syzbot

 sign-in | mailing list | source | docs | 🏰
🐞 Open [1344]
≡ Subsystems
🐞 Fixed [7090]
🐞 Invalid [18714]
⬇ Missing Backports [220]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
✨ AI
💬 Send us feedback

KASAN: slab-use-after-free Read in cfusbl_device_notify

Status: upstream: reported on 2024/11/06 08:33
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+e944aefa061beaa1acc8@syzkaller.appspotmail.com
First crash: 559d, last: 21d
▶ ▼ ✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
9d0e1cec-c28b-4fff-a64e-6f9965a160ea assessment-security 💥 KASAN: slab-use-after-free Read in cfusbl_device_notify 2026/05/14 10:44 2026/05/14 10:44 2026/05/14 10:47 6ccb967e465e832a7bfd7a116ad00d52a0923a5d failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/9c52a92e2756a191d925754f08db05b4124d3dd8" "-s" "bzImage" "compile_commands.json"]: exit status 2 Root cause: error: unable to open output file 'drivers/misc/eeprom/eeprom_93cx6.o': 'No such file or directory' error: unable to open output file 'drivers/block/zram/zcomp.o': 'No such file or directory' error: unable to open output file 'drivers/block/zram/zram_drv.o': 'No such file or directory' error: unable to open output file 'kernel/module/main.o': 'No such file or directory' error: unable to open output file 'kernel/module/strict_rwx.o': 'No such file or directory' * * Restart config... * * * General architecture-dependent options * SMT (Hyperthreading) scheduler support (SCHED_SMT) [Y/?] y Cluster scheduler support (SCHED_CLUSTER) [Y/n/?] y Multi-Core Cache (MC) scheduler support (SCHED_MC) [Y/n/?] y Kprobes (KPROBES) [N/y/?] n Optimize very unlikely/likely branches (JUMP_LABEL) [Y/n/?] y Static key selftest (STATIC_KEYS_SELFTEST) [N/y/?] n Static call selftest (STATIC_CALL_SELFTEST) [N/y/?] n Enable seccomp to safely execute untrusted bytecode (SECCOMP) [Y/n/?] y Show seccomp filter cache status in /proc/pid/seccomp_cache (SECCOMP_CACHE_DEBUG) [N/y/?] n Stack Protector buffer overflow detection (STACKPROTECTOR) [Y/n/?] y Strong Stack Protector (STACKPROTECTOR_STRONG) [Y/n/?] y Link Time Optimization (LTO) > 1. None (LTO_NONE) choice[1]: 1 Enable Clang's AutoFDO build (EXPERIMENTAL) (AUTOFDO_CLANG) [N/y/?] (NEW) Error in reading or end of file. Enable Clang's Propeller build (PROPELLER_CLANG) [N/y/?] (NEW) Error in reading or end of file. Use Kernel Control Flow Integrity (kCFI) (CFI) [N/y/?] (NEW) Error in reading or end of file. Number of bits to use for ASLR of mmap base address (ARCH_MMAP_RND_BITS) [28] 28 Number of bits to use for ASLR of mmap base address for compatible applications (ARCH_MMAP_RND_COMPAT_BITS) [8] 8 MMU page size > 1. 4KiB pages (PAGE_SIZE_4KB) choice[1]: 1 Provide system calls for 32-bit time_t (COMPAT_32BIT_TIME) [Y/n/?] y Use a virtually-mapped stack (VMAP_STACK) [Y/n/?] y Support for randomizing kernel stack offset on syscall entry (RANDOMIZE_KSTACK_OFFSET) [Y/n/?] y Default state of kernel stack offset randomization (RANDOMIZE_KSTACK_OFFSET_DEFAULT) [N/y/?] n Locking event counts collection (LOCK_EVENT_COUNTS) [N/y/?] n * * Memory initialization * Initialize kernel stack variables at function entry 1. no automatic stack variable initialization (weakest) (INIT_STACK_NONE) 2. pattern-init everything (strongest) (INIT_STACK_ALL_PATTERN) > 3. zero-init everything (strongest and safest) (INIT_STACK_ALL_ZERO) choice[1-3?]: 3 Poison kernel stack before returning from syscalls (KSTACK_ERASE) [N/y/?] (NEW) Error in reading or end of file. Enable heap memory zeroing on allocation by default (INIT_ON_ALLOC_DEFAULT_ON) [Y/n/?] y Enable heap memory zeroing on free by default (INIT_ON_FREE_DEFAULT_ON) [N/y/?] n Enable register zeroing on function exit (ZERO_CALL_USED_REGS) [N/y/?] n * * Kernel hardening options * Randomize layout of sensitive kernel structures > 1. Disable structure layout randomization (RANDSTRUCT_NONE) 2. Fully randomize structure layout (RANDSTRUCT_FULL) (NEW) choice[1-2?]: Error in reading or end of file. /app/workdir/cache/src/39056aef3a53503f1a05892aad8990e208e793fc/lib/maple_tree.c:3514:20: warning: stack frame size (2424) exceeds limit (2048) in 'mas_wr_store_entry' [-Wframe-larger-than] 3514 | static inline void mas_wr_store_entry(struct ma_wr_state *wr_mas) | ^ 1 warning generated. /app/workdir/cache/src/39056aef3a53503f1a05892aad8990e208e793fc/sound/usb/mixer_s1810c.c:634:5: warning: stack frame size (2360) exceeds limit (2048) in 'snd_sc1810_init_mixer' [-Wframe-larger-than] 634 | int snd_sc1810_init_mixer(struct usb_mixer_interface *mixer) | ^ 1 warning generated. /app/workdir/cache/src/39056aef3a53503f1a05892aad8990e208e793fc/net/etht
9e7a6d09-5cd3-48df-a363-43f9aca42035 repro ❓ KASAN: slab-use-after-free Read in cfusbl_device_notify 2026/03/06 12:09 2026/03/06 12:09 2026/03/06 12:27 31e9c887f7dc24e04b3ca70d0d54fc34141844b0
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [net?] KASAN: slab-use-after-free Read in cfusbl_device_notify 0 (1) 2024/11/06 08:33
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in cfusbl_device_notify net 19 C done 341 1163d 1311d 22/29 fixed on 2023/06/08 14:41
linux-6.1 KASAN: use-after-free Read in cfusbl_device_notify 19 1 206d 206d 0/3 auto-obsoleted due to no activity on 2026/01/29 16:42

Sample crash report:
==================================================================
BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x84a/0x900 net/caif/caif_usb.c:142
Read of size 8 at addr ffff88803eb2cd48 by task syz.4.2989/15301

CPU: 0 UID: 0 PID: 15301 Comm: syz.4.2989 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1d0 mm/kasan/report.c:595
 cfusbl_device_notify+0x84a/0x900 net/caif/caif_usb.c:142
 notifier_call_chain+0x99/0x400 kernel/notifier.c:85
 call_netdevice_notifiers_info+0xbe/0x110 net/core/dev.c:2249
 call_netdevice_notifiers_extack net/core/dev.c:2287 [inline]
 call_netdevice_notifiers net/core/dev.c:2301 [inline]
 register_netdevice+0x1594/0x24b0 net/core/dev.c:11485
 register_netdev+0x34/0x50 net/core/dev.c:11543
 bnep_add_connection+0x723/0xd30 net/bluetooth/bnep/core.c:624
 do_bnep_sock_ioctl.isra.0+0x3ac/0x5b0 net/bluetooth/bnep/sock.c:83
 sock_do_ioctl+0x118/0x280 net/socket.c:1313
 sock_ioctl+0x599/0x6b0 net/socket.c:1434
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7efcf479cdd9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007efcf56a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007efcf4a15fa0 RCX: 00007efcf479cdd9
RDX: 0000200000000080 RSI: 00000000400442c8 RDI: 000000000000000b
RBP: 00007efcf4832d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007efcf4a16038 R14: 00007efcf4a15fa0 R15: 00007ffd3491b418
 </TASK>

Allocated by task 50:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:415
 kmalloc_noprof include/linux/slab.h:950 [inline]
 kzalloc_noprof include/linux/slab.h:1188 [inline]
 __hci_conn_add+0x1f4/0x1da0 net/bluetooth/hci_conn.c:963
 hci_conn_add_unset+0x76/0x120 net/bluetooth/hci_conn.c:1090
 hci_conn_request_evt+0xa58/0xbb0 net/bluetooth/hci_event.c:3333
 hci_event_func net/bluetooth/hci_event.c:7773 [inline]
 hci_event_packet+0x8e9/0xcd0 net/bluetooth/hci_event.c:7824
 hci_rx_work+0x451/0xfc0 net/bluetooth/hci_core.c:4077
 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3302
 process_scheduled_works kernel/workqueue.c:3385 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3466
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 15301:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2689 [inline]
 slab_free mm/slub.c:6246 [inline]
 kfree+0x223/0x6c0 mm/slub.c:6561
 device_release+0xd2/0x270 drivers/base/core.c:2566
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x1f7/0x640 lib/kobject.c:737
 put_device drivers/base/core.c:3814 [inline]
 device_add+0x350/0x1950 drivers/base/core.c:3759
