KASAN: slab-use-after-free Read in jfs_readdir

Status: upstream: reported C repro on 2025/01/02 02:02
Subsystems: jfs
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+a98891ce2318fe7baf05@syzkaller.appspotmail.com
First crash: 643d, last: 18h09m
Cause bisection: introduced by (bisect log) [release commit]:
commit df0cc57e057f18e44dac8e6c18aba47ab53202f9
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date: Sun Jan 9 22:55:34 2022 +0000

  Linux 5.16

Crash: KASAN: use-after-free Read in jfs_readdir (log)
Repro: C syz .config
  
▶ ▼ ✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
472502e5 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ✅ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ KASAN: slab-use-after-free Read in jfs_readdir 2026/05/24 07:19 2026/05/24 07:19 2026/05/24 08:05 c69befb3
a80e70aa patching 💥 KASAN: slab-use-after-free Read in jfs_readdir 2026/05/21 20:50 2026/05/21 20:57 2026/05/21 21:06 d5742584
▶ ▼ Discussions (2)
Title Replies (including bot) Last reply
[PATCH] jfs: fix use-after-free in jfs_readdir on legacy non-indexed directories 1 (1) 2026/06/12 19:12
[syzbot] [jfs?] KASAN: slab-use-after-free Read in jfs_readdir 0 (2) 2025/01/02 03:10
▶ ▼ Similar bugs (7)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: slab-out-of-bounds Read in jfs_readdir jfs 19 syz, C error done 17 991d 1352d 25/29 fixed on 2024/03/20 11:33
linux-6.6 KASAN: slab-use-after-free Read in jfs_readdir origin:upstream 19 syz, C error 11 218d 294d 0/2 upstream: reported C repro on 2025/12/05 07:21
upstream UBSAN: array-index-out-of-bounds in jfs_readdir jfs 19 syz, C inconclusive 89 655d 907d 28/29 fixed on 2024/12/16 09:50
linux-5.15 UBSAN: array-index-out-of-bounds in jfs_readdir origin:upstream 19 syz, C error 58 30d 907d 0/3 upstream: reported C repro on 2024/04/01 00:20
linux-6.1 UBSAN: array-index-out-of-bounds in jfs_readdir origin:upstream missing-backport 19 syz, C inconclusive 73 117d 907d 0/3 upstream: reported C repro on 2024/04/01 00:16
linux-4.14 KASAN: slab-out-of-bounds Read in jfs_readdir jfs 17 1 1352d 1352d 0/1 upstream: reported on 2023/01/12 07:34
linux-4.19 KASAN: slab-out-of-bounds Read in jfs_readdir jfs 17 2 1352d 1352d 0/1 upstream: reported on 2023/01/12 07:27
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2025/01/17 15:34 13m retest repro upstream report log

Sample crash report:
loop0: detected capacity change from 0 to 32768
==================================================================
BUG: KASAN: slab-use-after-free in jfs_readdir+0x1226/0x3c10 fs/jfs/jfs_dtree.c:2881
Read of size 8 at addr ffff88801eb709f0 by task syz.0.18/5983

CPU: 1 UID: 0 PID: 5983 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xba/0x230 mm/kasan/report.c:482
 kasan_report+0x117/0x150 mm/kasan/report.c:595
 jfs_readdir+0x1226/0x3c10 fs/jfs/jfs_dtree.c:2881
 wrap_directory_iterator+0x99/0xe0 fs/readdir.c:65
 iterate_dir+0x3a5/0x580 fs/readdir.c:108
 __do_sys_getdents64 fs/readdir.c:412 [inline]
 __se_sys_getdents64+0xf1/0x280 fs/readdir.c:397
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f951c98c799
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffece3ba9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
RAX: ffffffffffffffda RBX: 00007f951cc05fa0 RCX: 00007f951c98c799
RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 00007f951ca22c99 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f951cc05fac R14: 00007f951cc05fa0 R15: 00007f951cc05fa0
 </TASK>

