syzbot

 sign-in | mailing list | source | docs | 🏰
🐞 Open [1327]
≡ Subsystems
🐞 Fixed [7156]
🐞 Invalid [18921]
⬇ Missing Backports [221]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
✨ AI
💬 Send us feedback

KASAN: slab-use-after-free Read in report_descriptor_read

Status: upstream: reported on 2025/05/24 10:05
Subsystems: input usb
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+bc537ca7a0efe33988eb@syzkaller.appspotmail.com
First crash: 390d, last: 1d13h
▶ ▼ ✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision Error
8aac3089-f3c5-4d00-9eee-d6747f848212 repro-c Reproduced: ✅ ❓ KASAN: slab-use-after-free Read in report_descriptor_read 2026/05/19 10:06 2026/05/19 10:06 2026/05/19 10:23 223544dc3097d6233a385835bc8dba2b716cc5f0
7b0996a3-a642-4695-9a58-ad5c28dd06ad assessment-security DenialOfService: ✅ Exploitable: ✅ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ KASAN: slab-use-after-free Read in report_descriptor_read 2026/05/17 03:49 2026/05/17 03:49 2026/05/17 04:47 de5aae85e5f28e2fa1c7deefcc24fe286abe5140
70ca20ee-eee0-487a-a503-941c7bca6347 repro ❓ KASAN: slab-use-after-free Read in report_descriptor_read 2026/03/08 00:36 2026/03/08 00:36 2026/03/08 00:45 31e9c887f7dc24e04b3ca70d0d54fc34141844b0
▶ ▼ Discussions (10)
Title Replies (including bot) Last reply
[syzbot] Monthly input report (May 2026) 0 (1) 2026/05/22 12:32
[syzbot] Monthly input report (Apr 2026) 0 (1) 2026/04/21 06:08
[syzbot] Monthly input report (Feb 2026) 0 (1) 2026/02/17 22:04
[syzbot] Monthly input report (Jan 2026) 0 (1) 2026/01/19 08:22
[syzbot] Monthly input report (Dec 2025) 0 (1) 2025/12/17 13:12
[syzbot] Monthly input report (Nov 2025) 0 (1) 2025/11/17 07:50
[syzbot] Monthly input report (Oct 2025) 0 (1) 2025/10/16 08:36
[syzbot] Monthly input report (Sep 2025) 0 (1) 2025/09/15 06:53
[syzbot] Monthly input report (Aug 2025) 0 (1) 2025/08/14 12:42
[syzbot] [input?] [usb?] KASAN: slab-use-after-free Read in report_descriptor_read 0 (1) 2025/05/24 10:05

Sample crash report:
==================================================================
BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 drivers/hid/hid-core.c:2265
Read of size 40 at addr ffff8880257ccf00 by task fido_id/29742

CPU: 1 UID: 0 PID: 29742 Comm: fido_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_address_description+0x55/0x1e0 mm/kasan/report.c:378
 print_report+0x58/0x70 mm/kasan/report.c:482
 kasan_report+0x117/0x150 mm/kasan/report.c:595
 check_region_inline mm/kasan/generic.c:-1 [inline]
 kasan_check_range+0x264/0x2c0 mm/kasan/generic.c:200
 __asan_memcpy+0x29/0x70 mm/kasan/shadow.c:105
 report_descriptor_read+0xb5/0x100 drivers/hid/hid-core.c:2265
 kernfs_file_read_iter fs/kernfs/file.c:269 [inline]
 kernfs_fop_read_iter+0x451/0x6b0 fs/kernfs/file.c:298
 new_sync_read fs/read_write.c:493 [inline]
 vfs_read+0x582/0xa70 fs/read_write.c:574
 ksys_read+0x150/0x270 fs/read_write.c:717
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa378ca7407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007ffeaacd6700 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fa3793aa880 RCX: 00007fa378ca7407
RDX: 0000000000001000 RSI: 00007ffeaacd6750 RDI: 0000000000000004
RBP: 000055cf26849730 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 000055cf26848930
R13: 00007ffeaacd6750 R14: 0000000000000004 R15: 000055ceff96a4d8
 </TASK>

Allocated by task 13825:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __do_kmalloc_node mm/slub.c:5296 [inline]
 __kmalloc_node_track_caller_noprof+0x4db/0x7b0 mm/slub.c:5408
 kmemdup_noprof+0x2b/0x70 mm/util.c:138
 kmemdup_noprof include/linux/fortify-string.h:763 [inline]
 hid_open_report+0x1f7/0xf00 drivers/hid/hid-core.c:1376
 hid_parse include/linux/hid.h:1206 [inline]
 kye_probe+0x21/0x5f0 drivers/hid/hid-kye.c:579
 __hid_device_probe drivers/hid/hid-core.c:2822 [inline]
 hid_device_probe+0x416/0x7a0 drivers/hid/hid-core.c:2859
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x267/0xaf0 drivers/base/dd.c:709
 __driver_probe_device+0x1ef/0x380 drivers/base/dd.c:871
 driver_probe_device+0x4f/0x240 drivers/base/dd.c:901
 __device_attach_driver+0x279/0x430 drivers/base/dd.c:1029
 bus_for_each_drv+0x258/0x2f0 drivers/base/bus.c:500
 __device_attach+0x2c5/0x450 drivers/base/dd.c:1101
 device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1156
 bus_probe_device+0x12a/0x220 drivers/base/bus.c:613
 device_add+0x7e9/0xbb0 drivers/base/core.c:3706
 hid_add_device+0x272/0x3e0 drivers/hid/hid-core.c:3003
 usbhid_probe+0xbab/0x1080 drivers/hid/usbhid/hid-core.c:1449
 usb_probe_interface+0x659/0xc70 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x267/0xaf0 drivers/base/dd.c:709
 __driver_probe_device+0x1ef/0x380 drivers/base/dd.c:871
 driver_probe_device+0x4f/0x240 drivers/base/dd.c:901
 __device_attach_driver+0x279/0x430 drivers/base/dd.c:1029
 bus_for_each_drv+0x258/0x2f0 drivers/base/bus.c:500
 __device_attach+0x2c5/0x450 drivers/base/dd.c:1101
 device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1156
 bus_probe_device+0x12a/0x220 drivers/base/bus.c:613
 device_add+0x7e9/0xbb0 drivers/base/core.c:3706
 usb_set_configuration+0x1a87/0x2110 drivers/usb/core/message.c:2268
 usb_generic_driver_probe+0x8d/0x150 drivers/usb/core/generic.c:250
 usb_probe_device+0x1c4/0x3b0 drivers/usb/core/driver.c:291
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x267/0xaf0 drivers/base/dd.c:709
 __driver_probe_device+0x1ef/0x380 drivers/base/dd.c:871
 driver_probe_device+0x4f/0x240 drivers/base/dd.c:901
 __device_attach_driver+0x279/0x430 drivers/base/dd.c:1029
 bus_for_each_drv+0x258/0x2f0 drivers/base/bus.c:500
 __device_attach+0x2c5/0x450 drivers/base/dd.c:1101
 device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1156
 bus_probe_device+0x12a/0x220 drivers/base/bus.c:613
 device_add+0x7e9/0xbb0 drivers/base/core.c:3706
 usb_new_device+0xa08/0x16f0 drivers/usb/core/hub.c:2695
 hub_port_connect drivers/usb/core/hub.c:5567 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
 port_event drivers/usb/core/hub.c:5871 [inline]
 hub_event+0x2a1c/0x4f30 drivers/usb/core/hub.c:5953
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397
 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478
 kthread+0x389/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 13825:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2689 [inline]
 slab_free mm/slub.c:6251 [inline]
 kfree+0x1c5/0x640 mm/slub.c:6566
 hid_close_report+0x632/0x720 drivers/hid/hid-core.c:734
 __hid_device_probe drivers/hid/hid-core.c:2839 [inline]
 hid_device_probe+0x659/0x7a0 drivers/hid/hid-core.c:2859
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x267/0xaf0 drivers/base/dd.c:709
 __driver_probe_device+0x1ef/0x380 drivers/base/dd.c:871
 driver_probe_device+0x4f/0x240 drivers/base/dd.c:901
 __device_attach_driver+0x279/0x430 drivers/base/dd.c:1029
 bus_for_each_drv+0x258/0x2f0 drivers/base/bus.c:500
 __device_attach+0x2c5/0x450 drivers/base/dd.c:1101
 device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1156
 bus_probe_device+0x12a/0x220 drivers/base/bus.c:613
 device_add+0x7e9/0xbb0 drivers/base/core.c:3706
 hid_add_device+0x272/0x3e0 drivers/hid/hid-core.c:3003
 usbhid_probe+0xbab/0x1080 drivers/hid/usbhid/hid-core.c:1449
 usb_probe_interface+0x659/0xc70 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x267/0xaf0 drivers/base/dd.c:709
 __driver_probe_device+0x1ef/0x380 drivers/base/dd.c:871
 driver_probe_device+0x4f/0x240 drivers/base/dd.c:901
