syzbot


KASAN: slab-use-after-free Write in l2tp_session_delete

Status: fixed on 2024/08/14 03:44
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+c041b4ce3a6dfd1e63e2@syzkaller.appspotmail.com
Fix commit: f8ad00f3fb2a l2tp: fix possible UAF when cleaning up tunnels
First crash: 141d, last: 117d
Cause bisection: introduced by (bisect log) :
commit d18d3f0a24fc4a3513495892ab1a3753628b341b
Author: James Chapman <jchapman@katalix.com>
Date: Thu Jun 20 11:22:44 2024 +0000

  l2tp: replace hlist with simple list for per-tunnel session list

Crash: KASAN: slab-use-after-free Write in l2tp_session_delete (log)
Repro: C syz .config
  
Discussions (4)
Title Replies (including bot) Last reply
[syzbot] [net?] KASAN: slab-use-after-free Write in l2tp_session_delete 15 (26) 2024/07/10 13:20
[PATCH net-next v2] l2tp: fix possible UAF when cleaning up tunnels 8 (8) 2024/07/09 09:40
[PATCH net-next] l2tp: fix possible UAF when cleaning up tunnels 1 (1) 2024/07/03 18:51
[syzbot] [net?] KASAN: slab-use-after-free Read in l2tp_tunnel_del_work 2 (6) 2024/07/02 22:51
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-10 KASAN: use-after-free Write in l2tp_session_delete 2 18d 42d 0/2 premoderation: reported on 2024/09/28 01:24
linux-6.1 KASAN: use-after-free Write in l2tp_session_delete 2 50d 72d 0/3 upstream: reported on 2024/08/29 01:02
android-5-15 KASAN: use-after-free Write in l2tp_session_delete 2 135d 148d 0/2 auto-obsoleted due to no activity on 2024/09/25 05:09
linux-5.15 KASAN: use-after-free Write in l2tp_session_delete 2 467d 556d 0/3 auto-obsoleted due to no activity on 2023/11/08 00:22
linux-5.15 KASAN: use-after-free Write in l2tp_session_delete (2) 1 50d 50d 0/3 upstream: reported on 2024/09/19 22:43
android-6-1 KASAN: use-after-free Write in l2tp_session_delete 3 25d 32d 0/2 premoderation: reported on 2024/10/08 10:15
Last patch testing requests (10)
Created Duration User Patch Repo Result
2024/07/10 12:55 24m hdanton@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git 185d72112b95 OK log
2024/07/10 10:47 24m hdanton@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git 185d72112b95 OK log
2024/07/03 16:37 24m tparkin@katalix.com patch https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git 185d72112b95 OK log
2024/07/03 12:07 15m tparkin@katalix.com patch https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git 185d72112b95 error
2024/07/03 11:24 3m tparkin@katalix.com patch https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git 185d72112b95 error
2024/07/03 09:46 0m tparkin@katalix.com patch https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git 185d72112b95 error
2024/06/27 12:52 15m eadavis@qq.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 185d72112b95 report log
2024/06/27 12:46 2m eadavis@qq.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git f76698bd9a8c error
2024/06/27 12:05 23m hdanton@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git 185d72112b95 OK log
2024/06/27 11:31 20m hdanton@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git 185d72112b95 report log
Cause bisection attempts (2)
Created Duration User Patch Repo Result
2024/07/02 01:46 8h04m bisect net-next OK (1) job log log
2024/06/23 21:34 9h39m bisect net-next OK (1) job log log
marked invalid by edumazet@google.com

Sample crash report:
==================================================================
BUG: KASAN: slab-use-after-free in instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
BUG: KASAN: slab-use-after-free in test_and_set_bit include/asm-generic/bitops/instrumented-atomic.h:71 [inline]
BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0 net/l2tp/l2tp_core.c:1638
Write of size 8 at addr ffff888020eaf008 by task kworker/u8:9/2819

CPU: 0 PID: 2819 Comm: kworker/u8:9 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Workqueue: l2tp l2tp_tunnel_del_work
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114
 print_address_description mm/kasan/report.c:377 [inline]
 print_report+0x169/0x550 mm/kasan/report.c:488
 kasan_report+0x143/0x180 mm/kasan/report.c:601
 kasan_check_range+0x282/0x290 mm/kasan/generic.c:189
 instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
 test_and_set_bit include/asm-generic/bitops/instrumented-atomic.h:71 [inline]
 l2tp_session_delete+0x28/0x9e0 net/l2tp/l2tp_core.c:1638
 l2tp_tunnel_closeall net/l2tp/l2tp_core.c:1301 [inline]
 l2tp_tunnel_del_work+0x1cb/0x330 net/l2tp/l2tp_core.c:1333
 process_one_work kernel/workqueue.c:3248 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329
 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

Allocated by task 5089:
 kasan_save_stack mm/kasan/common.c:47 [inline]
 kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:370 [inline]
 __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:387
 kasan_kmalloc include/linux/kasan.h:211 [inline]
 __do_kmalloc_node mm/slub.c:4123 [inline]
 __kmalloc_noprof+0x1f9/0x400 mm/slub.c:4136
 kmalloc_noprof include/linux/slab.h:664 [inline]
 kzalloc_noprof include/linux/slab.h:778 [inline]
 l2tp_session_create+0x3b/0xc20 net/l2tp/l2tp_core.c:1674
 pppol2tp_connect+0xca3/0x17a0 net/l2tp/l2tp_ppp.c:782
 __sys_connect_file net/socket.c:2049 [inline]
 __sys_connect+0x2df/0x310 net/socket.c:2066
 __do_sys_connect net/socket.c:2076 [inline]
 __se_sys_connect net/socket.c:2073 [inline]
 __x64_sys_connect+0x7a/0x90 net/socket.c:2073
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 0:
 kasan_save_stack mm/kasan/common.c:47 [inline]
 kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579
 poison_slab_object+0xe0/0x150 mm/kasan/common.c:240
 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256
 kasan_slab_free include/linux/kasan.h:184 [inline]
 slab_free_hook mm/slub.c:2196 [inline]
 slab_free mm/slub.c:4438 [inline]
 kfree+0x149/0x360 mm/slub.c:4559
 __sk_destruct+0x58/0x5f0 net/core/sock.c:2191
 rcu_do_batch kernel/rcu/tree.c:2535 [inline]
 rcu_core+0xafd/0x1830 kernel/rcu/tree.c:2809
 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702

Last potentially related work creation:
 kasan_save_stack+0x3f/0x60 mm/kasan/common.c:47
 __kasan_record_aux_stack+0xac/0xc0 mm/kasan/generic.c:541
 __call_rcu_common kernel/rcu/tree.c:3072 [inline]
 call_rcu+0x167/0xa70 kernel/rcu/tree.c:3176
 pppol2tp_release+0x24b/0x350 net/l2tp/l2tp_ppp.c:457
 __sock_release net/socket.c:659 [inline]
 sock_close+0xbc/0x240 net/socket.c:1421
 __fput+0x24a/0x8a0 fs/file_table.c:422
 task_work_run+0x24f/0x310 kernel/task_work.c:180
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0xa27/0x27e0 kernel/exit.c:876
 do_group_exit+0x207/0x2c0 kernel/exit.c:1025
 __do_sys_exit_group kernel/exit.c:1036 [inline]
 __se_sys_exit_group kernel/exit.c:1034 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1034
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff888020eaf000
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 8 bytes inside of
 freed 1024-byte region [ffff888020eaf000, ffff888020eaf400)

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20ea8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: 0xffffefff(slab)
raw: 00fff00000000040 ffff888015041dc0 ffffea000064a600 dead000000000002
raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
head: 00fff00000000040 ffff888015041dc0 ffffea000064a600 dead000000000002
head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
head: 00fff00000000003 ffffea000083aa01 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7134349227, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1473
 prep_new_page mm/page_alloc.c:1481 [inline]
 get_page_from_freelist+0x2e4c/0x2f10 mm/page_alloc.c:3425
 __alloc_pages_noprof+0x256/0x6c0 mm/page_alloc.c:4683
 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline]
 alloc_pages_node_noprof include/linux/gfp.h:296 [inline]
 alloc_slab_page+0x5f/0x120 mm/slub.c:2265
 allocate_slab+0x5a/0x2f0 mm/slub.c:2428
 new_slab mm/slub.c:2481 [inline]
 ___slab_alloc+0xcd1/0x14b0 mm/slub.c:3667
 __slab_alloc+0x58/0xa0 mm/slub.c:3757
 __slab_alloc_node mm/slub.c:3810 [inline]
 slab_alloc_node mm/slub.c:3990 [inline]
 __do_kmalloc_node mm/slub.c:4122 [inline]
 __kmalloc_noprof+0x257/0x400 mm/slub.c:4136
 kmalloc_noprof include/linux/slab.h:664 [inline]
 kzalloc_noprof include/linux/slab.h:778 [inline]
 alloc_workqueue+0x1b0/0x2060 kernel/workqueue.c:5686
 nbd_dev_add+0x5b2/0xc80 drivers/block/nbd.c:1855
 nbd_init+0x210/0x2c0 drivers/block/nbd.c:2589
 do_one_initcall+0x248/0x880 init/main.c:1267
 do_initcall_level+0x157/0x210 init/main.c:1329
 do_initcalls+0x3f/0x80 init/main.c:1345
 kernel_init_freeable+0x435/0x5d0 init/main.c:1578
 kernel_init+0x1d/0x2b0 init/main.c:1467
page_owner free stack trace missing