Allocated by task 5983:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 unpoison_slab_object mm/kasan/common.c:340 [inline]
 __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4538 [inline]
 slab_alloc_node mm/slub.c:4866 [inline]
 kmem_cache_alloc_noprof+0x33b/0x680 mm/slub.c:4873
 mempool_alloc_noprof+0x1d4/0x300 mm/mempool.c:566
 alloc_metapage fs/jfs/jfs_metapage.c:264 [inline]
 __get_metapage+0x50c/0xde0 fs/jfs/jfs_metapage.c:760
 dtSplitRoot+0x202/0x16c0 fs/jfs/jfs_dtree.c:1910
 dtSplitUp fs/jfs/jfs_dtree.c:993 [inline]
 dtInsert+0xf19/0x5f10 fs/jfs/jfs_dtree.c:871
 jfs_mknod+0x6bd/0x9d0 fs/jfs/namei.c:1413
 vfs_mknod+0x44e/0x620 fs/namei.c:5092
 filename_mknodat+0x3cf/0x670 fs/namei.c:-1
 __do_sys_mknod fs/namei.c:5179 [inline]
 __se_sys_mknod+0x3a/0x150 fs/namei.c:5176
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 5983:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2685 [inline]
 slab_free mm/slub.c:6165 [inline]
 kmem_cache_free+0x185/0x6b0 mm/slub.c:6295
 mempool_free+0xf5/0x140 mm/mempool.c:711
 free_metapage fs/jfs/jfs_metapage.c:279 [inline]
 drop_metapage fs/jfs/jfs_metapage.c:316 [inline]
 release_metapage+0x84c/0xab0 fs/jfs/jfs_metapage.c:892
 dtReadNext fs/jfs/jfs_dtree.c:3202 [inline]
 jfs_readdir+0xf4f/0x3c10 fs/jfs/jfs_dtree.c:2874
 wrap_directory_iterator+0x99/0xe0 fs/readdir.c:65
 iterate_dir+0x3a5/0x580 fs/readdir.c:108
 __do_sys_getdents64 fs/readdir.c:412 [inline]
 __se_sys_getdents64+0xf1/0x280 fs/readdir.c:397
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88801eb709c0
 which belongs to the cache jfs_mp of size 248
The buggy address is located 48 bytes inside of
 freed 248-byte region [ffff88801eb709c0, ffff88801eb70ab8)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1eb70
flags: 0x80000000000000(node=0|zone=1)
page_type: f5(slab)
raw: 0080000000000000 ffff888140aa1000 dead000000000100 dead000000000122
raw: 0000000000000000 00000008000d000d 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5760691396, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x231/0x280 mm/page_alloc.c:1889
 prep_new_page mm/page_alloc.c:1897 [inline]
 get_page_from_freelist+0x28bb/0x2950 mm/page_alloc.c:3962
 __alloc_frozen_pages_noprof+0x18d/0x380 mm/page_alloc.c:5250
 alloc_slab_page mm/slub.c:3292 [inline]
 allocate_slab+0x77/0x660 mm/slub.c:3481
 new_slab mm/slub.c:3539 [inline]
 refill_objects+0x334/0x3c0 mm/slub.c:7175
 refill_sheaf mm/slub.c:2812 [inline]
 alloc_full_sheaf mm/slub.c:2834 [inline]
 __pcs_replace_empty_main+0x480/0x710 mm/slub.c:4626
 alloc_from_pcs mm/slub.c:4717 [inline]
 slab_alloc_node mm/slub.c:4851 [inline]
 kmem_cache_alloc_noprof+0x433/0x680 mm/slub.c:4873
 mempool_init_node+0x210/0x4f0 mm/mempool.c:259
 mempool_create_node_noprof+0xb8/0x150 mm/mempool.c:323
 metapage_init+0xed/0x150 fs/jfs/jfs_metapage.c:292
 init_jfs_fs+0xfd/0x4e0 fs/jfs/super.c:968
 do_one_initcall+0x250/0x8d0 init/main.c:1382
 do_initcall_level+0x104/0x190 init/main.c:1444
 do_initcalls+0x59/0xa0 init/main.c:1460
 kernel_init_freeable+0x2a6/0x3e0 init/main.c:1692
 kernel_init+0x1d/0x1d0 init/main.c:1582
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88801eb70880: fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff88801eb70900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>ffff88801eb70980: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
                                                             ^
 ffff88801eb70a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88801eb70a80: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc 00
==================================================================

