syzbot


Applied filters: Label=subsystems:nfc (drop)
Title Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
INFO: task hung in rfkill_global_led_trigger_worker (2) net nfc C error 1362 305d 907d 26/28 305d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
KMSAN: uninit-value in nci_ntf_packet (2) nfc net C 13 336d 349d 25/28 334d 068648aab72c nfc/nci: Add the inconsistency check between the input data length and count
KMSAN: uninit-value in nci_rx_work net nfc C 582 339d 495d 25/28 339d e4a87abf5885 nfc: nci: Fix uninit-value in nci_rx_work
KASAN: slab-out-of-bounds Read in nfc_llcp_setsockopt net nfc C error 5 390d 399d 25/28 353d 7a87441c9651 nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
KMSAN: uninit-value in nci_ntf_packet net nfc C 79 354d 495d 25/28 353d d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
KMSAN: uninit-value in nci_dev_up nfc net C 7 412d 471d 25/28 353d d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
memory leak in virtual_ncidev_write (2) net nfc C 2 508d 668d 25/28 410d bfb007aebe6b nfc: nci: free rx_data_reassembly skb on NCI device cleanup
KASAN: slab-use-after-free Read in nfc_alloc_send_skb net nfc C error 3 519d 548d 25/28 466d c95f919567d6 nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
memory leak in skb_copy (2) nfc net syz 3 548d 666d 25/28 476d 84d2db91f14a nfc: virtual_ncidev: Add variable to check if ndev is running
BUG: corrupted list in nfc_llcp_register_device nfc net C error 136 583d 871d 25/28 507d dfc7f7a988da net: nfc: llcp: Add lock when modifying device list
UBSAN: shift-out-of-bounds in nci_activate_target net nfc C done 6 585d 769d 25/28 507d 354a6e707e29 nfc: nci: assert requested protocol is valid
general protection fault in pn533_out_complete nfc C error 15 833d 847d 22/28 702d 484b7059796e nfc: pn533: initialize struct pn533_out_arg properly
memory leak in nfc_genl_se_io net nfc C 1 817d 813d 22/28 702d 25ff6f8a5a3b nfc: fix memory leak of se_io context in nfc_genl_se_io
INFO: task hung in port100_probe usb nfc C error inconclusive 10 1160d 1418d 22/28 759d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
possible deadlock in nci_start_poll net nfc C error done 83 807d 908d 22/28 760d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
memory leak in virtual_ncidev_write net nfc C 1 905d 905d 22/28 806d 53270fb0fd77 NFC: nci: fix memory leak in nci_rx_data_packet()
possible deadlock in nci_set_local_general_bytes net nfc C 32 857d 908d 22/28 806d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
KASAN: use-after-free Read in port100_send_complete nfc usb C 1 1163d 1159d 22/28 806d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
possible deadlock in virtual_nci_close net nfc C done 939 807d 909d 22/28 806d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
possible deadlock in nci_close_device net nfc 2 886d 900d 22/28 806d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
WARNING in nci_send_cmd net nfc C 13 893d 906d 22/28 806d 0ad6bded175e nfc/nci: fix race with opening and closing
WARNING in nci_add_new_protocol net nfc 1 899d 895d 22/28 806d e329e71013c9 NFC: nci: Bounds check struct nfc_target arrays
general protection fault in nfc_alloc_send_skb net nfc C done 2 1227d 1221d 20/28 1159d dded08927ca3 nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
KASAN: use-after-free Read in nfc_llcp_put_ssap net nfc syz done 4 1463d 1470d 20/28 1278d c61760e6940d net/nfc: fix use-after-free llcp_sock_bind/connect
WARNING in port100_send_cmd_async/usb_submit_urb usb nfc C 83 1990d 2131d 15/28 1978d 5f9f0b11f081 nfc: port100: handle command failure cleanly
KASAN: use-after-free Read in pn533_send_complete nfc usb C 4 2022d 2042d 13/28 2014d 6af3aa57a098 NFC: pn533: fix use-after-free and memleaks
INFO: rcu detected stall in vprintk_emit net nfc syz 2 2505d 2511d 8/28 2468d 3bc53be9db21 net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL.