syzbot


KASAN: use-after-free Read in nfc_llcp_find_local

Status: auto-obsoleted due to no activity on 2023/10/06 08:10
Subsystems: net nfc
[Documentation on labels]
Reported-by: syzbot+e7ac69e6a5d806180b40@syzkaller.appspotmail.com
First crash: 562d, last: 321d
Cause bisection: failed (error log, bisect log)
  
Fix bisection: fixed by (bisect log) [ignored commit]:
commit c899710fe7f9f24dd77135875f199359f7b8b774
Author: Joel Granados <joel.granados@gmail.com>
Date: Wed Aug 9 10:50:03 2023 +0000

  networking: Update to register_net_sysctl_sz

  
Discussions (7)
Title Replies (including bot) Last reply
[syzbot] Monthly nfc report (Aug 2023) 0 (1) 2023/08/07 07:27
[syzbot] Monthly nfc report (Jul 2023) 0 (1) 2023/07/05 13:10
[syzbot] Monthly nfc report (Jun 2023) 0 (1) 2023/06/06 23:17
[syzbot] Monthly nfc report (May 2023) 0 (1) 2023/05/04 12:45
[syzbot] Monthly nfc report 0 (1) 2023/04/03 11:13
[syzbot] Monthly io-uring report 9 (10) 2023/03/27 20:21
[syzbot] KASAN: use-after-free Read in nfc_llcp_find_local 0 (2) 2022/12/23 14:16
Last patch testing requests (6)
Created Duration User Patch Repo Result
2023/08/23 00:32 1h16m retest repro upstream OK log
2023/08/23 00:32 24m retest repro upstream OK log
2023/08/23 00:32 24m retest repro upstream OK log
2023/08/23 00:32 29m retest repro linux-next OK log
2023/08/21 21:16 29m retest repro upstream OK log
2023/02/08 08:46 0m mudongliangabcd@gmail.com patch upstream error OK
Fix bisection attempts (2)
Created Duration User Patch Repo Result
2023/10/05 18:23 7h46m bisect fix upstream job log (1)
2023/07/28 06:09 2h00m bisect fix upstream job log (0) log

Sample crash report:
==================================================================
BUG: KASAN: use-after-free in nfc_llcp_find_local+0xcf/0xe0 net/nfc/llcp_core.c:285
Read of size 8 at addr ffff88807b8d8000 by task syz-executor.5/4135

CPU: 1 PID: 4135 Comm: syz-executor.5 Not tainted 6.2.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106
 print_address_description mm/kasan/report.c:306 [inline]
 print_report+0x15e/0x45d mm/kasan/report.c:417
 kasan_report+0xbf/0x1f0 mm/kasan/report.c:517
 nfc_llcp_find_local+0xcf/0xe0 net/nfc/llcp_core.c:285
 nfc_llcp_unregister_device+0x1a/0x260 net/nfc/llcp_core.c:1610
 nfc_unregister_device+0x196/0x330 net/nfc/core.c:1179
 virtual_ncidev_close+0x52/0xb0 drivers/nfc/virtual_ncidev.c:163
 __fput+0x27c/0xa90 fs/file_table.c:320
 task_work_run+0x16f/0x270 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:171 [inline]
 exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296
 __do_fast_syscall_32+0x72/0xf0 arch/x86/entry/common.c:181
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 entry_SYSENTER_compat_after_hwframe+0x70/0x82
RIP: 0023:0xf7fbb549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f749fb10 EFLAGS: 00000286 ORIG_RAX: 0000000000000006
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 00000000f734d000 RDI: 0000000000142cef
RBP: 00000000f737c0c0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>

