syzbot

 sign-in | mailing list | source | docs
🐞 Open [958] ≡ Subsystems 🐞 Fixed [4568] 🐞 Invalid [10541] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KASAN: use-after-free Read in v4l2_fh_init

Status: upstream: reported C repro on 2019/04/19 14:36
Labels: usb media (incorrect?)
Reported-by: syzbot+c025d34b8eaa54c571b8@syzkaller.appspotmail.com
First crash: 1509d, last: 25d

Cause bisection: failed (error log, bisect log)

Fix bisection: the fix commit could be any of (bisect log):
  4010a528219e Merge tag 'fixes_for_v5.14-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs
  3cc40a443a04 Merge tag 'nios2_fixes_v6.0' of git://git.kernel.org/pub/scm/linux/kernel/git/dinguyen/linux
▶ ▼ Discussions (3)
Title Replies (including bot) Last reply
KASAN: use-after-free Read in v4l2_fh_init 2 (3) 2020/12/02 11:21
Reminder: 35 open syzbot bugs in media subsystem 1 (1) 2019/07/24 01:39
Reminder: 28 open syzbot bugs in media subsystem 1 (1) 2019/06/27 03:53
▶ ▼ Last patch testing requests (16)
Created Duration User Patch Repo Result
2023/05/12 11:16 27m retest repro upstream report log
2023/05/12 11:16 26m retest repro upstream report log
2023/05/12 11:16 35m retest repro upstream report log
2023/05/12 11:16 29m retest repro upstream report log
2023/05/12 11:16 15m retest repro upstream report log
2023/02/02 10:32 22m retest repro upstream report log
2023/02/02 10:32 13m retest repro upstream report log
2023/02/02 15:32 36m retest repro upstream report log
2022/10/25 01:30 19m retest repro upstream OK log
2022/10/25 01:30 11m retest repro upstream report log
2020/10/18 21:01 17m rkovhaev@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git v5.9 OK
2020/10/18 19:51 10m rkovhaev@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git v5.9 report log
2020/10/18 16:58 10m rkovhaev@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git v5.9 report log
2020/10/11 19:54 9m rkovhaev@gmail.com patch upstream report log
2020/10/11 17:38 9m rkovhaev@gmail.com patch upstream report log
2020/10/11 16:12 9m rkovhaev@gmail.com upstream report log

Sample crash report:
==================================================================
BUG: KASAN: use-after-free in v4l2_fh_init+0x279/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
Read of size 8 at addr ffff8880283d0838 by task v4l_id/3714

CPU: 1 PID: 3714 Comm: v4l_id Not tainted 5.19.0-rc6-syzkaller-00115-g4a57a8400075 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
 print_address_description.constprop.0.cold+0xeb/0x467 mm/kasan/report.c:313
 print_report mm/kasan/report.c:429 [inline]
 kasan_report.cold+0xf4/0x1c6 mm/kasan/report.c:491
 v4l2_fh_init+0x279/0x2c0 drivers/media/v4l2-core/v4l2-fh.c:25
 v4l2_fh_open+0x88/0xc0 drivers/media/v4l2-core/v4l2-fh.c:63
 em28xx_v4l2_open+0x11c/0x570 drivers/media/usb/em28xx/em28xx-video.c:2163
 v4l2_open+0x21c/0x3f0 drivers/media/v4l2-core/v4l2-dev.c:427
 chrdev_open+0x266/0x770 fs/char_dev.c:414
 do_dentry_open+0x4a1/0x11f0 fs/open.c:848
 do_open fs/namei.c:3520 [inline]
 path_openat+0x1c71/0x2910 fs/namei.c:3653
 do_filp_open+0x1aa/0x400 fs/namei.c:3680
 do_sys_openat2+0x16d/0x4c0 fs/open.c:1278
 do_sys_open fs/open.c:1294 [inline]
 __do_sys_openat fs/open.c:1310 [inline]
 __se_sys_openat fs/open.c:1305 [inline]
 __x64_sys_openat+0x13f/0x1f0 fs/open.c:1305
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f51b0125697
Code: 25 00 00 41 00 3d 00 00 41 00 74 37 64 8b 04 25 18 00 00 00 85 c0 75 5b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 85 00 00 00 48 83 c4 68 5d 41 5c c3 0f 1f
RSP: 002b:00007ffc0bf58de0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00005583be9ebc40 RCX: 00007f51b0125697
RDX: 0000000000000000 RSI: 00007ffc0bf5af21 RDI: 00000000ffffff9c
RBP: 00007ffc0bf5af21 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>

