022/02/17 05:19
android-6-1 KASAN: use-after-free Read in ext4_find_extent (2) origin:lts 19 C 2 21d 52d 0/2 upstream: reported C repro on 2025/05/31 08:45
android-5-15 KASAN: use-after-free Read in ext4_find_extent ext4 origin:lts 19 C error 15 8d07h 939d 0/2 upstream: reported C repro on 2022/12/26 07:59
upstream KASAN: use-after-free Read in ext4_find_extent (2) ext4 19 C error 2 809d 934d 22/29 fixed on 2023/06/08 14:41
upstream KASAN: use-after-free Read in ext4_find_extent (4) ext4 19 C done 74 6h24m 203d 0/29 upstream: reported C repro on 2024/12/30 20:06
upstream KASAN: use-after-free Read in ext4_find_extent (3) prio:low ext4 19 C error done 31 574d 755d 25/29 fixed on 2024/01/30 23:26
android-54 KASAN: slab-out-of-bounds Read in ext4_find_extent ext4 17 C 1 753d 939d 0/2 auto-obsoleted due to no activity on 2023/10/08 03:20
▶ ▼ Fix bisection attempts (7)
Created Duration User Patch Repo Result
2024/05/17 17:59 4h15m fix candidate upstream OK (1) job log
2024/04/07 08:39 1h19m bisect fix linux-6.1.y OK (0) job log log
2024/03/07 21:47 58m bisect fix linux-6.1.y OK (0) job log log
2024/01/29 10:24 1h33m bisect fix linux-6.1.y OK (0) job log log
2023/12/27 08:41 1h00m bisect fix linux-6.1.y OK (0) job log log
2023/11/26 13:38 56m bisect fix linux-6.1.y OK (0) job log log
2023/10/25 09:50 1h54m bisect fix linux-6.1.y OK (0) job log log

Sample crash report:
==================================================================
BUG: KASAN: use-after-free in ext4_ext_binsearch fs/ext4/extents.c:837 [inline]
BUG: KASAN: use-after-free in ext4_find_extent+0xbcc/0xe00 fs/ext4/extents.c:953
Read of size 4 at addr ffff88806f028018 by task syz-executor308/4306

CPU: 0 PID: 4306 Comm: syz-executor308 Not tainted 6.1.141-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x168/0x22e lib/dump_stack.c:106
 print_address_description mm/kasan/report.c:316 [inline]
 print_report+0xa8/0x220 mm/kasan/report.c:427
 kasan_report+0x10b/0x140 mm/kasan/report.c:531
 ext4_ext_binsearch fs/ext4/extents.c:837 [inline]
 ext4_find_extent+0xbcc/0xe00 fs/ext4/extents.c:953
 ext4_ext_map_blocks+0x27d/0x66d0 fs/ext4/extents.c:4165
 ext4_map_blocks+0x9d1/0x1b60 fs/ext4/inode.c:679
 _ext4_get_block+0x1d7/0x4e0 fs/ext4/inode.c:822
 ext4_get_block_unwritten+0x2a/0x100 fs/ext4/inode.c:855
 __block_write_begin_int+0x54b/0x1a70 fs/buffer.c:1991
 __block_write_begin fs/buffer.c:2041 [inline]
 block_page_mkwrite+0x2d8/0x5f0 fs/buffer.c:2510
 ext4_page_mkwrite+0x3b2/0x10c0 fs/ext4/inode.c:6313
 do_page_mkwrite+0x16b/0x5c0 mm/memory.c:3011
 wp_page_shared+0x167/0x370 mm/memory.c:3360
 handle_pte_fault mm/memory.c:5049 [inline]
 __handle_mm_fault mm/memory.c:5173 [inline]
 handle_mm_fault+0x1ca6/0x3e70 mm/memory.c:5294
 do_user_addr_fault+0x51f/0xb10 arch/x86/mm/fault.c:1340
 handle_page_fault arch/x86/mm/fault.c:1431 [inline]
 exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1487
 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:608
RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 arch/x86/lib/copy_user_64.S:166
Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90003e07a88 EFLAGS: 00050246
RAX: ffffffff8407c001 RBX: 0000000000000040 RCX: 0000000000000040
RDX: 0000000000000040 RSI: ffffc90003e07b20 RDI: 00002000000a4000
RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff520007c0f6c
R10: fffff520007c0f6c R11: 1ffff920007c0f64 R12: 00007fffffffefc0
R13: 000000007ff8ea80 R14: 00002000000a4000 R15: ffffc90003e07b20
 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
 raw_copy_to_user arch/x86/include/asm/uaccess_64.h:58 [inline]
 _copy_to_user+0xea/0x130 lib/usercopy.c:41
 copy_to_user include/linux/uaccess.h:169 [inline]
 rng_dev_read+0x3c5/0x710 drivers/char/hw_random/core.c:267
 do_loop_readv_writev fs/read_write.c:-1 [inline]
 do_iter_read+0x49f/0xb10 fs/read_write.c:798
 vfs_readv fs/read_write.c:916 [inline]
 do_preadv+0x1f6/0x330 fs/read_write.c:1008
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f82cc5fb499
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f82cc5b7218 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f82cc6836c8 RCX: 00007f82cc5fb499
RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
RBP: 00007f82cc6836c0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82cc64f854
R13: 0000200000000000 R14: 0031656c69662f2e R15: 00007ffce3be4ab8
 </TASK>

The buggy address belongs to the physical page:
page:ffffea0001bc0a00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6f028
flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000000000 ffffea0001bc0a48 ffffea0001bc09c8 0000000000000000
raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as freed
page last allocated via order 0, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 4256, tgid 4253 (syz-executor308), ts 61333022615, free_ts 61379590675
 set_page_owner include/linux/page_owner.h:31 [inline]
 post_alloc_hook+0x173/0x1a0 mm/page_alloc.c:2532
 prep_new_page mm/page_alloc.c:2539 [inline]
 get_page_from_freelist+0x1a26/0x1ac0 mm/page_alloc.c:4328
 __alloc_pages+0x1df/0x4e0 mm/page_alloc.c:5614
 folio_alloc+0x1c/0x60 mm/mempolicy.c:2292
 filemap_alloc_folio+0xdb/0x460 mm/filemap.c:999
 page_cache_ra_unbounded+0x177/0x770 mm/readahead.c:248
 do_async_mmap_readahead mm/filemap.c:3164 [inline]
 filemap_fault+0x655/0x1670 mm/filemap.c:3218
 __do_fault+0x13b/0x4e0 mm/memory.c:4280
 do_read_fault mm/memory.c:4631 [inline]
 do_fault mm/memory.c:4760 [inline]
 handle_pte_fault mm/memory.c:5031 [inline]
 __handle_mm_fault mm/memory.c:5173 [inline]
 handle_mm_fault+0x28ca/0x3e70 mm/memory.c:5294
 faultin_page mm/gup.c:1026 [inline]
 __get_user_pages+0x3ff/0xeb0 mm/gup.c:1250
 populate_vma_page_range+0x214/0x2b0 mm/gup.c:1607
 __mm_populate+0x248/0x370 mm/gup.c:1721
 mm_populate include/linux/mm.h:2823 [inline]
 vm_mmap_pgoff+0x203/0x2b0 mm/util.c:525
 ksys_mmap_pgoff+0x516/0x6f0 mm/mmap.c:1470
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
page last free stack trace:
 reset_page_owner include/linux/page_owner.h:24 [inline]
 free_pages_prepare mm/page_alloc.c:1459 [inline]
 free_pcp_prepare mm/page_alloc.c:1509 [inline]
 free_unref_page_prepare+0x8b4/0x9a0 mm/page_alloc.c:3384
 free_unref_page_list+0xbb/0x8e0 mm/page_alloc.c:3525
 release_pages+0x1f92/0x2200 mm/swap.c:1035
 __pagevec_release+0x6d/0xe0 mm/swap.c:1055
 pagevec_release include/linux/pagevec.h:71 [inline]
 folio_batch_release include/linux/pagevec.h:135 [inline]
 truncate_inode_pages_range+0x2f6/0xff0 mm/truncate.c:372
 ext4_evict_inode+0x568/0x1100 fs/ext4/inode.c:210
 evict+0x485/0x870 fs/inode.c:705
 dispose_list fs/inode.c:738 [inline]
 evict_inodes+0x604/0x690 fs/inode.c:792
 generic_shutdown_super+0x93/0x340 fs/super.c:480
 kill_block_super+0x7c/0xe0 fs/super.c:1470
 deactivate_locked_super+0x93/0xf0 fs/super.c:332
 cleanup_mnt+0x463/0x4f0 fs/namespace.c:1182
 task_work_run+0x1ca/0x250 kernel/task_work.c:203
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop+0xe6/0x110 kernel/entry/common.c:177
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:303