Allocated by task 4144:
 kasan_save_stack+0x22/0x40 mm/kasan/common.c:45
 kasan_set_track+0x25/0x30 mm/kasan/common.c:52
 ____kasan_kmalloc mm/kasan/common.c:371 [inline]
 ____kasan_kmalloc mm/kasan/common.c:330 [inline]
 __kasan_kmalloc+0xa5/0xb0 mm/kasan/common.c:380
 kmalloc include/linux/slab.h:580 [inline]
 kzalloc include/linux/slab.h:720 [inline]
 nfc_llcp_register_device+0x49/0x9e0 net/nfc/llcp_core.c:1566
 nfc_register_device+0x70/0x3b0 net/nfc/core.c:1124
 nci_register_device+0x7cb/0xb50 net/nfc/nci/core.c:1257
 virtual_ncidev_open+0x14f/0x230 drivers/nfc/virtual_ncidev.c:148
 misc_open+0x37a/0x4a0 drivers/char/misc.c:165
 chrdev_open+0x26a/0x770 fs/char_dev.c:414
 do_dentry_open+0x6cc/0x13f0 fs/open.c:882
 do_open fs/namei.c:3557 [inline]
 path_openat+0x1bbc/0x2a50 fs/namei.c:3714
 do_filp_open+0x1ba/0x410 fs/namei.c:3741
 do_sys_openat2+0x16d/0x4c0 fs/open.c:1310
 do_sys_open fs/open.c:1326 [inline]
 __do_compat_sys_openat fs/open.c:1386 [inline]
 __se_compat_sys_openat fs/open.c:1384 [inline]
 __ia32_compat_sys_openat+0x143/0x1f0 fs/open.c:1384
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0x65/0xf0 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Freed by task 4142:
 kasan_save_stack+0x22/0x40 mm/kasan/common.c:45
 kasan_set_track+0x25/0x30 mm/kasan/common.c:52
 kasan_save_free_info+0x2e/0x40 mm/kasan/generic.c:518
 ____kasan_slab_free mm/kasan/common.c:236 [inline]
 ____kasan_slab_free+0x160/0x1c0 mm/kasan/common.c:200
 kasan_slab_free include/linux/kasan.h:177 [inline]
 slab_free_hook mm/slub.c:1781 [inline]
 slab_free_freelist_hook+0x8b/0x1c0 mm/slub.c:1807
 slab_free mm/slub.c:3787 [inline]
 __kmem_cache_free+0xaf/0x3b0 mm/slub.c:3800
 local_release net/nfc/llcp_core.c:173 [inline]
 kref_put include/linux/kref.h:65 [inline]
 nfc_llcp_local_put net/nfc/llcp_core.c:181 [inline]
 nfc_llcp_local_put net/nfc/llcp_core.c:176 [inline]
 nfc_llcp_unregister_device+0x1ba/0x260 net/nfc/llcp_core.c:1619
 nfc_unregister_device+0x196/0x330 net/nfc/core.c:1179
 virtual_ncidev_close+0x52/0xb0 drivers/nfc/virtual_ncidev.c:163
 __fput+0x27c/0xa90 fs/file_table.c:320
 task_work_run+0x16f/0x270 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:171 [inline]
 exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296
 __do_fast_syscall_32+0x72/0xf0 arch/x86/entry/common.c:181
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Last potentially related work creation:
