bisecting cause commit starting from eec4df26e24e978e49ccf9bcf49ca0f2ccdaeffe building syzkaller on 2e49f10dbbcec83bf0aa7651c827503e1faec44c testing commit eec4df26e24e978e49ccf9bcf49ca0f2ccdaeffe compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a21be5a14d00f59763768f0a12fc30c6e84bbd115aea9d2c6e67eb0037502bfd all runs: crashed: general protection fault in nfc_alloc_send_skb testing release v5.15 testing commit 8bb7eca972ad531c9b149c0a51ab43a417385813 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d8ba74965f9bd6dc3c6685d0a0f62baf4a1a789aaa00cc5a360a77cf7c0c07a2 all runs: crashed: general protection fault in nfc_alloc_send_skb testing release v5.14 testing commit 7d2a07b769330c34b4deabeed939325c77a7ec2f compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1938b55f609edd08ee6d5a0d940a96f1493727a7927e8db4af2ea6efbc3f92fc all runs: crashed: general protection fault in nfc_alloc_send_skb testing release v5.13 testing commit 62fb9874f5da54fdb243003b386128037319b219 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 89b242d64383ffc9c6788068c1e340b4dadb33a95d836df0e06a03fe57a68b63 all runs: crashed: general protection fault in nfc_alloc_send_skb testing release v5.12 testing commit 9f4ad9e425a1d3b6a34617b8ea226d56a119a717 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 619720946041b846d22851e23826da473fa151566ac717b83f74ce6be6a0c28a run #0: crashed: WARNING: refcount bug in nfc_llcp_local_put run #1: crashed: WARNING: refcount bug in nfc_llcp_local_put run #2: crashed: WARNING: refcount bug in nfc_llcp_local_put run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK reproducer seems to be flaky testing release v5.11 testing commit f40ddce88593482919761f74910f42f4b84c004b compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f8effe1e9c4fedbf432035abfe79c67bb638c5ba7ec6e8efb6b18e05a972202e all runs: OK # git bisect start 9f4ad9e425a1d3b6a34617b8ea226d56a119a717 f40ddce88593482919761f74910f42f4b84c004b Bisecting: 6798 revisions left to test after this (roughly 13 steps) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [d99676af540c2dc829999928fb81c58c80a1dce4] Merge tag 'drm-next-2021-02-19' of git://anongit.freedesktop.org/drm/drm testing commit d99676af540c2dc829999928fb81c58c80a1dce4 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2f39dad3fd286c6ff7c6443136ad3cfdff7ded841303a31c7cd9fc53a96f8abe run #0: basic kernel testing failed: WARNING in kvm_wait run #1: basic kernel testing failed: WARNING in kvm_wait run #2: basic kernel testing failed: WARNING in kvm_wait run #3: basic kernel testing failed: WARNING in kvm_wait run #4: basic kernel testing failed: WARNING in kvm_wait run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: boot failed: WARNING in kvm_wait run #12: boot failed: WARNING in kvm_wait run #13: boot failed: WARNING in kvm_wait run #14: boot failed: WARNING in kvm_wait run #15: boot failed: WARNING in kvm_wait run #16: boot failed: WARNING in kvm_wait run #17: boot failed: WARNING in kvm_wait run #18: boot failed: WARNING in kvm_wait run #19: boot failed: WARNING in kvm_wait # git bisect skip d99676af540c2dc829999928fb81c58c80a1dce4 Bisecting: 6798 revisions left to test after this (roughly 13 steps) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [0256317a61514add6f3d0187e438ef527d7577b4] Merge tag 'mac80211-next-for-net-next-2021-02-02' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next testing commit 0256317a61514add6f3d0187e438ef527d7577b4 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 65029aa4935d279b8d227a5d1803691f36ab8839fe2467fff639fc76936cfe05 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect good 0256317a61514add6f3d0187e438ef527d7577b4 Bisecting: 6743 revisions left to test after this (roughly 13 steps) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [a2b095e0efa7229a1a88602283ba1a8a32004851] Merge tag 'tpmdd-next-v5.12-rc1-v2' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd testing commit a2b095e0efa7229a1a88602283ba1a8a32004851 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b73d8c1a02fbbd3ebafee0f04cf8045a87513192860804d3ef70bf0a8262b957 run #0: basic kernel testing failed: WARNING in kvm_wait run #1: basic kernel testing failed: WARNING in kvm_wait run #2: basic kernel testing failed: WARNING in kvm_wait run #3: basic kernel testing failed: WARNING in kvm_wait run #4: basic kernel testing failed: WARNING in kvm_wait run #5: basic kernel testing failed: WARNING in kvm_wait run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: boot failed: WARNING in kvm_wait run #13: boot failed: WARNING in kvm_wait run #14: boot failed: WARNING in kvm_wait run #15: boot failed: WARNING in kvm_wait run #16: boot failed: WARNING in kvm_wait run #17: boot failed: WARNING in kvm_wait run #18: boot failed: WARNING in kvm_wait run #19: boot failed: WARNING in kvm_wait # git bisect skip a2b095e0efa7229a1a88602283ba1a8a32004851 Bisecting: 6743 revisions left to test after this (roughly 13 steps) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [75b69799610c2b909a18e709c402923ea61aedc0] afs: Use wait_on_page_writeback_killable testing commit 75b69799610c2b909a18e709c402923ea61aedc0 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2377eaa83c66fc76948c65aad51b24344a9a67da0126a8c6122e6c63abf6f757 all runs: OK # git bisect good 75b69799610c2b909a18e709c402923ea61aedc0 Bisecting: 622 revisions left to test after this (roughly 9 steps) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [3a22981230f997846d1cfeb8eadcda8bcc0f7ea8] Merge tag 'arm-fixes-5.11-2' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc testing commit 3a22981230f997846d1cfeb8eadcda8bcc0f7ea8 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a261bb83833a93ace0f73db46ac342f2920b83e515e7d81be38d17ecd529de1a all runs: OK # git bisect good 3a22981230f997846d1cfeb8eadcda8bcc0f7ea8 Bisecting: 310 revisions left to test after this (roughly 8 steps) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [1fe976d308acb6374c899a4ee8025a0a016e453e] net: phy: marvell: fix detection of PHY on Topaz switches testing commit 1fe976d308acb6374c899a4ee8025a0a016e453e compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: db60c3947cd67226e4d72c0a3b64c52bdc9b3f4b2ae18b1b95ddeec845742c2c run #0: crashed: WARNING: refcount bug in nfc_llcp_local_put run #1: crashed: WARNING: refcount bug in nfc_llcp_local_put run #2: crashed: WARNING: refcount bug in nfc_llcp_local_put run #3: crashed: WARNING: refcount bug in nfc_llcp_local_put run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 1fe976d308acb6374c899a4ee8025a0a016e453e Bisecting: 163 revisions left to test after this (roughly 7 steps) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [107adc694558dd51c35fca07b025c2fe2168afb5] Merge tag 'wireless-drivers-2021-04-07' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers testing commit 107adc694558dd51c35fca07b025c2fe2168afb5 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b795215ecf52d89e6847b7247b27a06e9edbc8d42a2174aaacef3a0236b440ba run #0: crashed: WARNING: refcount bug in nfc_llcp_local_put run #1: crashed: WARNING: refcount bug in nfc_llcp_local_put run #2: crashed: WARNING: refcount bug in nfc_llcp_local_put run #3: crashed: WARNING: refcount bug in nfc_llcp_local_put run #4: crashed: WARNING: refcount bug in nfc_llcp_local_put run #5: crashed: WARNING: refcount bug in nfc_llcp_local_put run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 107adc694558dd51c35fca07b025c2fe2168afb5 Bisecting: 69 revisions left to test after this (roughly 6 steps) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [9dc22c0d04a2f9734146e6f1e757160d78800e3c] Merge tag 'mlx5-fixes-2021-03-31' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux testing commit 9dc22c0d04a2f9734146e6f1e757160d78800e3c compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6602762613aeb1e9ce2aadf99e0d20a9bbf0d7bb8631a31b69c9dceca1b58b9a run #0: crashed: WARNING: refcount bug in nfc_llcp_local_put run #1: crashed: WARNING: refcount bug in nfc_llcp_local_put run #2: crashed: WARNING: refcount bug in nfc_llcp_local_put run #3: crashed: WARNING: refcount bug in nfc_llcp_local_put run #4: crashed: WARNING: refcount bug in nfc_llcp_local_put run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 9dc22c0d04a2f9734146e6f1e757160d78800e3c Bisecting: 42 revisions left to test after this (roughly 5 steps) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [4cd7bd599e273bb75804a406b50cd2c58c40e2e0] dt-bindings: net: bcm4908-enet: fix Ethernet generic properties testing commit 