syzbot

 sign-in | mailing list | source | docs
🐞 Open [1540]
≡ Subsystems
🐞 Fixed [5899]
🐞 Invalid [14352]
⬇ Missing Backports [98]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

KASAN: use-after-free Write in nr_release

Status: fixed on 2023/06/08 14:41
Subsystems: hams
[Documentation on labels]
Reported-by: syzbot+caa188bdfc1eeafeb418@syzkaller.appspotmail.com
Fix commit: 611792920925 netrom: Fix use-after-free caused by accept on already connected socket
First crash: 1838d, last: 565d
Cause bisection: the cause commit could be any of (bisect log):
  9211bfbff80a netfilter: add missing IS_ENABLED(CONFIG_BRIDGE_NETFILTER) checks to header-file.
  47e640af2e49 netfilter: add missing IS_ENABLED(CONFIG_NF_TABLES) check to header-file.
  a1b2f04ea527 netfilter: add missing includes to a number of header-files.
  0abc8bf4f284 netfilter: add missing IS_ENABLED(CONFIG_NF_CONNTRACK) checks to some header-files.
  bd96b4c75675 netfilter: inline four headers files into another one.
  43dd16efc7f2 netfilter: nf_tables: store data in offload context registers
  78458e3e08cd netfilter: add missing IS_ENABLED(CONFIG_NETFILTER) checks to some header-files.
  20a9379d9a03 netfilter: remove "#ifdef __KERNEL__" guards from some headers.
  bd8699e9e292 netfilter: nft_bitwise: add offload support
  2a475c409fe8 kbuild: remove all netfilter headers from header-test blacklist.
  7e59b3fea2a2 netfilter: remove unnecessary spaces
  1b90af292e71 ipvs: Improve robustness to the ipvs sysctl
  5785cf15fd74 netfilter: nf_tables: add missing prototypes.
  0a30ba509fde netfilter: nf_nat_proto: make tables static
  e84fb4b3666d netfilter: conntrack: use shared sysctl constants
  105333435b4f netfilter: connlabels: prefer static lock initialiser
  8c0bb7873815 netfilter: synproxy: rename mss synproxy_options field
  c162610c7db2 Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next
   
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Discussions (5)
Title Replies (including bot) Last reply
[PATCH v2] netrom: Fix use-after-free caused by accept on already connected socket 8 (8) 2023/03/16 00:14
[PATCH v4] netrom: Fix use-after-free caused by accept on already connected socket 3 (3) 2023/01/30 07:40
[PATCH v3] netrom: Fix use-after-free caused by accept on already connected socket 2 (2) 2023/01/25 16:48
[PATCH] netrom: Fix use-after-free caused by accept on already connected socket 7 (7) 2023/01/23 19:27
KASAN: use-after-free Write in nr_release 0 (3) 2021/09/18 04:29
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 KASAN: use-after-free Read in nr_release C 327 647d 1949d 0/1 upstream: reported C repro on 2019/08/10 01:07
linux-4.14 KASAN: use-after-free Read in nr_release C 117 648d 1946d 0/1 upstream: reported C repro on 2019/08/13 12:20

Sample crash report:
==================================================================
BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:102 [inline]
BUG: KASAN: use-after-free in atomic_fetch_add_relaxed include/linux/atomic/atomic-instrumented.h:116 [inline]
BUG: KASAN: use-after-free in __refcount_add include/linux/refcount.h:193 [inline]
BUG: KASAN: use-after-free in __refcount_inc include/linux/refcount.h:250 [inline]
BUG: KASAN: use-after-free in refcount_inc include/linux/refcount.h:267 [inline]
BUG: KASAN: use-after-free in sock_hold include/net/sock.h:775 [inline]
BUG: KASAN: use-after-free in nr_release+0x66/0x460 net/netrom/af_netrom.c:520
Write of size 4 at addr ffff8880235d8080 by task syz-executor564/5128

CPU: 0 PID: 5128 Comm: syz-executor564 Not tainted 6.2.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106
 print_address_description mm/kasan/report.c:306 [inline]
 print_report+0x15e/0x461 mm/kasan/report.c:417
 kasan_report+0xbf/0x1f0 mm/kasan/report.c:517
 check_region_inline mm/kasan/generic.c:183 [inline]
 kasan_check_range+0x141/0x190 mm/kasan/generic.c:189
 instrument_atomic_read_write include/linux/instrumented.h:102 [inline]
 atomic_fetch_add_relaxed include/linux/atomic/atomic-instrumented.h:116 [inline]
 __refcount_add include/linux/refcount.h:193 [inline]
 __refcount_inc include/linux/refcount.h:250 [inline]
 refcount_inc include/linux/refcount.h:267 [inline]
 sock_hold include/net/sock.h:775 [inline]
 nr_release+0x66/0x460 net/netrom/af_netrom.c:520
 __sock_release+0xcd/0x280 net/socket.c:650
 sock_close+0x1c/0x20 net/socket.c:1365
 __fput+0x27c/0xa90 fs/file_table.c:320
 task_work_run+0x16f/0x270 kernel/task_work.c:179
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0xaa8/0x2950 kernel/exit.c:867
 do_group_exit+0xd4/0x2a0 kernel/exit.c:1012
 get_signal+0x21c3/0x2450 kernel/signal.c:2859
 arch_do_signal_or_restart+0x79/0x5c0 arch/x86/kernel/signal.c:306
 exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
 exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296
 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f6c19e3c9b9
Code: Unable to access opcode bytes at 0x7f6c19e3c98f.
RSP: 002b:00007fffd4ba2ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: 0000000000000116 RBX: 0000000000000003 RCX: 00007f6c19e3c9b9
RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000006
RBP: 0000000000000003 R08: 000000000000000d R09: 000000000000000d
R10: 0000000000000000 R11: 0000000000000246 R12: 000055555566a2c0
R13: 0000000000000011 R14: 0000000000000000 R15: 0000000000000000
 </TASK>

Allocated by task 5128:
 kasan_save_stack+0x22/0x40 mm/kasan/common.c:45
 kasan_set_track+0x25/0x30 mm/kasan/common.c:52
 ____kasan_kmalloc mm/kasan/common.c:371 [inline]
 ____kasan_kmalloc mm/kasan/common.c:330 [inline]
 __kasan_kmalloc+0xa3/0xb0 mm/kasan/common.c:380
 kasan_kmalloc include/linux/kasan.h:211 [inline]
 __do_kmalloc_node mm/slab_common.c:968 [inline]
 __kmalloc+0x5a/0xd0 mm/slab_common.c:981
 kmalloc include/linux/slab.h:584 [inline]
 sk_prot_alloc+0x140/0x290 net/core/sock.c:2038
 sk_alloc+0x3a/0x7a0 net/core/sock.c:2091
 nr_create+0xb6/0x5f0 net/netrom/af_netrom.c:433
 __sock_create+0x359/0x790 net/socket.c:1515
 sock_create net/socket.c:1566 [inline]
 __sys_socket_create net/socket.c:1603 [inline]
 __sys_socket_create net/socket.c:1588 [inline]
 __sys_socket+0x133/0x250 net/socket.c:1636
 __do_sys_socket net/socket.c:1649 [inline]
 __se_sys_socket net/socket.c:1647 [inline]
 __x64_sys_socket+0x73/0xb0 net/socket.c:1647
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

Freed by task 5128:
 kasan_save_stack+0x22/0x40 mm/kasan/common.c:45
 kasan_set_track+0x25/0x30 mm/kasan/common.c:52
 kasan_save_free_info+0x2b/0x40 mm/kasan/generic.c:518
 ____kasan_slab_free mm/kasan/common.c:236 [inline]
 ____kasan_slab_free+0x13b/0x1a0 mm/kasan/common.c:200
 kasan_slab_free include/linux/kasan.h:177 [inline]
 __cache_free mm/slab.c:3394 [inline]
 __do_kmem_cache_free mm/slab.c:3580 [inline]
 __kmem_cache_free+0xcd/0x3b0 mm/slab.c:3587
 sk_prot_free net/core/sock.c:2074 [inline]
 __sk_destruct+0x5df/0x750 net/core/sock.c:2166
 sk_destruct net/core/sock.c:2181 [inline]
 __sk_free+0x175/0x460 net/core/sock.c:2192
 sk_free+0x7c/0xa0 net/core/sock.c:2203
 sock_put include/net/sock.h:1991 [inline]
 nr_release+0x39e/0x460 net/netrom/af_netrom.c:554
 __sock_release+0xcd/0x280 net/socket.c:650
 sock_close+0x1c/0x20 net/socket.c:1365
 __fput+0x27c/0xa90 fs/file_table.c:320
 task_work_run+0x16f/0x270 kernel/task_work.c:179
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0xaa8/0x2950 kernel/exit.c:867
 do_group_exit+0xd4/0x2a0 kernel/exit.c:1012
 get_signal+0x21c3/0x2450 kernel/signal.c:2859
 arch_do_signal_or_restart+0x79/0x5c0 arch/x86/kernel/signal.c:306
 exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
 exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296
 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

Last potentially related work creation:
 kasan_save_stack+0x22/0x40 mm/kasan/common.c:45
 __kasan_record_aux_stack+0x7b/0x90 mm/kasan/generic.c:488
 __call_rcu_common.constprop.0+0x99/0x820 kernel/rcu/tree.c:2755
 netlink_release+0xdcb/0x1e60 net/netlink/af_netlink.c:826
 __sock_release+0xcd/0x280 net/socket.c:650
 sock_close+0x1c/0x20 net/socket.c:1365
 __fput+0x27c/0xa90 fs/file_table.c:320
 task_work_run+0x16f/0x270 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:171 [inline]
 exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296
 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

The buggy address belongs to the object at ffff8880235d8000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 128 bytes inside of
 2048-byte region [ffff8880235d8000, ffff8880235d8800)

The buggy address belongs to the physical page:
page:ffffea00008d7600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x235d8
flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000000200 ffff888012440800 ffffea0001faac90 ffffea0000a88d10
raw: 0000000000000000 ffff8880235d8000 0000000100000001 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_THISNODE), pid 5056, tgid 5056 (strace-static-x), ts 60139317062, free_ts 60083457500
 prep_new_page mm/page_alloc.c:2531 [inline]
 get_page_from_freelist+0x119c/0x2ce0 mm/page_alloc.c:4283
 __alloc_pages+0x1cb/0x5b0 mm/page_alloc.c:5549
 __alloc_pages_node include/linux/gfp.h:237 [inline]
 kmem_getpages mm/slab.c:1363 [inline]
 cache_grow_begin+0x94/0x390 mm/slab.c:2574
 cache_alloc_refill+0x27f/0x380 mm/slab.c:2947
 ____cache_alloc mm/slab.c:3023 [inline]
 ____cache_alloc mm/slab.c:3006 [inline]
 __do_cache_alloc mm/slab.c:3206 [inline]
 slab_alloc_node mm/slab.c:3254 [inline]
 __kmem_cache_alloc_node+0x44f/0x510 mm/slab.c:3544
 __do_kmalloc_node mm/slab_common.c:967 [inline]
 __kmalloc+0x4a/0xd0 mm/slab_common.c:981
 kmalloc include/linux/slab.h:584 [inline]
 sk_prot_alloc+0x140/0x290 net/core/sock.c:2038
 sk_alloc+0x3a/0x7a0 net/core/sock.c:2091
 __netlink_create+0x63/0x380 net/netlink/af_netlink.c:647
 netlink_create+0x3b1/0x5f0 net/netlink/af_netlink.c:710
 __sock_create+0x359/0x790 net/socket.c:1515
 sock_create net/socket.c:1566 [inline]
 __sys_socket_create net/socket.c:1603 [inline]
 __sys_socket_create net/socket.c:1588 [inline]
 __sys_socket+0x133/0x250 net/socket.c:1636
 __do_sys_socket net/socket.c:1649 [inline]
 __se_sys_socket net/socket.c:1647 [inline]
 __x64_sys_socket+0x73/0xb0 net/socket.c:1647
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
page last free stack trace:
 reset_page_owner include/linux/page_owner.h:24 [inline]
 free_pages_prepare mm/page_alloc.c:1446 [inline]
 free_pcp_prepare+0x65c/0xc00 mm/page_alloc.c:1496
 free_unref_page_prepare mm/page_alloc.c:3369 [inline]
 free_unref_page+0x1d/0x490 mm/page_alloc.c:3464
 slab_destroy mm/slab.c:1619 [inline]
 slabs_destroy+0x85/0xc0 mm/slab.c:1639
 cache_flusharray mm/slab.c:3365 [inline]
 ___cache_free+0x2ac/0x3d0 mm/slab.c:3428
 qlink_free mm/kasan/quarantine.c:168 [inline]
 qlist_free_all+0x4f/0x1a0 mm/kasan/quarantine.c:187
 kasan_quarantine_reduce+0x192/0x220 mm/kasan/quarantine.c:294
 __kasan_slab_alloc+0x63/0x90 mm/kasan/common.c:302
 kasan_slab_alloc include/linux/kasan.h:201 [inline]
 slab_post_alloc_hook mm/slab.h:761 [inline]
 slab_alloc_node mm/slab.c:3261 [inline]
 __kmem_cache_alloc_node+0x26b/0x510 mm/slab.c:3544
 kmalloc_trace+0x26/0x60 mm/slab_common.c:1062
 kmalloc include/linux/slab.h:580 [inline]
 kzalloc include/linux/slab.h:720 [inline]
 inet_alloc_ifa net/ipv4/devinet.c:221 [inline]
 rtm_to_ifaddr+0x240/0xc40 net/ipv4/devinet.c:855
 inet_rtm_newaddr+0x12a/0x980 net/ipv4/devinet.c:943
 rtnetlink_rcv_msg+0x43e/0xca0 net/core/rtnetlink.c:6141
 netlink_rcv_skb+0x165/0x440 net/netlink/af_netlink.c:2564
 netlink_unicast_kernel net/netlink/af_netlink.c:1330 [inline]
 netlink_unicast+0x547/0x7f0 net/netlink/af_netlink.c:1356
 netlink_sendmsg+0x91b/0xe10 net/netlink/af_netlink.c:1932
 sock_sendmsg_nosec net/socket.c:714 [inline]
 sock_sendmsg+0xd3/0x120 net/socket.c:734

Memory state around the buggy address:
 ffff8880235d7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff8880235d8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff8880235d8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff8880235d8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff8880235d8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