Memory state around the buggy address:
 ffff888020eaef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888020eaef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888020eaf000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                      ^
 ffff888020eaf080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888020eaf100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

Crashes (1286):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/06 15:40 net-next 2f5e6395714d bc4ebbb5 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/22 20:37 net-next 185d72112b95 edc5149a .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/24 12:36 linux-next f76698bd9a8c edc5149a .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/30 07:22 net-next 30972a4ea092 757f06b1 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/29 04:21 net-next 748e3bbf4721 757f06b1 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/26 23:47 net-next a6a6a9809411 880c1ca1 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/25 17:21 net-next 73cfd947dbdb da0bd5ca .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/24 00:22 net-next 84562f9953ec edc5149a .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/23 05:33 net-next 185d72112b95 edc5149a .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/23 01:58 net-next 185d72112b95 edc5149a .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/22 19:24 net-next 185d72112b95 edc5149a .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/22 09:19 net-next 3226607302ca edc5149a .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/22 04:21 net-next 3226607302ca edc5149a .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/22 04:07 net-next 3226607302ca edc5149a .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/21 19:48 net-next b0d3969d2b4d dac2aa43 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/21 18:25 net-next b0d3969d2b4d dac2aa43 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/21 17:51 net-next b0d3969d2b4d dac2aa43 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/21 16:51 net-next b0d3969d2b4d dac2aa43 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/21 15:21 net-next b0d3969d2b4d dac2aa43 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/21 15:20 net-next b0d3969d2b4d dac2aa43 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/24 12:38 linux-next f76698bd9a8c edc5149a .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/06/28 01:47 net-next cce346d44139 b62c7d46 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Read in l2tp_session_delete
2024/07/15 02:19 upstream 0c3836482481 eaeb5c15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 12:29 net-next e0ee68a8bef9 bc23a442 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 11:03 net-next e0ee68a8bef9 bc23a442 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 09:33 net-next e0ee68a8bef9 bc23a442 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 08:19 net-next e0ee68a8bef9 bc23a442 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 06:45 net-next e0ee68a8bef9 bc23a442 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 05:54 net-next e0ee68a8bef9 bc23a442 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 04:46 net-next e0ee68a8bef9 bc23a442 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 03:20 net-next e0ee68a8bef9 bc23a442 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 00:12 net-next 3abbd7ed8b76 cde64f7d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 22:46 net-next 3abbd7ed8b76 cde64f7d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 18:57 net-next 3abbd7ed8b76 cde64f7d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 17:56 net-next 3abbd7ed8b76 cde64f7d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 16:42 net-next 3abbd7ed8b76 cde64f7d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 15:33 net-next 3abbd7ed8b76 cde64f7d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 13:07 net-next 3abbd7ed8b76 cde64f7d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 09:57 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 08:25 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 06:37 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 05:34 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 04:27 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 03:17 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 03:07 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 01:50 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 00:39 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/07 23:38 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/07 21:52 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/07 20:36 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/07 20:19 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/07 19:18 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/07 15:59 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/07 14:47 net-next 2f5e6395714d bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/10 10:12 linux-next 82d01fe6ee52 e7213be3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/10 10:12 linux-next 82d01fe6ee52 e7213be3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 19:14 linux-next 82d01fe6ee52 79d68ada .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 16:09 linux-next 82d01fe6ee52 79d68ada .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 14:35 linux-next 82d01fe6ee52 79d68ada .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 11:17 linux-next 82d01fe6ee52 bc23a442 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 02:17 linux-next 0b58e108042b bc23a442 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/09 02:17 linux-next 0b58e108042b bc23a442 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 20:46 linux-next 0b58e108042b cde64f7d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 12:05 linux-next 0b58e108042b cde64f7d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/08 10:50 linux-next 0b58e108042b cde64f7d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/07 18:07 linux-next 0b58e108042b bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in l2tp_session_delete
2024/07/01 23:53 net-next 1c5fc27bc48a b294e901 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce KFENCE: use-after-free in l2tp_session_delete
* Struck through repros no longer work on HEAD.