 kasan_save_stack+0x22/0x40 mm/kasan/common.c:45
 __kasan_record_aux_stack+0xbc/0xd0 mm/kasan/generic.c:488
 insert_work+0x48/0x350 kernel/workqueue.c:1358
 __queue_work+0x693/0x13b0 kernel/workqueue.c:1517
 queue_work_on+0xf2/0x110 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 schedule_work include/linux/workqueue.h:564 [inline]
 rfkill_register+0x67c/0xb00 net/rfkill/core.c:1090
 nfc_register_device+0x124/0x3b0 net/nfc/core.c:1132
 nci_register_device+0x7cb/0xb50 net/nfc/nci/core.c:1257
 virtual_ncidev_open+0x14f/0x230 drivers/nfc/virtual_ncidev.c:148
 misc_open+0x37a/0x4a0 drivers/char/misc.c:165
 chrdev_open+0x26a/0x770 fs/char_dev.c:414
 do_dentry_open+0x6cc/0x13f0 fs/open.c:882
 do_open fs/namei.c:3557 [inline]
 path_openat+0x1bbc/0x2a50 fs/namei.c:3714
 do_filp_open+0x1ba/0x410 fs/namei.c:3741
 do_sys_openat2+0x16d/0x4c0 fs/open.c:1310
 do_sys_open fs/open.c:1326 [inline]
 __do_compat_sys_openat fs/open.c:1386 [inline]
 __se_compat_sys_openat fs/open.c:1384 [inline]
 __ia32_compat_sys_openat+0x143/0x1f0 fs/open.c:1384
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0x65/0xf0 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Second to last potentially related work creation:
 kasan_save_stack+0x22/0x40 mm/kasan/common.c:45
 __kasan_record_aux_stack+0xbc/0xd0 mm/kasan/generic.c:488
 insert_work+0x48/0x350 kernel/workqueue.c:1358
 __queue_work+0x693/0x13b0 kernel/workqueue.c:1517
 queue_work_on+0xf2/0x110 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 schedule_work include/linux/workqueue.h:564 [inline]
 rfkill_register+0x67c/0xb00 net/rfkill/core.c:1090
 nfc_register_device+0x124/0x3b0 net/nfc/core.c:1132
 nci_register_device+0x7cb/0xb50 net/nfc/nci/core.c:1257
 virtual_ncidev_open+0x14f/0x230 drivers/nfc/virtual_ncidev.c:148
 misc_open+0x37a/0x4a0 drivers/char/misc.c:165
 chrdev_open+0x26a/0x770 fs/char_dev.c:414
 do_dentry_open+0x6cc/0x13f0 fs/open.c:882
 do_open fs/namei.c:3557 [inline]
 path_openat+0x1bbc/0x2a50 fs/namei.c:3714
 do_filp_open+0x1ba/0x410 fs/namei.c:3741
 do_sys_openat2+0x16d/0x4c0 fs/open.c:1310
 do_sys_open fs/open.c:1326 [inline]
 __do_compat_sys_openat fs/open.c:1386 [inline]
 __se_compat_sys_openat fs/open.c:1384 [inline]
 __ia32_compat_sys_openat+0x143/0x1f0 fs/open.c:1384
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0x65/0xf0 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