4cd7bd599e273bb75804a406b50cd2c58c40e2e0 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 218594251c2be6f9e2ae475b718686fd21923e0ec98284327d0292d4e42c37cc run #0: crashed: WARNING: refcount bug in nfc_llcp_local_put run #1: crashed: WARNING: refcount bug in nfc_llcp_local_put run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 4cd7bd599e273bb75804a406b50cd2c58c40e2e0 Bisecting: 15 revisions left to test after this (roughly 4 steps) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [75887e881b19c903d34b7cc33e7e6188679d9752] Merge branch '40GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/net-queue testing commit 75887e881b19c903d34b7cc33e7e6188679d9752 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 82bf9dfd69809ac11092830e6bd39f43724b35687a2826cdaea83dd9b8ff73ad run #0: crashed: WARNING: refcount bug in nfc_llcp_local_put run #1: crashed: WARNING: refcount bug in nfc_llcp_local_put run #2: crashed: WARNING: refcount bug in nfc_llcp_local_put run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 75887e881b19c903d34b7cc33e7e6188679d9752 Bisecting: 9 revisions left to test after this (roughly 3 steps) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [4b5db93e7f2afbdfe3b78e37879a85290187e6f1] nfc: Avoid endless loops caused by repeated llcp_sock_connect() testing commit 4b5db93e7f2afbdfe3b78e37879a85290187e6f1 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ecb97432625bbbf1aa832c86413735a3e29da11c1959534adff84895f3b1a740 run #0: crashed: WARNING: refcount bug in nfc_llcp_local_put run #1: crashed: WARNING: refcount bug in nfc_llcp_local_put run #2: crashed: WARNING: refcount bug in nfc_llcp_local_put run #3: crashed: WARNING: refcount bug in nfc_llcp_local_put run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 4b5db93e7f2afbdfe3b78e37879a85290187e6f1 Bisecting: 4 revisions left to test after this (roughly 2 steps) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [3e6fdeb28f4c331acbd27bdb0effc4befd4ef8e8] net: dsa: lantiq_gswip: Let GSWIP automatically set the xMII clock testing commit 3e6fdeb28f4c331acbd27bdb0effc4befd4ef8e8 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: cd8c7315aa016b265c6ee6742c9164c0c603d4c29bdea85a1532a06dffa7a68c all runs: OK # git bisect good 3e6fdeb28f4c331acbd27bdb0effc4befd4ef8e8 Bisecting: 1 revision left to test after this (roughly 1 step) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [8a4cd82d62b5ec7e5482333a72b58a4eea4979f0] nfc: fix refcount leak in llcp_sock_connect() testing commit 8a4cd82d62b5ec7e5482333a72b58a4eea4979f0 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 33ec01251bbddff10a01ec6895d63cea3ec3d908d18656b46e16964df65c939d run #0: crashed: WARNING: refcount bug in nfc_llcp_local_put run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 8a4cd82d62b5ec7e5482333a72b58a4eea4979f0 Bisecting: 0 revisions left to test after this (roughly 1 step) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [c33b1cc62ac05c1dbb1cdafe2eb66da01c76ca8d] nfc: fix refcount leak in llcp_sock_bind() testing commit c33b1cc62ac05c1dbb1cdafe2eb66da01c76ca8d compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: bd3272f1354bc9f2a196219058099d7f741e72f8cc9eb6b7429ce810ca773c46 run #0: crashed: WARNING: refcount bug in nfc_llcp_local_put run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad c33b1cc62ac05c1dbb1cdafe2eb66da01c76ca8d Bisecting: 0 revisions left to test after this (roughly 0 steps) warning: unable to access '/syzkaller/.config/git/ignore': Permission denied warning: unable to access '/syzkaller/.config/git/attributes': Permission denied [d75135082698140a26a56defe1bbc1b06f26a41f] amd-xgbe: Update DMA coherency values testing commit d75135082698140a26a56defe1bbc1b06f26a41f compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: cd8c7315aa016b265c6ee6742c9164c0c603d4c29bdea85a1532a06dffa7a68c all runs: OK # git bisect good d75135082698140a26a56defe1bbc1b06f26a41f warning: unable to access '/syzkaller/.config/git/attributes': Permission denied c33b1cc62ac05c1dbb1cdafe2eb66da01c76ca8d is the first bad commit commit c33b1cc62ac05c1dbb1cdafe2eb66da01c76ca8d Author: Xiaoming Ni Date: Thu Mar 25 11:51:10 2021 +0800 nfc: fix refcount leak in llcp_sock_bind() nfc_llcp_local_get() is invoked in llcp_sock_bind(), but