Crashes (416):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/15 18:35 upstream 267594792a71 ee8d34d6 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2025/12/05 17:29 upstream 2061f18ad76e d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2025/12/05 11:35 upstream 2061f18ad76e d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2025/09/11 03:23 upstream 7aac71907bde fdeaa69b .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2025/01/02 03:09 upstream 56e6a3499e14 d3ccff63 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2025/08/06 09:29 upstream 6bcdbd62bd56 ffe1dd46 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2025/05/20 18:13 upstream a5806cd506af b47f9e02 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs KASAN: slab-out-of-bounds Read in jfs_readdir
2025/12/01 10:25 upstream 7d0a66e4bb90 d6526ea3 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs KASAN: slab-out-of-bounds Read in jfs_readdir
2025/12/01 01:52 upstream e69c7c175115 d6526ea3 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs KASAN: slab-out-of-bounds Read in jfs_readdir
2025/02/09 06:14 upstream 9946eaf552b1 ef44b750 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs KASAN: slab-out-of-bounds Read in jfs_readdir
2026/09/24 23:11 upstream f49a343b305c 3c3cdf19 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2026/09/21 18:35 upstream 93f51579e7df 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2026/09/12 00:28 upstream 3026c6e4f223 b6a5eeb7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2026/08/31 01:29 upstream a23cbb05744b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2026/08/27 01:16 upstream 502d45774af0 a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2026/08/27 00:53 upstream 502d45774af0 a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2026/08/26 11:33 upstream 45c13f3f9e3b 6a91adb4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2026/08/26 05:03 upstream 45c13f3f9e3b 6a91adb4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2026/08/22 13:55 upstream 818bebeb63dd 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2026/07/26 14:35 upstream 3dab139d4795 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2026/07/22 15:48 upstream 248951ddc14d 4a865b71 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2026/07/20 00:22 upstream 82a47586c0b9 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2026/07/15 14:17 upstream 58717b2a1365 a4ed0f4f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2025/09/10 04:21 upstream 9dd1835ecda5 fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: slab-use-after-free Read in jfs_readdir
2025/01/02 02:01 upstream 56e6a3499e14 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2024/12/24 13:56 upstream f07044dd0df0 444551c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in jfs_readdir
2024/12/21 09:45 upstream 499551201b5f d7f584ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: slab-use-after-free Read in jfs_readdir
2026/09/23 22:41 upstream fe2ec83746e5 0a1606bc .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/09/12 15:38 upstream 5225b8eec4c9 70a60e12 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/09/10 21:01 upstream 50d05c7c76c9 1fe56c0a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/09/08 12:59 upstream 28924df2a08f 351387c4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/09/08 08:58 upstream 28924df2a08f 680aa3e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/09/06 22:01 upstream 1fc5a74b108f 4f7b22a0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/09/01 16:09 upstream bf1079577a11 587f6b29 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/08/31 18:19 upstream cee9395acd80 00e9c810 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/08/27 19:09 upstream 818bebeb63dd c53a1b9c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/08/26 08:34 upstream 818bebeb63dd 6a91adb4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/08/25 16:40 upstream 818bebeb63dd a9a1fc32 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/08/20 08:58 upstream a4ff2be345d0 1e72964b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/08/19 13:13 upstream b126f6f5940f 1e72964b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/08/11 15:21 upstream d58772d8520c 557a89d3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/08/07 21:28 upstream f9a2394a2348 e4ef95d6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/08/04 17:15 upstream 848acc8ffe1b 3c5eaa21 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/08/04 06:15 upstream 848acc8ffe1b 9451e17e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/08/03 07:48 upstream bd1dde877520 e611ffe1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/07/31 06:39 upstream e05b559f9cda aaffb173 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/07/28 10:06 upstream 62cc90241548 45ae1df4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/07/28 06:05 upstream 62cc90241548 45ae1df4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/07/26 13:17 upstream 3dab139d4795 492bab15 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/07/25 23:08 upstream 0ce37745d4bf 492bab15 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/07/25 13:26 upstream e2a936998ab2 492bab15 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/07/25 09:27 upstream e2a936998ab2 492bab15 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/07/20 13:43 upstream 1590cf032971 4763fed7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/07/15 07:41 upstream 58717b2a1365 2130f682 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/07/13 11:12 upstream a13c140cc289 a870962e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/07/05 03:44 upstream 1e9cdc2ea15a fcece630 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/06/29 07:59 upstream dc59e4fea9d8 fb92f11c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/06/29 04:48 upstream dc59e4fea9d8 fb92f11c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in jfs_readdir
2026/01/26 00:51 linux-next ca3a02fda4da 55756628 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in jfs_readdir
2026/02/02 19:32 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 59e4d31a0470 018ebef2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: slab-use-after-free Read in jfs_readdir
2026/09/09 01:49 upstream 5acbae5f7eb3 243b72f1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: use-after-free Read in jfs_readdir
2026/05/25 21:23 upstream e7ae89a0c97c c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-out-of-bounds Read in jfs_readdir
2026/04/03 03:30 upstream 5619b098e2fb 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KFENCE: out-of-bounds read in jfs_readdir
2025/09/27 13:26 upstream fec734e8d564 001c9061 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-out-of-bounds Read in jfs_readdir
* Struck through repros no longer work on HEAD.