The buggy address belongs to the object at ffff88807b8d8000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 0 bytes inside of
 2048-byte region [ffff88807b8d8000, ffff88807b8d8800)

The buggy address belongs to the physical page:
page:ffffea0001ee3600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b8d8
head:ffffea0001ee3600 order:3 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0
anon flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000010200 ffff888012442000 0000000000000000 dead000000000001
raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5156, tgid 5156 (syz-executor.4), ts 878332182516, free_ts 878326092206
 prep_new_page mm/page_alloc.c:2531 [inline]
 get_page_from_freelist+0x119c/0x2ce0 mm/page_alloc.c:4283
 __alloc_pages+0x1cb/0x5b0 mm/page_alloc.c:5549
 alloc_pages+0x1aa/0x270 mm/mempolicy.c:2286
 alloc_slab_page mm/slub.c:1851 [inline]
 allocate_slab+0x25f/0x350 mm/slub.c:1998
 new_slab mm/slub.c:2051 [inline]
 ___slab_alloc+0xa91/0x1400 mm/slub.c:3193
 __slab_alloc.constprop.0+0x56/0xa0 mm/slub.c:3292
 __slab_alloc_node mm/slub.c:3345 [inline]
 slab_alloc_node mm/slub.c:3442 [inline]
 __kmem_cache_alloc_node+0x1a4/0x430 mm/slub.c:3491
 __do_kmalloc_node mm/slab_common.c:967 [inline]
 __kmalloc_node_track_caller+0x4b/0xc0 mm/slab_common.c:988
 kmalloc_reserve net/core/skbuff.c:492 [inline]
 pskb_expand_head+0x211/0x1110 net/core/skbuff.c:1899
 netlink_trim+0x1ea/0x240 net/netlink/af_netlink.c:1312
 netlink_broadcast+0x63/0xd90 net/netlink/af_netlink.c:1508
 nlmsg_multicast include/net/netlink.h:1082 [inline]
 nlmsg_notify+0x93/0x280 net/netlink/af_netlink.c:2607
 rtnl_notify net/core/rtnetlink.c:768 [inline]
 rtmsg_ifinfo_send net/core/rtnetlink.c:3973 [inline]
 rtmsg_ifinfo_event net/core/rtnetlink.c:3989 [inline]
 rtmsg_ifinfo_event net/core/rtnetlink.c:3976 [inline]
 rtmsg_ifinfo+0x19b/0x280 net/core/rtnetlink.c:3995
 __dev_notify_flags+0x240/0x2d0 net/core/dev.c:8565
 dev_change_flags+0x11b/0x170 net/core/dev.c:8607
 do_setlink+0x9f1/0x3bb0 net/core/rtnetlink.c:2827
page last free stack trace:
 reset_page_owner include/linux/page_owner.h:24 [inline]
 free_pages_prepare mm/page_alloc.c:1446 [inline]
 free_pcp_prepare+0x65c/0xc00 mm/page_alloc.c:1496
 free_unref_page_prepare mm/page_alloc.c:3369 [inline]
 free_unref_page+0x1d/0x490 mm/page_alloc.c:3464
 qlink_free mm/kasan/quarantine.c:168 [inline]
 qlist_free_all+0x6a/0x170 mm/kasan/quarantine.c:187
 kasan_quarantine_reduce+0x192/0x220 mm/kasan/quarantine.c:294
 __kasan_slab_alloc+0x66/0x90 mm/kasan/common.c:302
 kasan_slab_alloc include/linux/kasan.h:201 [inline]
 slab_post_alloc_hook mm/slab.h:761 [inline]
 slab_alloc_node mm/slub.c:3452 [inline]
 slab_alloc mm/slub.c:3460 [inline]
 __kmem_cache_alloc_lru mm/slub.c:3467 [inline]
 kmem_cache_alloc_lru+0x26d/0x760 mm/slub.c:3483
 alloc_inode_sb include/linux/fs.h:3116 [inline]
 sock_alloc_inode+0x27/0x1d0 net/socket.c:304
 alloc_inode+0x61/0x230 fs/inode.c:259
 new_inode_pseudo+0x17/0x80 fs/inode.c:1018
 sock_alloc+0x40/0x260 net/socket.c:627
 __sock_create+0xbd/0x790 net/socket.c:1479
 sock_create net/socket.c:1566 [inline]
 __sys_socket_create net/socket.c:1603 [inline]
 __sys_socket_create net/socket.c:1588 [inline]
 __sys_socket+0x133/0x250 net/socket.c:1636
 __do_compat_sys_socketcall+0x689/0x720 net/compat.c:447
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0x65/0xf0 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Memory state around the buggy address:
 ffff88807b8d7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88807b8d7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88807b8d8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff88807b8d8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88807b8d8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
----------------
Code disassembly (best guess):
   0:	03 74 c0 01          	add    0x1(%rax,%rax,8),%esi
   4:	10 05 03 74 b8 01    	adc    %al,0x1b87403(%rip)        # 0x1b8740d
   a:	10 06                	adc    %al,(%rsi)
   c:	03 74 b4 01          	add    0x1(%rsp,%rsi,4),%esi
  10:	10 07                	adc    %al,(%rdi)
  12:	03 74 b0 01          	add    0x1(%rax,%rsi,4),%esi
  16:	10 08                	adc    %cl,(%rax)
  18:	03 74 d8 01          	add    0x1(%rax,%rbx,8),%esi
  1c:	00 00                	add    %al,(%rax)
  1e:	00 00                	add    %al,(%rax)
  20:	00 51 52             	add    %dl,0x52(%rcx)
  23:	55                   	push   %rbp
  24:	89 e5                	mov    %esp,%ebp
  26:	0f 34                	sysenter
  28:	cd 80                	int    $0x80
* 2a:	5d                   	pop    %rbp <-- trapping instruction
  2b:	5a                   	pop    %rdx
  2c:	59                   	pop    %rcx
  2d:	c3                   	retq
  2e:	90                   	nop
  2f:	90                   	nop
  30:	90                   	nop
  31:	90                   	nop
  32:	8d b4 26 00 00 00 00 	lea    0x0(%rsi,%riz,1),%esi
  39:	8d b4 26 00 00 00 00 	lea    0x0(%rsi,%riz,1),%esi

