syzbot


Applied filters: Label=subsystems:nfc (drop)
Title Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
INFO: task hung in rfkill_global_led_trigger_worker (2) net nfc C error 1362 11d 613d 27/27 11d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
KMSAN: uninit-value in nci_ntf_packet (2) nfc net C 13 41d 54d 26/27 39d 068648aab72c nfc/nci: Add the inconsistency check between the input data length and count
KMSAN: uninit-value in nci_rx_work net nfc C 582 45d 201d 26/27 45d e4a87abf5885 nfc: nci: Fix uninit-value in nci_rx_work
KASAN: slab-out-of-bounds Read in nfc_llcp_setsockopt net nfc C error 5 96d 105d 26/27 58d 7a87441c9651 nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
KMSAN: uninit-value in nci_ntf_packet net nfc C 79 60d 201d 26/27 58d d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
KMSAN: uninit-value in nci_dev_up nfc net C 7 118d 177d 26/27 58d d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
memory leak in virtual_ncidev_write (2) net nfc C 2 213d 374d 26/27 116d bfb007aebe6b nfc: nci: free rx_data_reassembly skb on NCI device cleanup
KASAN: slab-use-after-free Read in nfc_alloc_send_skb net nfc C error 3 224d 254d 26/27 172d c95f919567d6 nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
memory leak in skb_copy (2) nfc net syz 3 254d 371d 25/27 182d 84d2db91f14a nfc: virtual_ncidev: Add variable to check if ndev is running
BUG: corrupted list in nfc_llcp_register_device nfc net C error 136 289d 577d 25/27 212d dfc7f7a988da net: nfc: llcp: Add lock when modifying device list
UBSAN: shift-out-of-bounds in nci_activate_target net nfc C done 6 290d 475d 25/27 212d 354a6e707e29 nfc: nci: assert requested protocol is valid
general protection fault in pn533_out_complete nfc C error 15 539d 553d 22/27 408d 484b7059796e nfc: pn533: initialize struct pn533_out_arg properly
memory leak in nfc_genl_se_io net nfc C 1 523d 519d 22/27 408d 25ff6f8a5a3b nfc: fix memory leak of se_io context in nfc_genl_se_io
INFO: task hung in port100_probe usb nfc C error inconclusive 10 865d 1124d 22/27 465d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
possible deadlock in nci_start_poll net nfc C error done 83 513d 613d 22/27 466d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
memory leak in virtual_ncidev_write net nfc C 1 611d 611d 22/27 512d 53270fb0fd77 NFC: nci: fix memory leak in nci_rx_data_packet()
possible deadlock in nci_set_local_general_bytes net nfc C 32 563d 614d 22/27 512d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
KASAN: use-after-free Read in port100_send_complete nfc usb C 1 869d 865d 22/27 512d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
possible deadlock in virtual_nci_close net nfc C done 939 513d 614d 22/27 512d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
possible deadlock in nci_close_device net nfc 2 592d 606d 22/27 512d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
WARNING in nci_send_cmd net nfc C 13 599d 612d 22/27 512d 0ad6bded175e nfc/nci: fix race with opening and closing
WARNING in nci_add_new_protocol net nfc 1 604d 600d 22/27 512d e329e71013c9 NFC: nci: Bounds check struct nfc_target arrays
general protection fault in nfc_alloc_send_skb net nfc C done 2 932d 927d 20/27 865d dded08927ca3 nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
KASAN: use-after-free Read in nfc_llcp_put_ssap net nfc syz done 4 1169d 1176d 20/27 983d c61760e6940d net/nfc: fix use-after-free llcp_sock_bind/connect
WARNING in port100_send_cmd_async/usb_submit_urb usb nfc C 83 1696d 1837d 15/27 1683d 5f9f0b11f081 nfc: port100: handle command failure cleanly
KASAN: use-after-free Read in pn533_send_complete nfc usb C 4 1727d 1748d 13/27 1720d 6af3aa57a098 NFC: pn533: fix use-after-free and memleaks
INFO: rcu detected stall in vprintk_emit net nfc syz 2 2210d 2216d 8/27 2174d 3bc53be9db21 net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL.