KASAN: slab-out-of-bounds Read in drm_property_add_enum

Status: upstream: reported C repro on 2026/08/19 00:44
Subsystems: usb dri
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+9ae8e7884e451eaed5b4@syzkaller.appspotmail.com
Fix commit: da1ea35fea67 drm/gud: validate TV mode names before creating enum property
Patched on: [ci-qemu-gce-upstream-auto ci-qemu-native-arm64-kvm ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci-upstream-rust-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root]
First crash: 49d, last: 26d
Cause bisection: failed (error log, bisect log)
  
▶ ▼ ✨ AI Jobs (5)
ID Workflow Result Correct Bug Created Started Finished Revision
f4f7b964 assessment-security DenialOfService: ✅ Exploitable: ✅ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ KASAN: slab-out-of-bounds Read in drm_property_add_enum 2026/09/03 01:03 2026/09/03 01:03 2026/09/03 01:37 9941e97d
cc763c57 assessment-security 💥 KASAN: slab-out-of-bounds Read in drm_property_add_enum 2026/08/25 00:38 2026/08/25 00:38 2026/08/25 00:38 23caa175
1091ef2b assessment-security 💥 KASAN: slab-out-of-bounds Read in drm_property_add_enum 2026/08/20 00:54 2026/08/20 00:54 2026/08/20 00:54 1e72964b
9fc6f054 assessment-security 💥 KASAN: slab-out-of-bounds Read in drm_property_add_enum 2026/08/17 02:15 2026/08/17 02:15 2026/08/17 02:15 746171ee
7c80c1de assessment-security 💥 KASAN: slab-out-of-bounds Read in drm_property_add_enum 2026/08/16 00:30 2026/08/16 00:30 2026/08/16 00:30 746171ee
▶ ▼ Discussions (2)
Title Replies (including bot) Last reply
[PATCH] drm/gud: validate TV mode names before creating enum property 2 (2) 2026/08/23 15:57
[syzbot] [dri?] [usb?] KASAN: slab-out-of-bounds Read in drm_property_add_enum 0 (1) 2026/08/19 00:44
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 KASAN: slab-out-of-bounds Read in drm_property_add_enum 17 1 41d 41d 0/3 upstream: reported on 2026/08/22 23:32
▶ ▼ Last patch testing requests (3)
Created Duration User Patch Repo Result
2026/08/19 07:05 19m tao1.yu@intel.com https://github.com/yutao-intel/linux.git fix-dri no crash job log log
2026/08/19 06:41 14m tao1.yu@intel.com https://github.com/yutao-intel/linux.git fix-dri error job log
2026/08/19 06:19 0m tao1.yu@intel.com patch upstream error job log

Sample crash report:
usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
==================================================================
BUG: KASAN: slab-out-of-bounds in strlen+0x93/0xa0 lib/string.c:402
Read of size 1 at addr ffff888037865100 by task kworker/0:0/9

CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 strlen+0x93/0xa0 lib/string.c:402
 __fortify_strlen include/linux/fortify-string.h:218 [inline]
 drm_property_add_enum+0x2d/0x590 drivers/gpu/drm/drm_property.c:396
 drm_mode_create_tv_properties_legacy+0x3e9/0x4c0 drivers/gpu/drm/drm_connector.c:2242
 gud_connector_add_tv_mode+0x1d7/0x2b0 drivers/gpu/drm/gud/gud_connector.c:402
 gud_connector_add_properties drivers/gpu/drm/gud/gud_connector.c:525 [inline]
 gud_connector_create drivers/gpu/drm/gud/gud_connector.c:680 [inline]
 gud_get_connectors+0xbd9/0x1700 drivers/gpu/drm/gud/gud_connector.c:717
 gud_probe+0x17aa/0x1c20 drivers/gpu/drm/gud/gud_drv.c:635
 usb_probe_interface+0x386/0x9b0 drivers/usb/core/driver.c:399
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153
 bus_probe_device+0x64/0x160 drivers/base/bus.c:620
 device_add+0x121d/0x1970 drivers/base/core.c:3776
 usb_set_configuration+0xd97/0x1c60 drivers/usb/core/message.c:2268
 usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250
 usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:293
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153
 bus_probe_device+0x64/0x160 drivers/base/bus.c:620
 device_add+0x121d/0x1970 drivers/base/core.c:3776
 usb_new_device.part.0+0xcc2/0x1686 drivers/usb/core/hub.c:2708
 usb_new_device include/linux/workqueue.h:715 [inline]
 hub_port_connect drivers/usb/core/hub.c:5580 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5720 [inline]
 port_event drivers/usb/core/hub.c:5884 [inline]
 hub_event.cold+0x1e3/0xe90 drivers/usb/core/hub.c:5966
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3387
 process_scheduled_works kernel/workqueue.c:3470 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3551
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 9:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2f8/0x6d0 mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 gud_connector_add_tv_mode+0xac/0x2b0 drivers/gpu/drm/gud/gud_connector.c:385
 gud_connector_add_properties drivers/gpu/drm/gud/gud_connector.c:525 [inline]
 gud_connector_create drivers/gpu/drm/gud/gud_connector.c:680 [inline]
 gud_get_connectors+0xbd9/0x1700 drivers/gpu/drm/gud/gud_connector.c:717
 gud_probe+0x17aa/0x1c20 drivers/gpu/drm/gud/gud_drv.c:635
 usb_probe_interface+0x386/0x9b0 drivers/usb/core/driver.c:399
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153
 bus_probe_device+0x64/0x160 drivers/base/bus.c:620
 device_add+0x121d/0x1970 drivers/base/core.c:3776
 usb_set_configuration+0xd97/0x1c60 drivers/usb/core/message.c:2268
 usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250
 usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:293
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153
 bus_probe_device+0x64/0x160 drivers/base/bus.c:620
 device_add+0x121d/0x1970 drivers/base/core.c:3776
 usb_new_device.part.0+0xcc2/0x1686 drivers/usb/core/hub.c:2708
 usb_new_device include/linux/workqueue.h:715 [inline]
 hub_port_connect drivers/usb/core/hub.c:5580 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5720 [inline]
 port_event drivers/usb/core/hub.c:5884 [inline]
 hub_event.cold+0x1e3/0xe90 drivers/usb/core/hub.c:5966
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3387
 process_scheduled_works kernel/workqueue.c:3470 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3551
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff888037865000
 which belongs to the cache kmalloc-256 of size 256
The buggy address is located 0 bytes to the right of
 allocated 256-byte region [ffff888037865000, ffff888037865100)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37864
head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5778, tgid 5778 (syz-executor), ts 56821129456
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0x110d/0x35d0 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2eb/0x3300 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7410
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_noprof+0x67c/0x840 mm/slub.c:5439
 _kmalloc_noprof include/linux/slab.h:995 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 __list_lru_init+0xd9/0x4b0 mm/list_lru.c:678
 alloc_super fs/super.c:413 [inline]
 sget_fc+0xac6/0x1f20 fs/super.c:889
 vfs_get_super fs/super.c:1400 [inline]
 get_tree_nodev+0x28/0x190 fs/super.c:1424
 vfs_get_tree+0x92/0x320 fs/super.c:1947
 fc_mount fs/namespace.c:1198 [inline]
 do_new_mount_fc fs/namespace.c:3772 [inline]
 do_new_mount fs/namespace.c:3848 [inline]
 path_mount+0x7d0/0x24c0 fs/namespace.c:4168
 do_mount fs/namespace.c:4181 [inline]
 __do_sys_mount fs/namespace.c:4397 [inline]
 __se_sys_mount fs/namespace.c:4374 [inline]
 __x64_sys_mount+0x293/0x310 fs/namespace.c:4374
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
page last free pid 24 tgid 24 ts 56242051338 stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 __free_pages_prepare mm/page_alloc.c:1418 [inline]
 __free_frozen_pages+0x79f/0x10f0 mm/page_alloc.c:2962
 rcu_do_batch kernel/rcu/tree.c:2650 [inline]
 rcu_core+0x5f0/0x1260 kernel/rcu/tree.c:2919
 handle_softirqs+0x1e6/0x9d0 kernel/softirq.c:645
 run_ksoftirqd kernel/softirq.c:1108 [inline]
 run_ksoftirqd+0x38/0x60 kernel/softirq.c:1100
 smpboot_thread_fn+0x3d3/0xab0 kernel/smpboot.c:160
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Memory state around the buggy address:
 ffff888037865000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff888037865080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>ffff888037865100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
                   ^
 ffff888037865180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888037865200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

Crashes (111):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/31 08:45 upstream cee9395acd80 2f52988a .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/15 17:02 upstream 15ef2f78c49d 746171ee .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/15 16:32 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bdab5605259b 746171ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/15 14:30 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bdab5605259b 746171ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/15 12:23 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bdab5605259b 746171ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/15 10:19 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bdab5605259b 746171ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/15 08:03 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bdab5605259b 746171ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/15 05:44 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bdab5605259b 746171ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/15 03:42 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bdab5605259b 746171ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/07 06:00 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 5445d6419962 4f7b22a0 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/19 03:56 upstream 0f23d56f17fd 1e72964b .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/07 08:58 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/07 07:55 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/07 05:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/07 04:26 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/07 02:19 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/06 16:27 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/06 02:17 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/06 00:21 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/05 22:34 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/05 22:21 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/05 17:18 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/05 08:58 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/04 18:44 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/04 17:38 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/04 15:44 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/04 14:25 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/04 07:28 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 801f0966 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/03 23:56 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 801f0966 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/03 16:27 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/03 12:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/03 01:53 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/02 20:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/02 10:31 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing edc1518454f6 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/09/01 21:30 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5704a4065c2c 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/31 23:52 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing cee9395acd80 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/31 22:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing cee9395acd80 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/31 18:57 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing cee9395acd80 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/31 03:37 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/31 01:44 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/30 21:00 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/30 18:32 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/30 17:03 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/30 11:17 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/29 16:48 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/29 14:23 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/29 12:37 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/29 10:08 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/28 13:39 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/28 05:15 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/27 13:53 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/27 02:13 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
2026/08/25 21:00 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e1e6e541c5c9 a9a1fc32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb KASAN: slab-out-of-bounds Read in drm_property_add_enum
* Struck through repros no longer work on HEAD.