 __device_attach_driver+0x279/0x430 drivers/base/dd.c:1029
 bus_for_each_drv+0x258/0x2f0 drivers/base/bus.c:500
 __device_attach+0x2c5/0x450 drivers/base/dd.c:1101
 device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1156
 bus_probe_device+0x12a/0x220 drivers/base/bus.c:613
 device_add+0x7e9/0xbb0 drivers/base/core.c:3706
 usb_set_configuration+0x1a87/0x2110 drivers/usb/core/message.c:2268
 usb_generic_driver_probe+0x8d/0x150 drivers/usb/core/generic.c:250
 usb_probe_device+0x1c4/0x3b0 drivers/usb/core/driver.c:291
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x267/0xaf0 drivers/base/dd.c:709
 __driver_probe_device+0x1ef/0x380 drivers/base/dd.c:871
 driver_probe_device+0x4f/0x240 drivers/base/dd.c:901
 __device_attach_driver+0x279/0x430 drivers/base/dd.c:1029
 bus_for_each_drv+0x258/0x2f0 drivers/base/bus.c:500
 __device_attach+0x2c5/0x450 drivers/base/dd.c:1101
 device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1156
 bus_probe_device+0x12a/0x220 drivers/base/bus.c:613
 device_add+0x7e9/0xbb0 drivers/base/core.c:3706
 usb_new_device+0xa08/0x16f0 drivers/usb/core/hub.c:2695
 hub_port_connect drivers/usb/core/hub.c:5567 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
 port_event drivers/usb/core/hub.c:5871 [inline]
 hub_event+0x2a1c/0x4f30 drivers/usb/core/hub.c:5953
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397
 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478
 kthread+0x389/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff8880257ccf00
 which belongs to the cache kmalloc-64 of size 64
The buggy address is located 0 bytes inside of
 freed 64-byte region [ffff8880257ccf00, ffff8880257ccf40)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x257cc
flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000000 ffff88813fe178c0 dead000000000100 dead000000000122
raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 26, tgid 26 (kdevtmpfs), ts 17636356513, free_ts 4610969764
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x22d/0x280 mm/page_alloc.c:1853
 prep_new_page mm/page_alloc.c:1861 [inline]
 get_page_from_freelist+0x2593/0x2610 mm/page_alloc.c:3941
 __alloc_frozen_pages_noprof+0x18d/0x380 mm/page_alloc.c:5221
 alloc_slab_page mm/slub.c:3278 [inline]
 allocate_slab+0x77/0x660 mm/slub.c:3467
 new_slab mm/slub.c:3525 [inline]
 refill_objects+0x339/0x3d0 mm/slub.c:7272
 refill_sheaf mm/slub.c:2816 [inline]
 __pcs_replace_empty_main+0x321/0x720 mm/slub.c:4652
 alloc_from_pcs mm/slub.c:4750 [inline]
 slab_alloc_node mm/slub.c:4884 [inline]
 __do_kmalloc_node mm/slub.c:5295 [inline]
 __kmalloc_noprof+0x474/0x760 mm/slub.c:5308
 kmalloc_noprof include/linux/slab.h:954 [inline]
 kmalloc_array_noprof include/linux/slab.h:1097 [inline]
 security_inode_init_security+0x102/0x3d0 security/security.c:1347
 shmem_mknod+0x1fe/0x360 mm/shmem.c:3868
 vfs_mknod+0x447/0x610 fs/namei.c:5130
 handle_create drivers/base/devtmpfs.c:232 [inline]
 handle drivers/base/devtmpfs.c:384 [inline]
 devtmpfs_work_loop+0x861/0xdf0 drivers/base/devtmpfs.c:399
 devtmpfsd+0x4d/0x50 drivers/base/devtmpfs.c:441
 kthread+0x389/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page last free pid 24 tgid 24 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1397 [inline]
 __free_frozen_pages+0xc1c/0xd30 mm/page_alloc.c:2938
 vfree+0x1d1/0x2f0 mm/vmalloc.c:3472
 delayed_vfree_work+0x55/0x80 mm/vmalloc.c:3392
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397
 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478
 kthread+0x389/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Memory state around the buggy address:
 ffff8880257cce00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
 ffff8880257cce80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
>ffff8880257ccf00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
                   ^
 ffff8880257ccf80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
 ffff8880257cd000: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fa fb
==================================================================

