syzbot


KASAN: use-after-free Read in l2tp_session_queue_purge
Status: upstream: reported syz repro on 2019/10/22 15:22
Reported-by: syzbot+1b475c743d59e27bc4cc@syzkaller.appspotmail.com
First crash: 94d, last: 8d01h
similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
android-49 KASAN: use-after-free Read in l2tp_session_queue_purge C 12204 513d 288d 0/3 public: reported C repro on 2019/04/12 00:00
android-44 KASAN: use-after-free Read in l2tp_session_queue_purge C 3245 513d 288d 0/2 public: reported C repro on 2019/04/12 00:00

Sample crash report:

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro
ci2-linux-4-14 2020/01/17 09:00 linux-4.14.y c04fc6fa 997ccc67 .config log report syz
ci2-linux-4-14 2019/12/18 08:32 linux-4.14.y bfb9e5c0 997ccc67 .config log report syz
Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci2-linux-4-14 2019/11/02 20:32 linux-4.14.y ddef1e8e 997ccc67 .config log report syz davem@davemloft.net, gnault@redhat.com, gregkh@linuxfoundation.org, jchapman@katalix.com, jian.w.wen@oracle.com, linux-kernel@vger.kernel.org, lorenzo.bianconi@redhat.com, netdev@vger.kernel.org
ci2-linux-4-14 2019/10/28 07:14 linux-4.14.y b98aebd2 25bb509e .config log report syz davem@davemloft.net, gnault@redhat.com, gregkh@linuxfoundation.org, jchapman@katalix.com, jian.w.wen@oracle.com, linux-kernel@vger.kernel.org, lorenzo.bianconi@redhat.com, netdev@vger.kernel.org, sashal@kernel.org
ci2-linux-4-14 2019/10/22 14:21 linux-4.14.y b98aebd2 4ee855e7 .config log report davem@davemloft.net, gnault@redhat.com, gregkh@linuxfoundation.org, jchapman@katalix.com, jian.w.wen@oracle.com, linux-kernel@vger.kernel.org, lorenzo.bianconi@redhat.com, netdev@vger.kernel.org