Memory state around the buggy address:
 ffff88806f027f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ffff88806f027f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
>ffff88806f028000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
                            ^
 ffff88806f028080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ffff88806f028100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
==================================================================
----------------
Code disassembly (best guess):
   0:	ff c9                	dec    %ecx
   2:	75 f2                	jne    0xfffffff6
   4:	89 d1                	mov    %edx,%ecx
   6:	c1 e9 03             	shr    $0x3,%ecx
   9:	83 e2 07             	and    $0x7,%edx
   c:	f3 48 a5             	rep movsq %ds:(%rsi),%es:(%rdi)
   f:	89 d1                	mov    %edx,%ecx
  11:	f3 a4                	rep movsb %ds:(%rsi),%es:(%rdi)
  13:	31 c0                	xor    %eax,%eax
  15:	0f 01 ca             	clac
  18:	c3                   	ret
  19:	8d 0c ca             	lea    (%rdx,%rcx,8),%ecx
  1c:	89 ca                	mov    %ecx,%edx
  1e:	eb 20                	jmp    0x40
  20:	0f 01 cb             	stac
  23:	83 fa 40             	cmp    $0x40,%edx
  26:	72 38                	jb     0x60
  28:	89 d1                	mov    %edx,%ecx
* 2a:	f3 a4                	rep movsb %ds:(%rsi),%es:(%rdi) <-- trapping instruction
  2c:	31 c0                	xor    %eax,%eax
  2e:	0f 01 ca             	clac
  31:	c3                   	ret
  32:	89 ca                	mov    %ecx,%edx
  34:	eb 0a                	jmp    0x40
  36:	90                   	nop
  37:	90                   	nop
  38:	90                   	nop
  39:	90                   	nop
  3a:	90                   	nop
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop

Crashes (43):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/14 16:01 linux-6.1.y 58485ff1a74f 0e8da31f .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2023/09/19 00:10 linux-6.1.y 09045dae0d90 0b6a67ac .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 05:05 linux-6.1.y 58485ff1a74f 98683f8f .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan-arm64 KASAN: use-after-free Read in ext4_find_extent
2025/06/17 09:18 linux-6.1.y 58485ff1a74f cfebc887 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/15 18:56 linux-6.1.y 58485ff1a74f 5f4b362d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 22:52 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:30 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:27 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:26 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:25 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:23 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:23 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:23 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:21 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:19 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:19 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:19 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:19 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:15 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:13 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:11 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:11 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:08 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:07 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:07 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:06 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:04 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 21:03 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 15:14 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 15:14 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 15:11 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 15:11 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 02:53 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 02:50 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 02:45 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 02:44 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 02:44 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 02:41 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 02:37 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/06/12 02:34 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan KASAN: use-after-free Read in ext4_find_extent
2025/07/16 15:44 linux-6.1.y f2198ea7eb3e 124ec9cc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 KASAN: use-after-free Read in ext4_find_extent
2025/06/24 10:33 linux-6.1.y 58485ff1a74f e2f27c35 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 KASAN: slab-out-of-bounds Read in ext4_find_extent
2025/06/12 01:44 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 KASAN: slab-out-of-bounds Read in ext4_find_extent
* Struck through repros no longer work on HEAD.