Crashes (1784):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/12/29 06:04 upstream 1b929c02afd3 44712fbc .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: use-after-free Write in nr_release
2022/10/02 16:41 upstream b357fd1c2afc feb56351 .config strace log report syz C ci-upstream-kasan-gce-selinux-root KASAN: use-after-free Write in nr_release
2022/09/15 05:32 upstream 3245cb65fd91 b884348d .config strace log report syz C [disk image] [vmlinux] ci-upstream-kasan-gce-smack-root KASAN: use-after-free Write in nr_release
2022/09/07 06:00 upstream d2ec799d1c1b 5fc30c37 .config strace log report syz C ci-upstream-kasan-gce-smack-root KASAN: use-after-free Write in nr_release
2022/09/06 06:53 upstream 53e99dcff61e 9dcd38fc .config strace log report syz C [disk image] [vmlinux] ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2022/07/28 15:05 upstream 6e7765cb477a fb95c74d .config strace log report syz C ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2022/07/14 10:13 upstream 4a57a8400075 5d921b08 .config strace log report syz C ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2022/06/02 08:22 upstream 8171acb8bc9b b4bc6a3d .config strace log report syz C ci-upstream-kasan-gce-smack-root KASAN: use-after-free Write in nr_release
2021/09/18 04:28 upstream ddf21bd8ab98 70b76c1d .config console log report syz C ci-upstream-kasan-gce-smack-root KASAN: use-after-free Write in nr_release
2022/06/06 18:20 net-next-old 58f9d52ff689 c8857892 .config strace log report syz C ci-upstream-net-kasan-gce KASAN: use-after-free Write in nr_release
2022/06/02 08:50 net-next-old 7e062cda7d90 b4bc6a3d .config strace log report syz C ci-upstream-net-kasan-gce KASAN: use-after-free Write in nr_release
2022/08/29 01:28 linux-next 8d0c42c9e807 07177916 .config strace log report syz C ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Write in nr_release
2022/10/05 17:26 upstream 2bca25eaeba6 267e3bb1 .config console log report syz [disk image] [vmlinux] ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2022/06/06 16:39 upstream f2906aa86338 c8857892 .config console log report syz ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2021/08/29 08:50 upstream 3f5ad13cb012 be2c130d .config console log report syz ci-upstream-kasan-gce-selinux-root KASAN: use-after-free Write in nr_release
2022/09/30 08:42 net-old 511cce163b75 1d385642 .config console log report syz ci-upstream-net-this-kasan-gce KASAN: use-after-free Write in nr_release
2022/09/30 06:27 net-next-old 510bbf82f8dc 1d385642 .config console log report syz ci-upstream-net-kasan-gce KASAN: use-after-free Write in nr_release
2020/08/11 20:30 upstream 00e4db51259a bacaf5fa .config console log report syz ci-upstream-kasan-gce-smack-root
2020/04/11 07:52 upstream ab6f762f0f53 a8c6a3f8 .config console log report syz ci-upstream-kasan-gce-smack-root
2020/04/10 21:16 upstream c0cc271173b2 a8c6a3f8 .config console log report syz ci-upstream-kasan-gce-selinux-root
2019/12/20 09:36 upstream 7e0165b2f1a9 e30cbdae .config console log report syz ci-upstream-kasan-gce-selinux-root
2020/03/17 03:09 linux-next 770fbb32d34e 749688d2 .config console log report syz ci-upstream-linux-next-kasan-gce-root
2020/03/06 01:03 linux-next c99b17ac0399 c88c7b75 .config console log report syz ci-upstream-linux-next-kasan-gce-root
2019/12/28 20:42 linux-next 7ddd09fc4b74 af6b8ef8 .config console log report syz ci-upstream-linux-next-kasan-gce-root
2023/02/18 19:44 upstream 38f8ccde04a3 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root KASAN: use-after-free Write in nr_release
2023/01/26 08:03 upstream 7c46948a6e9c 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/26 05:24 upstream 7c46948a6e9c 9dfcf09c .config console log report info ci-upstream-kasan-gce-selinux-root KASAN: use-after-free Write in nr_release
2023/01/25 13:24 upstream 948ef7bb70c4 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/24 04:23 upstream 7bf70dbb1882 9dfcf09c .config console log report info ci-upstream-kasan-gce-selinux-root KASAN: use-after-free Write in nr_release
2023/01/24 00:31 upstream 7bf70dbb1882 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/23 18:02 upstream 2475bf0250de 9dfcf09c .config console log report info ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/23 11:51 upstream 2475bf0250de 44388686 .config console log report info ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/23 10:46 upstream 2475bf0250de 44388686 .config console log report info ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/23 06:40 upstream 2475bf0250de 44388686 .config console log report info ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/22 07:18 upstream 2241ab53cbb5 559a440a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: use-after-free Write in nr_release
2023/01/22 05:42 upstream f67144022885 559a440a .config console log report info ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/21 14:33 upstream f883675bf652 559a440a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: use-after-free Write in nr_release
2023/01/21 12:54 upstream f883675bf652 559a440a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: use-after-free Write in nr_release