Allocated by task 3678:
 kasan_save_stack+0x1e/0x40 mm/kasan/common.c:38
 kasan_set_track mm/kasan/common.c:45 [inline]
 set_alloc_info mm/kasan/common.c:436 [inline]
 ____kasan_kmalloc mm/kasan/common.c:515 [inline]
 ____kasan_kmalloc mm/kasan/common.c:474 [inline]
 __kasan_kmalloc+0xa6/0xd0 mm/kasan/common.c:524
 kasan_kmalloc include/linux/kasan.h:234 [inline]
 kmem_cache_alloc_trace+0x1ea/0x4a0 mm/slab.c:3569
 kmalloc include/linux/slab.h:600 [inline]
 kzalloc include/linux/slab.h:733 [inline]
 em28xx_v4l2_init drivers/media/usb/em28xx/em28xx-video.c:2542 [inline]
 em28xx_v4l2_init.cold+0x93/0x329c drivers/media/usb/em28xx/em28xx-video.c:2520
 em28xx_init_extension+0x12f/0x1f0 drivers/media/usb/em28xx/em28xx-core.c:1126
 request_module_async+0x5d/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3415
 process_one_work+0x996/0x1610 kernel/workqueue.c:2289
 worker_thread+0x665/0x1080 kernel/workqueue.c:2436
 kthread+0x2e9/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306

Freed by task 3678:
 kasan_save_stack+0x1e/0x40 mm/kasan/common.c:38
 kasan_set_track+0x21/0x30 mm/kasan/common.c:45
 kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:370
 ____kasan_slab_free mm/kasan/common.c:366 [inline]
 ____kasan_slab_free+0x13d/0x180 mm/kasan/common.c:328
 kasan_slab_free include/linux/kasan.h:200 [inline]
 __cache_free mm/slab.c:3425 [inline]
 kfree+0x113/0x310 mm/slab.c:3796
 kref_put.isra.0+0x6f/0xa0 include/linux/kref.h:65
 em28xx_v4l2_init drivers/media/usb/em28xx/em28xx-video.c:2911 [inline]
 em28xx_v4l2_init.cold+0x263/0x329c drivers/media/usb/em28xx/em28xx-video.c:2520
 em28xx_init_extension+0x12f/0x1f0 drivers/media/usb/em28xx/em28xx-core.c:1126
 request_module_async+0x5d/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3415
 process_one_work+0x996/0x1610 kernel/workqueue.c:2289
 worker_thread+0x665/0x1080 kernel/workqueue.c:2436
 kthread+0x2e9/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306

The buggy address belongs to the object at ffff8880283d0000
 which belongs to the cache kmalloc-8k of size 8192
The buggy address is located 2104 bytes inside of
 8192-byte region [ffff8880283d0000, ffff8880283d2000)