Crashes (61):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/12/26 22:37 upstream 1b929c02afd3 9da18ae8 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 KASAN: use-after-free Read in nfc_llcp_find_local
2022/12/31 16:05 upstream c8451c141e07 ab32d508 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: use-after-free Read in nfc_llcp_find_local
2022/12/26 20:58 upstream 1b929c02afd3 9da18ae8 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: use-after-free Read in nfc_llcp_find_local
2022/12/23 14:16 upstream 8395ae05cb5a 9da18ae8 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: use-after-free Read in nfc_llcp_find_local
2023/01/24 14:42 upstream 7bf70dbb1882 7374c4e5 .config console log report syz ci-qemu-upstream-386 KASAN: use-after-free Read in nfc_llcp_find_local
2023/03/26 15:26 linux-next e5dbf24e8b9e fbf0499a .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in nfc_llcp_find_local
2022/12/26 13:10 upstream 1b929c02afd3 9da18ae8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: use-after-free Read in nfc_llcp_find_local
2022/12/25 04:19 upstream 72a85e2b0a1e 9da18ae8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: use-after-free Read in nfc_llcp_find_local
2023/01/29 02:33 upstream 5af6ce704936 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 KASAN: use-after-free Read in nfc_llcp_find_local
2023/01/15 01:35 upstream 97ec4d559d93 a63719e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 KASAN: use-after-free Read in nfc_llcp_find_local
2023/01/13 07:44 upstream d9fc1511728c 96166539 .config console log report info ci-qemu2-arm64 KASAN: use-after-free Read in nfc_llcp_find_local
2023/01/11 12:43 upstream 7dd4b804e080 1dac8c7a .config console log report info ci-upstream-kasan-gce-386 KASAN: use-after-free Read in nfc_llcp_find_local
2022/12/31 20:39 upstream e4cf7c25bae5 ab32d508 .config console log report info ci-qemu2-arm64 KASAN: use-after-free Read in nfc_llcp_find_local
2022/12/19 13:26 linux-next d650871875b2 05494336 .config console log report info ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Read in nfc_llcp_find_local
2022/12/12 16:05 linux-next 591cd61541b9 67be1ae7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Read in nfc_llcp_find_local
2022/11/30 08:21 linux-next 9e46a7996732 05dc7993 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Read in nfc_llcp_find_local
2022/11/29 11:02 linux-next 9e46a7996732 ca9683b8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: use-after-free Read in nfc_llcp_find_local
2023/06/22 22:23 upstream dad9774deaf1 79782afc .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/06/18 06:35 upstream 1b29d271614a f3921d4d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/06/11 15:17 upstream 022ce8862dff 7086cdb9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/06/10 10:31 upstream 64569520920a 7086cdb9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/06/07 02:15 upstream a4d7d7011219 a4ae4f42 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/05/26 10:31 upstream 9db898594c54 b40ef614 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/05/14 20:12 upstream bb7c241fae62 2b9ba477 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/04/28 15:12 upstream 33afd4b76393 70a605de .config console log report info ci-qemu-upstream KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/04/08 04:02 upstream aa318c48808c 71147e29 .config console log report info ci-qemu-upstream KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/03/26 08:46 upstream da8e7da11e4b fbf0499a .config console log report info ci-qemu-upstream general protection fault in nfc_llcp_find_local
2023/03/26 02:19 upstream 65aca32efdcb fbf0499a .config console log report info ci-qemu-upstream KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/03/04 10:29 upstream 0a3f9a6b0265 f8902b57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/03/01 05:48 upstream e492250d5252 95aee97a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/06/19 04:07 upstream 8c1f0c38b310 f3921d4d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/06/15 06:43 upstream b6dad5178cea 76decb82 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/06/09 16:55 upstream 33f2b5785a2b 9018a337 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64 KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/05/26 16:07 upstream 0d85b27b0cc6 1497c3f6 .config console log report info ci-qemu2-arm64 BUG: unable to handle kernel paging request in nfc_llcp_find_local