Crashes (116):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/11 23:21 upstream 2b414a95b8f7 d93a6ab6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/06/04 05:38 upstream ba3e43a9e601 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/06/03 12:17 upstream ba3e43a9e601 234057e5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/06/02 08:00 upstream 6f3ed7fec72f 1095583b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/29 02:28 upstream 8fde5d1d47f6 4624854e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/20 01:04 upstream 27fa82620cba 0909d65f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/18 15:32 upstream 5200f5f493f7 55156e84 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/17 15:35 upstream 6916d5703ddf de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/13 14:11 upstream 1d5dcaa3bd65 fec2a7ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/10 21:11 upstream aa54b1d27fe0 29233ece .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/09 05:11 upstream 81d6f7807536 0c5a8d8f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/08 17:58 upstream 917719c412c4 5633175a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/07 00:06 upstream adc1e5c6203c cbcd9ea0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: slab-use-after-free Read in report_descriptor_read
2026/04/28 03:10 upstream 3b3bea6d4b9c ce741359 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: slab-use-after-free Read in report_descriptor_read
2026/04/26 22:23 upstream 20b64cf8705a 9c2d0995 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/04/24 22:35 upstream dd6c438c3e64 1c2b9291 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/04/22 16:21 upstream 6596a02b2078 4595e353 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/04/22 12:41 upstream 6596a02b2078 4595e353 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/04/20 11:02 upstream c1f49dea2b8f 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: slab-use-after-free Read in report_descriptor_read
2026/04/15 07:10 upstream 508fed679541 e2e976a8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/04/04 10:28 upstream 7ca6d1cfec80 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/03/09 22:39 upstream 1f318b96cc84 176bead5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/02/16 04:33 upstream bb7a3fc2c976 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/02/14 00:54 upstream cd7a5651db26 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2025/05/22 05:56 upstream d608703fcdd9 0919b50b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/06/13 01:52 upstream 1dadb7e7eb5a 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 KASAN: slab-use-after-free Read in report_descriptor_read
2026/06/02 20:14 upstream 6f3ed7fec72f 62fe1528 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/25 02:43 upstream 6a97c4d5262d c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 KASAN: slab-use-after-free Read in report_descriptor_read
2026/04/28 15:48 upstream 3b3bea6d4b9c b4209743 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 KASAN: slab-use-after-free Read in report_descriptor_read
2025/05/19 22:21 upstream a5806cd506af 8f9cf946 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 KASAN: slab-use-after-free Read in report_descriptor_read
2026/06/08 09:50 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 511e746700ee cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/06/06 23:35 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 511e746700ee cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/06/06 13:58 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 511e746700ee cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/25 17:57 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 22d91cef94b5 c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/25 08:27 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 22d91cef94b5 c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/24 02:42 linux-next c1ecb239fa34 c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/23 12:36 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 22d91cef94b5 c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/22 10:45 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 16abda69f440 70ae9b03 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/21 01:45 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e18b0dbb6ec6 41b8c833 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/19 13:47 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e18b0dbb6ec6 223544dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/15 17:25 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e18b0dbb6ec6 9cd3beaa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/09 15:04 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 25bd55f46032 29233ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/03 13:19 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 25bd55f46032 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/03 04:38 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 25bd55f46032 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/04/14 22:57 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 87117347a0e7 e2e976a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/04/01 07:52 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 81ebd43cc0d6 fb8b2c26 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/03/30 07:11 linux-next 3b058d1aeeef 356bdfc9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce KASAN: slab-use-after-free Read in report_descriptor_read
2026/03/26 12:14 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 84db3719d273 766b6434 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/03/23 11:34 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 84db3719d273 5b92003d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/03/17 14:27 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing de6c925db978 c01bca74 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/03/08 05:09 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bb375c251ab4 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/03/03 11:32 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bb375c251ab4 28b83e23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/02/28 01:43 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bb375c251ab4 2cf092b8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/02/22 20:54 linux-next d4906ae14a5f 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in report_descriptor_read
2026/02/15 02:05 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing da87d45b1951 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-use-after-free Read in report_descriptor_read
2026/05/30 22:56 upstream f5e5d3509bff 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 KASAN: null-ptr-deref Read in report_descriptor_read
2026/04/16 18:00 upstream 1d51b370a0f8 321ae225 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 KASAN: null-ptr-deref Read in report_descriptor_read
2026/05/28 09:52 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 22d91cef94b5 4c36e7e5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: null-ptr-deref Read in report_descriptor_read
2026/05/13 19:15 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e18b0dbb6ec6 fec2a7ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: null-ptr-deref Read in report_descriptor_read
2026/05/12 03:59 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e18b0dbb6ec6 d168f260 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: null-ptr-deref Read in report_descriptor_read
2026/05/05 05:09 linux-next 9d0d467c3572 a898ba9c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce KASAN: null-ptr-deref Read in report_descriptor_read
* Struck through repros no longer work on HEAD.