The buggy address belongs to the physical page:
page:ffffea0000a0f400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x283d0
head:ffffea0000a0f400 order:2 compound_mapcount:0 compound_pincount:0
flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000010200 ffffea000052c508 ffffea0000956008 ffff888011840a00
raw: 0000000000000000 ffff8880283d0000 0000000100000001 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 2, migratetype Unmovable, gfp_mask 0x242040(__GFP_IO|__GFP_NOWARN|__GFP_COMP|__GFP_THISNODE), pid 3667, tgid 3667 (sh), ts 56421802016, free_ts 56421325577
 prep_new_page mm/page_alloc.c:2456 [inline]
 get_page_from_freelist+0x1290/0x3b70 mm/page_alloc.c:4198
 __alloc_pages+0x1c7/0x510 mm/page_alloc.c:5426
 __alloc_pages_node include/linux/gfp.h:587 [inline]
 kmem_getpages mm/slab.c:1363 [inline]
 cache_grow_begin+0x75/0x350 mm/slab.c:2569
 cache_alloc_refill+0x27f/0x380 mm/slab.c:2942
 ____cache_alloc mm/slab.c:3024 [inline]
 ____cache_alloc mm/slab.c:3007 [inline]
 __do_cache_alloc mm/slab.c:3253 [inline]
 slab_alloc mm/slab.c:3295 [inline]
 kmem_cache_alloc_trace+0x380/0x4a0 mm/slab.c:3567
 kmalloc include/linux/slab.h:600 [inline]
 kzalloc include/linux/slab.h:733 [inline]
 tomoyo_print_bprm security/tomoyo/audit.c:26 [inline]
 tomoyo_init_log+0xc86/0x1ed0 security/tomoyo/audit.c:264
 tomoyo_supervisor+0x34d/0xf00 security/tomoyo/common.c:2088
 tomoyo_audit_path_log security/tomoyo/file.c:168 [inline]
 tomoyo_execute_permission+0x37f/0x4a0 security/tomoyo/file.c:619
 tomoyo_find_next_domain+0x348/0x1f80 security/tomoyo/domain.c:752
 tomoyo_bprm_check_security security/tomoyo/tomoyo.c:101 [inline]
 tomoyo_bprm_check_security+0x121/0x1a0 security/tomoyo/tomoyo.c:91
 security_bprm_check+0x45/0xa0 security/security.c:867
 search_binary_handler fs/exec.c:1716 [inline]
 exec_binprm fs/exec.c:1769 [inline]
 bprm_execve fs/exec.c:1838 [inline]
 bprm_execve+0x732/0x1970 fs/exec.c:1800
 do_execveat_common+0x727/0x890 fs/exec.c:1943
 do_execve fs/exec.c:2017 [inline]
 __do_sys_execve fs/exec.c:2093 [inline]
 __se_sys_execve fs/exec.c:2088 [inline]
 __x64_sys_execve+0x8f/0xc0 fs/exec.c:2088
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
page last free stack trace:
 reset_page_owner include/linux/page_owner.h:24 [inline]
 free_pages_prepare mm/page_alloc.c:1371 [inline]
 free_pcp_prepare+0x549/0xd20 mm/page_alloc.c:1421
 free_unref_page_prepare mm/page_alloc.c:3343 [inline]
 free_unref_page+0x19/0x6a0 mm/page_alloc.c:3438
 __stack_depot_save+0x168/0x500 lib/stackdepot.c:450
 kasan_save_stack+0x2e/0x40 mm/kasan/common.c:39
 kasan_set_track mm/kasan/common.c:45 [inline]
 set_alloc_info mm/kasan/common.c:436 [inline]
 __kasan_slab_alloc+0x85/0xb0 mm/kasan/common.c:469
 kasan_slab_alloc include/linux/kasan.h:224 [inline]
 slab_post_alloc_hook mm/slab.h:750 [inline]
 slab_alloc mm/slab.c:3302 [inline]
 __kmem_cache_alloc_lru mm/slab.c:3479 [inline]
 kmem_cache_alloc+0x265/0x560 mm/slab.c:3499
 audit_buffer_alloc kernel/audit.c:1778 [inline]
 audit_log_start.part.0+0x25a/0x740 kernel/audit.c:1900
 audit_log_start+0x5f/0x90 kernel/audit.c:1856
 common_lsm_audit+0xcc/0x1e00 security/lsm_audit.c:460
 slow_avc_audit+0x16b/0x1f0 security/selinux/avc.c:796
 avc_audit security/selinux/include/avc.h:136 [inline]
 avc_has_perm+0x179/0x1b0 security/selinux/avc.c:1193
 selinux_bprm_creds_for_exec+0x84d/0xb40 security/selinux/hooks.c:2336
 security_bprm_creds_for_exec+0x40/0x90 security/security.c:855
 bprm_execve fs/exec.c:1834 [inline]
 bprm_execve+0x55c/0x1970 fs/exec.c:1800
 do_execveat_common+0x727/0x890 fs/exec.c:1943
 do_execve fs/exec.c:2017 [inline]
 __do_sys_execve fs/exec.c:2093 [inline]
 __se_sys_execve fs/exec.c:2088 [inline]
 __x64_sys_execve+0x8f/0xc0 fs/exec.c:2088

Memory state around the buggy address:
 ffff8880283d0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff8880283d0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff8880283d0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                        ^
 ffff8880283d0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff8880283d0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

Crashes (302):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Manager Title
2022/07/17 01:24 upstream 4a57a8400075 95cb00d1 .config console log report syz C ci-qemu-upstream KASAN: use-after-free Read in v4l2_fh_init
2022/04/04 06:07 upstream 09bb8856d4a7 79a2a8fc .config console log report syz C ci-qemu-upstream KASAN: use-after-free Read in v4l2_fh_init
2022/03/26 13:27 upstream cb7cbaae7fd9 89bc8608 .config console log report syz C ci-qemu-upstream KASAN: use-after-free Read in v4l2_fh_init
2022/03/21 16:48 upstream f443e374ae13 e2d91b1d .config console log report syz C ci-qemu-upstream KASAN: use-after-free Read in v4l2_fh_init
2022/03/14 21:38 upstream 09688c0166e7 9e8eaa75 .config console log report syz C ci-qemu-upstream KASAN: use-after-free Read in v4l2_fh_init
2022/03/07 15:07 upstream ffb217a13a2e 7bdd8b2c .config console log report syz C ci-qemu-upstream KASAN: use-after-free Read in v4l2_fh_init
2022/03/07 14:28 upstream ffb217a13a2e 7bdd8b2c .config console log report syz C ci-qemu-upstream KASAN: use-after-free Read in v4l2_fh_init
2021/07/29 09:59 upstream 4010a528219e 9a4781d4 .config console log report syz C ci-upstream-kasan-gce-selinux-root KASAN: use-after-free Read in v4l2_fh_init
2021/07/15 15:31 upstream 8096acd7442e b9a2f64e .config console log report syz C ci-upstream-kasan-gce-selinux-root KASAN: use-after-free Read in v4l2_fh_init
2021/06/09 20:21 upstream 368094df48e6 84fe5d96 .config console log report syz C ci-upstream-kasan-gce-root KASAN: use-after-free Read in v4l2_fh_init
2021/06/08 17:13 upstream 614124bea77e b718257f .config console log report syz C ci-upstream-kasan-gce-root KASAN: use-after-free Read in v4l2_fh_init
2021/05/31 17:54 upstream 8124c8a6b353 032639db .config console log report syz C ci-upstream-kasan-gce-root KASAN: use-after-free Read in v4l2_fh_init
2021/02/15 18:31 upstream f40ddce88593 98682e5e .config console log report syz C ci-upstream-kasan-gce-selinux-root KASAN: use-after-free Read in v4l2_fh_init
2021/02/03 18:54 upstream 3aaf0a27ffc2 624dad51 .config console log report syz C ci-upstream-kasan-gce-root KASAN: use-after-free Read in v4l2_fh_init
2021/01/30 22:28 upstream 0e9bcda5d286 fc9fd31e .config console log report syz C ci-upstream-kasan-gce KASAN: use-after-free Read in v4l2_fh_init
2021/07/09 16:27 linux-next 92510a7fd93c 281e815f .config console log report syz C ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Read in v4l2_fh_init
2021/07/05 22:42 linux-next a1f92694393a 55aa55c2 .config console log report syz C ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Read in v4l2_fh_init
2021/06/25 21:08 linux-next a1f92694393a ae6bf8dd .config console log report syz C ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Read in v4l2_fh_init
2021/03/31 00:14 linux-next 931294922e65 6a81331a .config console log report syz C ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Read in v4l2_fh_init
2020/11/21 13:42 upstream 27bba9c532a8 68068804 .config console log report syz C ci-upstream-kasan-gce
2021/01/05 15:27 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing ed054e4e95d6 a0234d98 .config console log report syz C ci2-upstream-usb
2020/12/24 19:12 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 3644e2d2dda7 c2c1d1dd .config console log report syz C ci2-upstream-usb
2020/12/18 23:23 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5e60366d56c6 04201c06 .config console log report syz C ci2-upstream-usb
2020/12/18 04:23 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5e60366d56c6 04201c06 .config console log report syz C ci2-upstream-usb
2020/12/12 00:14 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a256e24021bf bca53db9 .config console log report syz C ci2-upstream-usb
2020/10/11 01:46 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 93578a25d4e2 4a77ae0b .config console log report syz C ci2-upstream-usb
2020/06/19 18:48 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing f8f02d5c671f 123cf502 .config console log report syz C ci2-upstream-usb
2020/06/19 18:08 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing f8f02d5c671f 123cf502 .config console log report syz C ci2-upstream-usb
2020/05/30 04:33 https://github.com/google/kasan.git usb-fuzzer 2089c6ed5a17 954bd312 .config console log report syz C ci2-upstream-usb
2020/05/29 16:34 https://github.com/google/kasan.git usb-fuzzer d19c64b3d097 bed08304 .config console log report syz C ci2-upstream-usb
2020/05/28 22:17 https://github.com/google/kasan.git usb-fuzzer d19c64b3d097 c7192a2f .config console log report syz C ci2-upstream-usb