2023/05/25 14:42 upstream 933174ae28ba 51e154a0 .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel NULL pointer dereference in nfc_llcp_find_local
2023/05/20 00:12 upstream cbd6ac3837cd e0257275 .config console log report info ci-qemu2-arm64 KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/05/19 19:40 upstream cbd6ac3837cd e0257275 .config console log report info ci-qemu2-arm64 KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/04/18 22:19 upstream af67688dca57 d931e9f0 .config console log report info ci-qemu2-arm64 KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/04/17 14:06 upstream 6a8f57ae2eb0 c6ec7083 .config console log report info ci-qemu2-arm64 KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/04/12 08:48 upstream e62252bc55b6 1a1596b6 .config console log report info ci-qemu2-arm64 KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/04/05 18:38 upstream 99ddf2254feb 8b834965 .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel NULL pointer dereference in nfc_llcp_find_local
2023/03/12 00:22 upstream 81ff855485a3 5205ef30 .config console log report info ci-qemu2-arm64 KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/03/08 09:44 upstream 63355b9884b3 f6ef8c9d .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel NULL pointer dereference in nfc_llcp_find_local
2023/03/03 10:28 upstream 2eb29d59ddf0 f8902b57 .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel NULL pointer dereference in nfc_llcp_find_local
2023/03/01 18:48 upstream 1d2aea1bcf68 f8902b57 .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel NULL pointer dereference in nfc_llcp_find_local
2023/03/01 02:00 upstream e492250d5252 95aee97a .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel NULL pointer dereference in nfc_llcp_find_local
2023/02/26 17:14 upstream 2fcd07b7ccd5 e792ae78 .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel NULL pointer dereference in nfc_llcp_find_local
2023/02/23 18:38 upstream a5c95ca18a98 4359978e .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel NULL pointer dereference in nfc_llcp_find_local
2023/02/17 22:06 upstream ec35307e18ba d02e9a70 .config console log report info ci-qemu2-arm64 BUG: unable to handle kernel paging request in nfc_llcp_find_local
2023/02/14 05:37 upstream b408817d4884 93ae7e0a .config console log report info ci-qemu-upstream-386 general protection fault in nfc_llcp_find_local
2023/02/14 04:36 upstream 0983f6bf2bfc 93ae7e0a .config console log report info ci-qemu2-arm64 BUG: unable to handle kernel paging request in nfc_llcp_find_local
2023/02/04 21:09 upstream db27c22251e7 be607b78 .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel paging request in nfc_llcp_find_local
2023/02/02 05:33 upstream 9f266ccaa2f5 7374c4e5 .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel paging request in nfc_llcp_find_local
2023/02/01 10:36 upstream c0b67534c95c 7374c4e5 .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel NULL pointer dereference in nfc_llcp_find_local
2023/01/27 04:49 upstream 7c46948a6e9c 7374c4e5 .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel paging request in nfc_llcp_find_local
2023/01/16 02:52 upstream 5dc4c995db9e a63719e7 .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel NULL pointer dereference in nfc_llcp_find_local
2023/01/14 00:09 upstream d863f0539b52 529798b0 .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel paging request in nfc_llcp_find_local
2023/01/09 02:30 upstream e9ffbf16caa6 1dac8c7a .config console log report info ci-qemu2-arm32 BUG: unable to handle kernel NULL pointer dereference in nfc_llcp_find_local
2023/05/29 06:58 linux-next 715abedee4cd cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/05/06 21:50 linux-next 83e5775d7afd 90c93c40 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in nfc_llcp_find_local
2023/04/01 13:18 linux-next 4b0f4525dc4f f325deb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in nfc_llcp_find_local
* Struck through repros no longer work on HEAD.