2023/01/20 20:03 upstream ff83fec8179e 559a440a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/17 21:42 upstream 6e50979a9c87 aedf5331 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: use-after-free Write in nr_release
2023/01/17 14:59 upstream d532dd102151 a63719e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/17 08:05 upstream d532dd102151 a63719e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/15 21:16 upstream 5dc4c995db9e a63719e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/15 06:35 upstream 7c6984405241 a63719e7 .config console log report info ci-upstream-kasan-gce-selinux-root KASAN: use-after-free Write in nr_release
2023/01/15 04:21 upstream 7c6984405241 a63719e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/10 03:32 upstream 5a41237ad1d4 1dac8c7a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root KASAN: use-after-free Write in nr_release
2022/12/21 23:01 upstream 7c0846125358 4067838e .config console log report info ci-qemu-upstream KASAN: use-after-free Write in nr_release
2022/12/09 10:30 upstream f3e8416619ce 1034e5fa .config console log report info ci-qemu-upstream-386 KASAN: use-after-free Write in nr_release
2023/01/20 12:05 net-old 6c977c5c2e4c 559a440a .config console log report info ci-upstream-net-this-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/19 22:21 net-old 4fb58ac3368c 1b826a2f .config console log report info ci-upstream-net-this-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/15 23:10 net-old a22b7388d658 a63719e7 .config console log report info ci-upstream-net-this-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/14 12:47 net-old a22b7388d658 a63719e7 .config console log report info ci-upstream-net-this-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/28 10:27 net-next-old c2ea552065e4 9dfcf09c .config console log report info ci-upstream-net-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/25 23:22 net-next-old d0671115869d 9dfcf09c .config console log report info ci-upstream-net-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/25 11:01 net-next-old d0671115869d 9dfcf09c .config console log report info ci-upstream-net-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/24 20:14 net-next-old c554520f2cbe 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/24 07:28 net-next-old 32e54254bab8 9dfcf09c .config console log report info ci-upstream-net-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/20 16:49 net-next-old 3ef4a8c8963b 559a440a .config console log report info ci-upstream-net-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/18 10:45 net-next-old c4791b3196bf 42660d9e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/17 18:35 net-next-old 0c68c8e5ec68 aedf5331 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/16 22:42 net-next-old 5129bd8e8840 a63719e7 .config console log report info ci-upstream-net-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/16 11:30 net-next-old 298bfe27d112 a63719e7 .config console log report info ci-upstream-net-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/16 08:42 net-next-old 298bfe27d112 a63719e7 .config console log report info ci-upstream-net-kasan-gce KASAN: use-after-free Write in nr_release
2023/01/25 16:39 linux-next 691781f561e9 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/23 08:37 linux-next 691781f561e9 44388686 .config console log report info ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/19 19:46 linux-next aa5c49149a82 1b826a2f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/19 11:16 linux-next aa5c49149a82 7374c4e5 .config console log report info ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/19 04:10 linux-next f3381a7baf5c 42660d9e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/18 06:46 linux-next f3381a7baf5c 42660d9e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/17 16:29 linux-next 9ce08dd7ea24 aedf5331 .config console log report info ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/17 10:45 linux-next 9ce08dd7ea24 a63719e7 .config console log report info ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/14 16:42 linux-next 0a093b2893c7 a63719e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/14 14:08 linux-next 0a093b2893c7 a63719e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/14 08:25 linux-next 0a093b2893c7 529798b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Write in nr_release
2023/01/14 02:41 linux-next 0a093b2893c7 529798b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Write in nr_release
2019/11/29 06:03 upstream 81b6b96475ac 76357d6f .config console log report ci-upstream-kasan-gce-root
2022/06/30 04:42 net-old e65af5403e46 1434eec0 .config console log report info ci-upstream-net-this-kasan-gce KASAN: slab-out-of-bounds Write in nr_release
2023/05/25 15:37 net-next 8a5ad2ea6b87 0513b3e6 .config console log report info ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in nr_release
2020/12/12 22:20 net-next-old 00f7763a26cb bca53db9 .config console log report info ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.