2020/05/18 20:58 https://github.com/google/kasan.git usb-fuzzer 806d8acc2890 24d91142 .config console log report syz C ci2-upstream-usb
2020/05/15 13:21 https://github.com/google/kasan.git usb-fuzzer 059e7e0ff26c d7f9fffa .config console log report syz C ci2-upstream-usb
2020/05/15 13:00 https://github.com/google/kasan.git usb-fuzzer 059e7e0ff26c d7f9fffa .config console log report syz C ci2-upstream-usb
2020/05/15 00:33 https://github.com/google/kasan.git usb-fuzzer 059e7e0ff26c 2d572622 .config console log report syz C ci2-upstream-usb
2020/05/14 23:33 https://github.com/google/kasan.git usb-fuzzer 059e7e0ff26c 2d572622 .config console log report syz C ci2-upstream-usb
2020/03/17 12:46 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 749688d2 .config console log report syz C ci2-upstream-usb
2020/03/17 09:15 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 749688d2 .config console log report syz C ci2-upstream-usb
2020/03/17 04:33 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 749688d2 .config console log report syz C ci2-upstream-usb
2020/03/06 17:24 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 7fb694ef .config console log report syz C ci2-upstream-usb
2020/03/06 14:44 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 7fb694ef .config console log report syz C ci2-upstream-usb
2020/02/27 04:41 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 251aabb7 .config console log report syz C ci2-upstream-usb
2020/02/26 23:07 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 251aabb7 .config console log report syz C ci2-upstream-usb
2020/02/25 08:17 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 59b57593 .config console log report syz C ci2-upstream-usb
2020/02/25 06:57 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 59b57593 .config console log report syz C ci2-upstream-usb
2019/04/18 23:02 https://github.com/google/kasan.git usb-fuzzer d34f9519daaa b0e8efcb .config console log report syz C ci2-upstream-usb
2022/03/15 11:55 upstream 09688c0166e7 9e8eaa75 .config console log report syz ci-qemu-upstream KASAN: use-after-free Read in v4l2_fh_init
2021/06/16 06:32 upstream 94f0b2d4a1d0 990d3cbe .config console log report syz ci-upstream-kasan-gce-root KASAN: use-after-free Read in v4l2_fh_init
2021/05/28 00:11 upstream d7c5303fbc8a 858ea628 .config console log report syz ci-upstream-kasan-gce-root KASAN: use-after-free Read in v4l2_fh_init
2021/01/06 15:16 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing ed054e4e95d6 fff20c29 .config console log report syz ci2-upstream-usb
2020/12/09 22:29 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8010622c86ca c090b4da .config console log report syz ci2-upstream-usb
2021/02/02 01:10 upstream 1048ba83fb1c e6b95f32 .config console log report syz C ci-upstream-kasan-gce KASAN: use-after-free Read in v4l2_fh_init
2021/10/06 02:38 upstream f6274b06e326 0a63fd36 .config console log report info ci-upstream-kasan-gce KASAN: use-after-free Read in v4l2_fh_init
2021/01/29 05:32 upstream e5ff2cb9cf67 7df34f59 .config console log report info ci-upstream-kasan-gce KASAN: use-after-free Read in v4l2_fh_init
2022/01/02 01:11 upstream 278218f6778b e1768e9c .config console log report info ci-upstream-kasan-gce-386 KASAN: use-after-free Read in v4l2_fh_init
2022/01/13 19:14 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 455e73a07f6e b8d780ab .config console log report info ci2-upstream-usb KASAN: use-after-free Read in v4l2_fh_init
2021/09/04 09:38 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 1b4f3dfb4792 d236a457 .config console log report info ci2-upstream-usb KASAN: use-after-free Read in v4l2_fh_init
2021/04/22 07:25 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 4b853c236c7b 2bc8999a .config console log report info ci2-upstream-usb KASAN: use-after-free Read in v4l2_fh_init
2021/03/30 11:50 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e5242861ec6a 6a81331a .config console log report info ci2-upstream-usb KASAN: use-after-free Read in v4l2_fh_init
2021/03/15 15:02 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing aa403f257e99 fdb2bb2c .config console log report info ci2-upstream-usb KASAN: use-after-free Read in v4l2_fh_init
2021/03/14 16:53 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 14b02f023c09 4a003785 .config console log report info ci2-upstream-usb KASAN: use-after-free Read in v4l2_fh_init
2021/03/05 07:40 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5e17812c22bc 9d751681 .config console log report info ci2-upstream-usb KASAN: use-after-free Read in v4l2_fh_init
2021/02/06 10:26 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 23e32a595e11 23a562df .config console log report info ci2-upstream-usb KASAN: use-after-free Read in v4l2_fh_init
