syzbot


KASAN: use-after-free Read in l2tp_session_queue_purge
Status: upstream: reported syz repro on 2019/10/22 15:22
Reported-by: syzbot+1b475c743d59e27bc4cc@syzkaller.appspotmail.com
First crash: 695d, last: 456d

Fix bisection: the fix commit could be any of (bisect log):
  01364dad1d45 Linux 4.14.174
  56dfe6252c68 Linux 4.14.188
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 KASAN: use-after-free Read in l2tp_session_queue_purge C 12204 1113d 888d 0/3 public: reported C repro on 2019/04/12 00:00
android-44 KASAN: use-after-free Read in l2tp_session_queue_purge C 3245 1113d 888d 0/2 public: reported C repro on 2019/04/12 00:00

Sample crash report:

Crashes (8):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-14 2020/03/24 03:10 linux-4.14.y 01364dad1d45 84f999d6 .config log report syz
ci2-linux-4-14 2020/03/11 14:31 linux-4.14.y 78d697fc93f9 e103bc9e .config log report syz
ci2-linux-4-14 2020/03/05 00:53 linux-4.14.y 78d697fc93f9 576fb9bc .config log report syz
ci2-linux-4-14 2020/03/04 06:58 linux-4.14.y 78d697fc93f9 1f73b64b .config log report syz
ci2-linux-4-14 2019/11/02 20:32 linux-4.14.y ddef1e8e3f6e 997ccc67 .config log report syz
ci2-linux-4-14 2019/10/28 07:14 linux-4.14.y b98aebd29824 25bb509e .config log report syz
ci2-linux-4-14 2020/04/18 09:25 linux-4.14.y c10b57a567e4 435c6d53 .config log report
ci2-linux-4-14 2019/10/22 14:21 linux-4.14.y b98aebd29824 4ee855e7 .config log report