 netdev_register_kobject+0x1a9/0x3d0 net/core/net-sysfs.c:2343
 register_netdevice+0x151c/0x24b0 net/core/dev.c:11427
 register_netdev+0x34/0x50 net/core/dev.c:11543
 bnep_add_connection+0x723/0xd30 net/bluetooth/bnep/core.c:624
 do_bnep_sock_ioctl.isra.0+0x3ac/0x5b0 net/bluetooth/bnep/sock.c:83
 sock_do_ioctl+0x118/0x280 net/socket.c:1313
 sock_ioctl+0x599/0x6b0 net/socket.c:1434
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Last potentially related work creation:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_record_aux_stack+0xa7/0xc0 mm/kasan/generic.c:556
 insert_work+0x36/0x230 kernel/workqueue.c:2226
 __queue_work+0x9a2/0x1130 kernel/workqueue.c:2381
 __queue_delayed_work+0x357/0x450 kernel/workqueue.c:2548
 queue_delayed_work_on+0x180/0x1e0 kernel/workqueue.c:2600
 queue_delayed_work include/linux/workqueue.h:711 [inline]
 hci_conn_drop include/net/bluetooth/hci_core.h:1712 [inline]
 hci_conn_drop include/net/bluetooth/hci_core.h:1686 [inline]
 l2cap_chan_del+0x649/0x930 net/bluetooth/l2cap_core.c:672
 l2cap_conn_del+0x395/0x710 net/bluetooth/l2cap_core.c:1802
 l2cap_disconn_cfm net/bluetooth/l2cap_core.c:7448 [inline]
 l2cap_disconn_cfm+0x9f/0x100 net/bluetooth/l2cap_core.c:7441
 hci_disconn_cfm include/net/bluetooth/hci_core.h:2154 [inline]
 hci_conn_hash_flush+0x10e/0x280 net/bluetooth/hci_conn.c:2650
 hci_dev_close_sync+0x5a7/0x1240 net/bluetooth/hci_sync.c:5368
 hci_dev_do_close+0x2e/0xb0 net/bluetooth/hci_core.c:502
 hci_unregister_dev+0x227/0x670 net/bluetooth/hci_core.c:2716
 vhci_release+0x17d/0x230 drivers/bluetooth/hci_vhci.c:690
 __fput+0x3ff/0xb50 fs/file_table.c:510
 task_work_run+0x150/0x240 kernel/task_work.c:233
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x8d2/0x2a60 kernel/exit.c:975
 do_group_exit+0xd5/0x2a0 kernel/exit.c:1117
 __do_sys_exit_group kernel/exit.c:1128 [inline]
 __se_sys_exit_group kernel/exit.c:1126 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1126
 x64_sys_call+0x102c/0x1530 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88803eb2c000
 which belongs to the cache kmalloc-8k of size 8192
The buggy address is located 3400 bytes inside of
 freed 8192-byte region [ffff88803eb2c000, ffff88803eb2e000)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3eb28
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88813fe8d280 dead000000000100 dead000000000122
raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88813fe8d280 dead000000000100 dead000000000122
head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12557, tgid 12555 (syz.2.2272), ts 428691449732, free_ts 361482356207
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x153/0x170 mm/page_alloc.c:1858
 prep_new_page mm/page_alloc.c:1866 [inline]
 get_page_from_freelist+0x11a6/0x33b0 mm/page_alloc.c:3946
 __alloc_frozen_pages_noprof+0x27c/0x2bc0 mm/page_alloc.c:5226
 alloc_slab_page mm/slub.c:3278 [inline]
 allocate_slab mm/slub.c:3467 [inline]
 new_slab+0xa6/0x6c0 mm/slub.c:3525
 refill_objects+0x277/0x420 mm/slub.c:7251
 refill_sheaf mm/slub.c:2816 [inline]
 __pcs_replace_empty_main+0x375/0x650 mm/slub.c:4651
 alloc_from_pcs mm/slub.c:4749 [inline]
 slab_alloc_node mm/slub.c:4883 [inline]
 __do_kmalloc_node mm/slub.c:5294 [inline]
 __kvmalloc_node_noprof+0x7da/0xa00 mm/slub.c:6828
 kvmalloc_array_node_noprof include/linux/slab.h:1216 [inline]
 __ptr_ring_init_queue_alloc_noprof include/linux/ptr_ring.h:481 [inline]
 ptr_ring_init_noprof include/linux/ptr_ring.h:499 [inline]
 skb_array_init_noprof include/linux/skb_array.h:182 [inline]
 pfifo_fast_init+0x177/0x3b0 net/sched/sch_generic.c:895
 qdisc_create_dflt+0x128/0x4b0 net/sched/sch_generic.c:1038
 attach_one_default_qdisc net/sched/sch_generic.c:1197 [inline]
 netdev_for_each_tx_queue include/linux/netdevice.h:2709 [inline]
 attach_default_qdiscs net/sched/sch_generic.c:1215 [inline]
 dev_activate+0x64f/0xce0 net/sched/sch_generic.c:1274
 __dev_open+0x490/0x8f0 net/core/dev.c:1711
 __dev_change_flags+0x596/0x850 net/core/dev.c:9762
 netif_change_flags+0x8d/0x160 net/core/dev.c:9825
 dev_change_flags+0xba/0x260 net/core/dev_api.c:68
 dev_ifsioc+0x169b/0x1fc0 net/core/dev_ioctl.c:555
 dev_ioctl+0x342/0x10e0 net/core/dev_ioctl.c:816
page last free pid 9 tgid 9 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1402 [inline]
 __free_frozen_pages+0x747/0x1040 mm/page_alloc.c:2943
 kasan_depopulate_vmalloc_pte+0x5d/0x80 mm/kasan/shadow.c:484
 apply_to_pte_range mm/memory.c:3322 [inline]
 apply_to_pmd_range mm/memory.c:3366 [inline]
 apply_to_pud_range mm/memory.c:3402 [inline]
 apply_to_p4d_range mm/memory.c:3438 [inline]
 __apply_to_page_range+0xb1d/0x1520 mm/memory.c:3474
 __kasan_release_vmalloc+0xd7/0xe0 mm/kasan/shadow.c:602
 kasan_release_vmalloc include/linux/kasan.h:593 [inline]
 kasan_release_vmalloc_node mm/vmalloc.c:2284 [inline]
 purge_vmap_node+0x210/0xb40 mm/vmalloc.c:2306
 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3302
 process_scheduled_works kernel/workqueue.c:3385 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3466
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Memory state around the buggy address:
 ffff88803eb2cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88803eb2cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88803eb2cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                              ^
 ffff88803eb2cd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88803eb2ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

Crashes (178):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/24 17:08 upstream dd6c438c3e64 1c2b9291 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2026/04/22 20:17 upstream 6596a02b2078 4595e353 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2026/02/27 10:52 upstream a75cb869a8cc a2f13f71 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2026/02/15 08:49 upstream c22e26bd0906 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/09/08 21:20 upstream f777d1112ee5 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/07/20 16:25 upstream f4a40a4282f4 7117feec .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/07/15 21:04 upstream 155a3c003e55 03fcfc4b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/05/16 09:36 upstream fee3e843b309 cfde8269 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2026/03/22 16:49 upstream 113ae7b4decc 5b92003d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2026/03/01 16:27 upstream eb71ab2bf722 43249bac .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2026/01/04 03:48 upstream aacb0a6d604a d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/12/21 10:15 upstream 9094662f6707 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/12/15 22:33 upstream 8f0b4cce4481 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/11/29 07:26 upstream 19eef1d98eed d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/11/08 08:55 upstream da32d155f4a8 4e1406b4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/10/24 19:46 upstream 6fab32bb6508 c0460fcd .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/10/21 13:27 upstream 6548d364a3e8 9832ed61 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/06/30 23:16 upstream d0b3b7b22dfa 6e83b42d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/06/25 10:31 upstream 7595b66ae9de 26d77996 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/06/04 07:59 upstream 5abc7438f1e9 a30356b7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/06/02 16:05 upstream cd2e103d57e5 aaaaf5ea .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/06/02 10:53 upstream cd2e103d57e5 aaaaf5ea .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: slab-use-after-free Read in cfusbl_device_notify