2020/12/10 05:50 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8010622c86ca c090b4da .config console log report info ci2-upstream-usb
2020/11/27 04:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing ab37fa851c48 5018c946 .config console log report info ci2-upstream-usb
2020/11/26 21:25 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 7656ca71b0ba 2f1cec62 .config console log report info ci2-upstream-usb
2020/11/25 03:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 93c747ed00c1 e34b696c .config console log report info ci2-upstream-usb
2020/11/17 18:47 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 0fb2c41f992c bd2a760b .config console log report info ci2-upstream-usb
2020/11/15 02:41 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 56c62080d5b5 1bf9a662 .config console log report info ci2-upstream-usb
2020/11/11 23:30 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551225b cca87986 .config console log report info ci2-upstream-usb
2020/11/10 16:52 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551225b cca87986 .config console log report info ci2-upstream-usb
2020/11/03 15:17 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 35ad0d901eac cba33199 .config console log report info ci2-upstream-usb
2020/10/19 03:23 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 726eb70e0d34 fea47c01 .config console log report info ci2-upstream-usb
2020/10/17 20:09 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 726eb70e0d34 fea47c01 .config console log report info ci2-upstream-usb
2020/10/16 23:02 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 726eb70e0d34 6e262c73 .config console log report info ci2-upstream-usb
2020/10/16 20:40 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 726eb70e0d34 6e262c73 .config console log report info ci2-upstream-usb
2020/10/16 19:20 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 726eb70e0d34 6e262c73 .config console log report info ci2-upstream-usb
2020/10/15 01:38 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 93578a25d4e2 fc7735a2 .config console log report info ci2-upstream-usb
2020/10/14 23:53 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 93578a25d4e2 fc7735a2 .config console log report info ci2-upstream-usb
2020/10/14 00:16 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 93578a25d4e2 fc7735a2 .config console log report info ci2-upstream-usb
2020/10/12 07:53 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 93578a25d4e2 4a77ae0b .config console log report info ci2-upstream-usb
2020/10/12 04:09 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 93578a25d4e2 4a77ae0b .config console log report info ci2-upstream-usb
2020/10/11 14:03 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 93578a25d4e2 4a77ae0b .config console log report info ci2-upstream-usb
2020/10/10 22:53 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 93578a25d4e2 4a77ae0b .config console log report info ci2-upstream-usb
2020/10/10 18:03 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 93578a25d4e2 b74c49a6 .config console log report info ci2-upstream-usb
2020/10/10 04:27 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 6c8cf3695176 93817d89 .config console log report info ci2-upstream-usb
2020/10/09 20:12 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 6c8cf3695176 fa79ed2a .config console log report info ci2-upstream-usb
2020/10/09 01:01 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8dc4bd073663 92390980 .config console log report info ci2-upstream-usb
2020/10/08 18:29 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8dc4bd073663 92390980 .config console log report info ci2-upstream-usb
2020/10/08 12:22 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8dc4bd073663 92390980 .config console log report info ci2-upstream-usb
2020/08/20 12:43 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 28157b8c7d9a ed282a3a .config console log report ci2-upstream-usb
2020/08/19 16:19 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 28157b8c7d9a db787902 .config console log report ci2-upstream-usb
2020/08/19 14:49 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 28157b8c7d9a db787902 .config console log report ci2-upstream-usb
2020/08/13 21:45 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 449dc8c97089 ee7cb8b6 .config console log report ci2-upstream-usb
2020/08/10 13:08 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 449dc8c97089 7adc7b65 .config console log report ci2-upstream-usb
* Struck through repros no longer work on HEAD.