nfc_llcp_local_put() is not invoked in subsequent failure branches. As a result, refcount leakage occurs. To fix it, add calling nfc_llcp_local_put(). fix CVE-2020-25670 Fixes: c7aa12252f51 ("NFC: Take a reference on the LLCP local pointer when creating a socket") Reported-by: "kiyin(尹亮)" Link: https://www.openwall.com/lists/oss-security/2020/11/01/1 Cc: #v3.6 Signed-off-by: Xiaoming Ni Signed-off-by: David S. Miller net/nfc/llcp_sock.c | 2 ++ 1 file changed, 2 insertions(+) culprit signature: bd3272f1354bc9f2a196219058099d7f741e72f8cc9eb6b7429ce810ca773c46 parent signature: cd8c7315aa016b265c6ee6742c9164c0c603d4c29bdea85a1532a06dffa7a68c Reproducer flagged being flaky revisions tested: 21, total time: 4h16m3.51599871s (build: 2h12m21.801373714s, test: 2h1m19.582088616s) first bad commit: c33b1cc62ac05c1dbb1cdafe2eb66da01c76ca8d nfc: fix refcount leak in llcp_sock_bind() recipients (to): ["davem@davemloft.net" "davem@davemloft.net" "kuba@kernel.org" "netdev@vger.kernel.org" "nixiaoming@huawei.com"] recipients (cc): ["linux-kernel@vger.kernel.org"] crash: WARNING: refcount bug in nfc_llcp_local_put ------------[ cut here ]------------ refcount_t: underflow; use-after-free. WARNING: CPU: 0 PID: 5900 at lib/refcount.c:28 refcount_warn_saturate+0x12b/0x140 lib/refcount.c:28 Modules linked in: CPU: 1 PID: 5900 Comm: syz-executor575 Not tainted 5.12.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:refcount_warn_saturate+0x12b/0x140 lib/refcount.c:28 Code: e5 87 04 0f 0b e9 53 ff ff ff 48 89 df e8 1d dc 29 fe e9 23 ff ff ff 48 c7 c7 c0 8e fd 88 c6 05 88 0f ca 08 01 e8 bc e5 87 04 <0f> 0b e9 2c ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 RSP: 0018:ffffc90001867af8 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff888146bb8018 RCX: 0000000000000000 RDX: 0000000000000001 RSI: ffffffff88fdcb40 RDI: fffff5200030cf51 RBP: 0000000000000003 R08: 0000000000000001 R09: ffff8880ba04c1a7 R10: ffffed1017409834 R11: 0000000000000001 R12: 0000000000000000 R13: ffff888146bb8018 R14: ffffffff8c3b1740 R15: ffff88803118d798 FS: 0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff333f8b158 CR3: 000000001db00000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __refcount_sub_and_test include/linux/refcount.h:283 [inline] __refcount_dec_and_test include/linux/refcount.h:315 [inline] refcount_dec_and_test include/linux/refcount.h:333 [inline] kref_put include/linux/kref.h:64 [inline] nfc_llcp_local_put net/nfc/llcp_core.c:183 [inline] nfc_llcp_local_put+0x155/0x1a0 net/nfc/llcp_core.c:178 llcp_sock_destruct+0x5b/0x110 net/nfc/llcp_sock.c:942 __sk_destruct+0x3f/0x730 net/core/sock.c:1795 skb_release_head_state+0x71/0x1a0 net/core/skbuff.c:712 skb_release_all net/core/skbuff.c:723 [inline] __kfree_skb net/core/skbuff.c:739 [inline] kfree_skb net/core/skbuff.c:757 [inline] kfree_skb+0xac/0x2c0 net/core/skbuff.c:751 skb_queue_purge+0xb/0x20 net/core/skbuff.c:3133 nfc_llcp_socket_release+0x2a/0x770 net/nfc/llcp_core.c:73 local_cleanup+0x10/0xb0 net/nfc/llcp_core.c:155 local_release net/nfc/llcp_core.c:174 [inline] kref_put include/linux/kref.h:65 [inline] nfc_llcp_local_put net/nfc/llcp_core.c:183 [inline] nfc_llcp_local_put+0x134/0x1a0 net/nfc/llcp_core.c:178 llcp_sock_destruct+0x5b/0x110 net/nfc/llcp_sock.c:942 __sk_destruct+0x3f/0x730 net/core/sock.c:1795 sock_put include/net/sock.h:1803 [inline] llcp_sock_release+0x2fd/0x4a0 net/nfc/llcp_sock.c:644 __sock_release+0xbb/0x270 net/socket.c:599 sock_close+0xf/0x20 net/socket.c:1258 __fput+0x209/0x870 fs/file_table.c:280 task_work_run+0xc0/0x160 kernel/task_work.c:140 exit_task_work include/linux/task_work.h:30 [inline] do_exit+0xa26/0x2500 kernel/exit.c:825 do_group_exit+0xe7/0x290 kernel/exit.c:922 __do_sys_exit_group kernel/exit.c:933 [inline] __se_sys_exit_group kernel/exit.c:931 [inline] __x64_sys_exit_group+0x35/0x40 kernel/exit.c:931 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7ff333f34b09 Code: Unable to access opcode bytes at RIP 0x7ff333f34adf. RSP: 002b:00007ffe22b4b848 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 00007ff333fbf390 RCX: 00007ff333f34b09 RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffffffffffffffb8 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff333fbf390 R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001