KASAN: slab-use-after-free Read in read_report_descriptor

Status: premoderation: reported C repro on 2025/06/29 07:21
Bug presence: origin:downstream
[Documentation on labels]
Reported-by: syzbot+2b1f186fd55a4f8f9912@syzkaller.appspotmail.com
First crash: 449d, last: 1d05h
▶ ▼ Bug presence (3)
Date Name Commit Repro Result
2026/03/09 android16-6.12 (ToT) 0a7d743a2946 syz [report] KASAN: slab-use-after-free Read in read_report_descriptor
2026/03/09 lts (merge base) ff2177382799 syz Didn't crash
2026/03/09 upstream (ToT) 1f318b96cc84 syz Didn't crash
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.6 KASAN: slab-use-after-free Read in read_report_descriptor 19 11 33d 410d 0/2 upstream: reported on 2025/08/07 13:50
▶ ▼ Last patch testing requests (7)
Created Duration User Patch Repo Result
2026/09/20 23:54 18m retest repro android16-6.12 report job log log
2026/09/20 23:54 15m retest repro android16-6.12 no crash job log log
2026/06/06 04:28 16m retest repro android16-6.12 log
2026/03/09 05:27 20m retest repro android16-6.12 report log
2026/03/09 05:27 13m retest repro android16-6.12 no crash log
2025/12/03 06:08 8m retest repro android16-6.12 error
2025/09/24 00:31 15m retest repro android16-6.12 report log

Sample crash report:
==================================================================
BUG: KASAN: slab-use-after-free in read_report_descriptor+0xb4/0x100 drivers/hid/hid-core.c:2244
Read of size 43 at addr ffff88810c3bc000 by task fido_id/1161

CPU: 1 UID: 0 PID: 1161 Comm: fido_id Not tainted syzkaller #0 c744675a2bc56aa4cb6ac321888dd20361806feb
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
 print_address_description+0x71/0x210 mm/kasan/report.c:377
 print_report+0x4a/0x70 mm/kasan/report.c:481
 kasan_report+0x162/0x1a0 mm/kasan/report.c:594
 check_region_inline mm/kasan/generic.c:-1 [inline]
 kasan_check_range+0x25a/0x2b0 mm/kasan/generic.c:189
 __asan_memcpy+0x31/0x80 mm/kasan/shadow.c:105
 read_report_descriptor+0xb4/0x100 drivers/hid/hid-core.c:2244
 sysfs_kf_bin_read+0x1c9/0x200 fs/sysfs/file.c:97
 kernfs_file_read_iter fs/kernfs/file.c:269 [inline]
 kernfs_fop_read_iter+0x2fd/0x570 fs/kernfs/file.c:298
 new_sync_read fs/read_write.c:489 [inline]
 vfs_read+0x60b/0xc70 fs/read_write.c:570
 ksys_read+0x145/0x260 fs/read_write.c:713
 __do_sys_read fs/read_write.c:723 [inline]
 __se_sys_read fs/read_write.c:721 [inline]
 __x64_sys_read+0x7f/0x90 fs/read_write.c:721
 x64_sys_call+0x2638/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fb4ba2a7407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007ffc8e8d2110 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fb4ba97a880 RCX: 00007fb4ba2a7407
RDX: 0000000000001000 RSI: 00007ffc8e8d2160 RDI: 0000000000000004
RBP: 000055745e3852c0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 000055745e3844c0
R13: 00007ffc8e8d2160 R14: 0000000000000004 R15: 00005574277634d8
 </TASK>