2024/11/04 15:41 upstream 59b723cd2adb 7bfecfb9 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/08/25 00:32 upstream 69fd6b99b8f8 bf27483f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 KASAN: slab-use-after-free Read in cfusbl_device_notify
2026/03/25 21:57 net c4ea7d8907cf 4367a094 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2026/02/24 21:14 net 3d7e6ce34f4f 96b1aa46 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2026/02/08 01:22 net 6d2f142b1e4b 4c131dc4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2026/01/21 19:33 net ba1096c31528 6f1aa2f9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/12/17 17:10 net 885bebac9909 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/10/17 17:59 net 7f864458e9a6 7adf5298 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/09/20 13:50 net a35c04de2565 67c37560 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/07/17 02:33 net 531d0d32de3e 44f8051e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/07/15 00:39 net b640daa2822a 03fcfc4b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/07/14 01:24 net a059ef8e8889 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/07/04 12:18 net 223e2288f4b8 76ad128c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/07/01 11:48 net 72fb83735c71 6e83b42d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/06/23 04:09 net 302251f1fdfd d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/06/16 13:14 net 5466491c9e33 5f4b362d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/06/12 03:11 net d9816ec74e6d 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/06/06 23:49 net 82cbd06f327f f61267d4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/06/02 06:01 net 558428921edd 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/06/01 16:59 net 558428921edd 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/05/30 05:57 net 27eab4c64423 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/05/25 17:25 net 5cdb2c77c4c3 ed351ea7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/05/23 06:38 net 5cdb2c77c4c3 fa44301a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2024/11/02 00:33 net 0144c06c5890 f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2026/02/16 02:16 net-next 37a93dd5c49b 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2026/01/25 19:56 net-next eac026ff97a9 40acda8a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2026/01/19 12:36 net-next b4e486e2c46f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/12/05 17:31 net-next 8f7aa3d3c732 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/11/24 02:23 net-next e05021a829b8 4fb8ef37 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/07/12 14:22 net-next a52f9f0d77f2 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/06/27 01:44 net-next 28aa52b6189f 803ce19b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/06/21 23:30 net-next 0289c51f889e d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/06/05 13:17 net-next 90b83efa6701 6b6b5f21 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/05/27 03:04 net-next f5b60d6a575a 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/05/21 06:39 net-next 9ab0ac0e532a 8f9cf946 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/05/19 07:57 net-next b8fa067c4a76 f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/10/29 05:08 linux-next f9ba12abc528 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce KASAN: slab-use-after-free Read in cfusbl_device_notify
2024/11/09 13:28 linux-next 929beafbe7ac 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/09/08 05:47 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci b320789d6883 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: slab-use-after-free Read in cfusbl_device_notify
2025/07/03 17:09 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 25b50375179c 115ceea7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: slab-use-after-free Read in cfusbl_device_notify
* Struck through repros no longer work on HEAD.