Allocated by task 406:
 kasan_save_stack mm/kasan/common.c:49 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:70
 kasan_save_alloc_info+0x3a/0x50 mm/kasan/generic.c:565
 poison_kmalloc_redzone mm/kasan/common.c:379 [inline]
 __kasan_kmalloc+0x96/0xb0 mm/kasan/common.c:396
 kasan_kmalloc include/linux/kasan.h:261 [inline]
 __do_kmalloc_node mm/slub.c:4395 [inline]
 __kmalloc_node_track_caller_noprof+0x24e/0x4f0 mm/slub.c:4414
 kmemdup_noprof+0x31/0x80 mm/util.c:139
 kmemdup_noprof include/linux/fortify-string.h:753 [inline]
 hid_open_report+0x200/0x1120 drivers/hid/hid-core.c:1276
 hid_parse include/linux/hid.h:1139 [inline]
 sony_probe+0x18a/0x5f0 drivers/hid/hid-sony.c:2082
 __hid_device_probe drivers/hid/hid-core.c:2760 [inline]
 hid_device_probe+0x2d1/0x5f0 drivers/hid/hid-core.c:2797
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x2e1/0x8b0 drivers/base/dd.c:657
 __driver_probe_device+0x193/0x280 drivers/base/dd.c:799
 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829
 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957
 bus_for_each_drv+0x264/0x300 drivers/base/bus.c:459
 __device_attach+0x2c4/0x3c0 drivers/base/dd.c:1029
 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078
 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534
 device_add+0x7fd/0xbf0 drivers/base/core.c:3692
 hid_add_device+0x3c4/0x5a0 drivers/hid/hid-core.c:2943
 usbhid_probe+0xdca/0x1310 drivers/hid/usbhid/hid-core.c:1451
 usb_probe_interface+0x6ab/0xbf0 drivers/usb/core/driver.c:400
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x2e1/0x8b0 drivers/base/dd.c:657
 __driver_probe_device+0x193/0x280 drivers/base/dd.c:799
 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829
 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957
 bus_for_each_drv+0x264/0x300 drivers/base/bus.c:459
 __device_attach+0x2c4/0x3c0 drivers/base/dd.c:1029
 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078
 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534
 device_add+0x7fd/0xbf0 drivers/base/core.c:3692
 usb_set_configuration+0x1aad/0x2080 drivers/usb/core/message.c:2268
 usb_generic_driver_probe+0x95/0x160 drivers/usb/core/generic.c:254
 usb_probe_device+0x1ef/0x3b0 drivers/usb/core/driver.c:295
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x2e1/0x8b0 drivers/base/dd.c:657
 __driver_probe_device+0x193/0x280 drivers/base/dd.c:799
 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829
 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957
 bus_for_each_drv+0x264/0x300 drivers/base/bus.c:459
 __device_attach+0x2c4/0x3c0 drivers/base/dd.c:1029
 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078
 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534
 device_add+0x7fd/0xbf0 drivers/base/core.c:3692
 usb_new_device+0x98d/0x1500 drivers/usb/core/hub.c:2703
 hub_port_connect drivers/usb/core/hub.c:5574 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5714 [inline]
 port_event drivers/usb/core/hub.c:5878 [inline]
 hub_event+0x2dbd/0x4360 drivers/usb/core/hub.c:5960
 process_one_work kernel/workqueue.c:3273 [inline]
 process_scheduled_works+0x7f7/0x1060 kernel/workqueue.c:3354
 worker_thread+0xc99/0x13f0 kernel/workqueue.c:3435
 kthread+0x2c7/0x360 kernel/kthread.c:389
 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Freed by task 406:
 kasan_save_stack mm/kasan/common.c:49 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:70
 kasan_save_free_info+0x44/0x50 mm/kasan/generic.c:579
 poison_slab_object mm/kasan/common.c:249 [inline]
 __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:266
 kasan_slab_free include/linux/kasan.h:234 [inline]
 slab_free_hook mm/slub.c:2445 [inline]
 slab_free mm/slub.c:4714 [inline]
 kfree+0x158/0x440 mm/slub.c:4875
 hid_close_report+0x628/0x6f0 drivers/hid/hid-core.c:723
 __hid_device_probe drivers/hid/hid-core.c:2777 [inline]
 hid_device_probe+0x538/0x5f0 drivers/hid/hid-core.c:2797
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x2e1/0x8b0 drivers/base/dd.c:657
 __driver_probe_device+0x193/0x280 drivers/base/dd.c:799
 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829
 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957
 bus_for_each_drv+0x264/0x300 drivers/base/bus.c:459
 __device_attach+0x2c4/0x3c0 drivers/base/dd.c:1029
 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078
 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534
 device_add+0x7fd/0xbf0 drivers/base/core.c:3692
 hid_add_device+0x3c4/0x5a0 drivers/hid/hid-core.c:2943
 usbhid_probe+0xdca/0x1310 drivers/hid/usbhid/hid-core.c:1451
 usb_probe_interface+0x6ab/0xbf0 drivers/usb/core/driver.c:400
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x2e1/0x8b0 drivers/base/dd.c:657
 __driver_probe_device+0x193/0x280 drivers/base/dd.c:799
 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829
 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957
 bus_for_each_drv+0x264/0x300 drivers/base/bus.c:459
 __device_attach+0x2c4/0x3c0 drivers/base/dd.c:1029
 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078
 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534
 device_add+0x7fd/0xbf0 drivers/base/core.c:3692
 usb_set_configuration+0x1aad/0x2080 drivers/usb/core/message.c:2268
 usb_generic_driver_probe+0x95/0x160 drivers/usb/core/generic.c:254
 usb_probe_device+0x1ef/0x3b0 drivers/usb/core/driver.c:295
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x2e1/0x8b0 drivers/base/dd.c:657
 __driver_probe_device+0x193/0x280 drivers/base/dd.c:799
 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829
 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957
 bus_for_each_drv+0x264/0x300 drivers/base/bus.c:459
 __device_attach+0x2c4/0x3c0 drivers/base/dd.c:1029
 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078
 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534
 device_add+0x7fd/0xbf0 drivers/base/core.c:3692
 usb_new_device+0x98d/0x1500 drivers/usb/core/hub.c:2703
 hub_port_connect drivers/usb/core/hub.c:5574 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5714 [inline]
 port_event drivers/usb/core/hub.c:5878 [inline]
 hub_event+0x2dbd/0x4360 drivers/usb/core/hub.c:5960
 process_one_work kernel/workqueue.c:3273 [inline]
 process_scheduled_works+0x7f7/0x1060 kernel/workqueue.c:3354
 worker_thread+0xc99/0x13f0 kernel/workqueue.c:3435
 kthread+0x2c7/0x360 kernel/kthread.c:389
 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

The buggy address belongs to the object at ffff88810c3bc000
 which belongs to the cache kmalloc-64 of size 64
The buggy address is located 0 bytes inside of
 freed 64-byte region [ffff88810c3bc000, ffff88810c3bc040)

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c3bc
anon flags: 0x4000000000000000(zone=1)
page_type: f5(slab)
raw: 4000000000000000 ffff8881000418c0 ffffea000408bc00 dead000000000005
raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 88, tgid 88 (rcS), ts 4857458281, free_ts 4853863717
 set_page_owner include/linux/page_owner.h:35 [inline]
 post_alloc_hook+0x37d/0x3b0 mm/page_alloc.c:1863
 prep_new_page+0x2d/0x180 mm/page_alloc.c:1871
 get_page_from_freelist+0x4aea/0x4ba0 mm/page_alloc.c:3948
 __alloc_pages_noprof+0x35a/0x7e0 mm/page_alloc.c:5315
 alloc_slab_page+0x6b/0x1e0 mm/slub.c:-1
 allocate_slab+0x69/0x430 mm/slub.c:2687
 new_slab mm/slub.c:2741 [inline]
 ___slab_alloc+0x591/0x8c0 mm/slub.c:3934
 __slab_alloc mm/slub.c:4025 [inline]
 __slab_alloc_node mm/slub.c:4078 [inline]
 slab_alloc_node mm/slub.c:4239 [inline]
 __do_kmalloc_node mm/slub.c:4394 [inline]
 __kmalloc_node_track_caller_noprof+0x2e3/0x4f0 mm/slub.c:4414
 kmemdup_nul+0x5a/0x1a0 mm/util.c:200
 security_context_to_sid_core+0xde/0x5c0 security/selinux/ss/services.c:1526
 security_context_to_sid_default+0x3f/0x50 security/selinux/ss/services.c:1632
 inode_doinit_use_xattr+0x1a7/0x550 security/selinux/hooks.c:1409
 inode_doinit_with_dentry+0x7c3/0xde0 security/selinux/hooks.c:1505
 selinux_d_instantiate+0x2b/0x40 security/selinux/hooks.c:6361
 security_d_instantiate+0xb8/0xf0 security/security.c:4068
 d_splice_alias+0x71/0x3a0 fs/dcache.c:2949
page last free pid 33 tgid 33 stack trace:
 reset_page_owner include/linux/page_owner.h:28 [inline]
 free_pages_prepare mm/page_alloc.c:1390 [inline]
 free_unref_page+0xbb8/0xf70 mm/page_alloc.c:2876
 __free_pages+0x6b/0x3b0 mm/page_alloc.c:5402
 free_pages+0x86/0x90 mm/page_alloc.c:5415
 __tlb_remove_table_free mm/mmu_gather.c:230 [inline]
 tlb_remove_table_rcu+0x366/0x3d0 mm/mmu_gather.c:283
 rcu_do_batch+0x56a/0xcb0 kernel/rcu/tree.c:2575
 nocb_cb_wait kernel/rcu/tree_nocb.h:923 [inline]
 rcu_nocb_cb_kthread+0x533/0xb60 kernel/rcu/tree_nocb.h:957
 kthread+0x2c7/0x360 kernel/kthread.c:389
 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Memory state around the buggy address:
 ffff88810c3bbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88810c3bbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88810c3bc000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
                   ^
 ffff88810c3bc080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
 ffff88810c3bc100: 00 00 00 00 00 03 fc fc fc fc fc fc fc fc fc fc
==================================================================

Crashes (36):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/20 11:12 android16-6.12 7aa7a88586d9 1e72964b .config strace log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/08/31 13:54 android16-6.12 96b3287eace8 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/08/20 07:38 android16-6.12 7aa7a88586d9 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/08/15 20:42 android16-6.12 26014f6c6077 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/07/25 22:52 android16-6.12 579215f16d4e 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/07/08 05:59 android16-6.12 54d5133dd5d9 76cdc0c0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/07/05 13:18 android16-6.12 d36feda1de57 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/06/25 04:43 android16-6.12 f222c1f727d9 cfa969bf .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/06/25 03:21 android16-6.12 f222c1f727d9 302586aa .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/06/18 22:25 android16-6.12 8f68185b8289 a776b0d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/06/11 10:15 android16-6.12 5eaad0115056 b754d2d8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/05/20 05:24 android16-6.12 0819c4ac7768 0909d65f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/05/09 16:59 android16-6.12 5efa9ec22e39 29233ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/05/04 15:46 android16-6.12 8ed163f1fc8c 85f1bcf2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/05/02 05:48 android16-6.12 8ed163f1fc8c 753c55b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/04/19 10:11 android16-6.12 6532ca3bb1f7 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/04/11 04:47 android16-6.12 030f9ae61381 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/04/03 18:41 android16-6.12 b4d3e589c9f2 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/03/30 17:49 android16-6.12 49e3211dc6f7 dcaebc52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/03/28 00:35 android16-6.12 0151654f7a9d 74a13a23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/03/23 01:00 android16-6.12 e266923bd499 5b92003d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/02/23 00:26 android16-6.12 c190014704c7 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/02/14 01:37 android16-6.12 a18295bb2ff6 1e62d198 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/02/13 22:47 android16-6.12 a18295bb2ff6 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/02/13 15:19 android16-6.12 9d9c7472ef9e 6a673c50 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2026/01/31 04:11 android16-6.12 c13babfee861 c75a2f6e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2025/10/28 12:17 android16-6.12 0d6730ee6542 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2025/10/16 18:24 android16-6.12 101347b9f28f 19568248 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2025/08/30 10:26 android16-6.12 6879524e1c5a 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2025/07/01 13:00 android16-6.12 648383294760 6e83b42d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2025/06/30 20:00 android16-6.12 668635cd345a 6e83b42d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2025/06/30 02:36 android16-6.12 68f4f0b0690a fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2025/06/29 19:56 android16-6.12 68f4f0b0690a fc9d8ee5 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2025/06/29 14:51 android16-6.12 68f4f0b0690a fc9d8ee5 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2025/06/29 10:12 android16-6.12 68f4f0b0690a fc9d8ee5 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
2025/06/29 07:20 android16-6.12 68f4f0b0690a fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust KASAN: slab-use-after-free Read in read_report_descriptor
* Struck through repros no longer work on HEAD.