syzbot


Applied filters: Label=subsystems:nfc (drop)
Title Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
INFO: task hung in rfkill_global_led_trigger_worker (2) net nfc C error 1299 1h39m 584d 21/27 never d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
KMSAN: uninit-value in nci_ntf_packet (2) nfc net C 13 13d 26d 26/27 11d 068648aab72c nfc/nci: Add the inconsistency check between the input data length and count
KMSAN: uninit-value in nci_rx_work net nfc C 582 17d 172d 26/27 16d e4a87abf5885 nfc: nci: Fix uninit-value in nci_rx_work
KASAN: slab-out-of-bounds Read in nfc_llcp_setsockopt net nfc C error 5 68d 76d 26/27 30d 7a87441c9651 nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
KMSAN: uninit-value in nci_ntf_packet net nfc C 79 32d 172d 26/27 30d d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
KMSAN: uninit-value in nci_dev_up nfc net C 7 89d 148d 26/27 30d d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
memory leak in virtual_ncidev_write (2) net nfc C 2 185d 346d 26/27 87d bfb007aebe6b nfc: nci: free rx_data_reassembly skb on NCI device cleanup
KASAN: slab-use-after-free Read in nfc_alloc_send_skb net nfc C error 3 196d 226d 26/27 143d c95f919567d6 nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
memory leak in skb_copy (2) nfc net syz 3 226d 343d 25/27 153d 84d2db91f14a nfc: virtual_ncidev: Add variable to check if ndev is running
BUG: corrupted list in nfc_llcp_register_device nfc net C error 136 260d 549d 25/27 184d dfc7f7a988da net: nfc: llcp: Add lock when modifying device list
UBSAN: shift-out-of-bounds in nci_activate_target net nfc C done 6 262d 446d 25/27 184d 354a6e707e29 nfc: nci: assert requested protocol is valid
general protection fault in pn533_out_complete nfc C error 15 510d 525d 22/27 379d 484b7059796e nfc: pn533: initialize struct pn533_out_arg properly
memory leak in nfc_genl_se_io net nfc C 1 494d 490d 22/27 379d 25ff6f8a5a3b nfc: fix memory leak of se_io context in nfc_genl_se_io
INFO: task hung in port100_probe usb nfc C error inconclusive 10 837d 1095d 22/27 436d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
possible deadlock in nci_start_poll net nfc C error done 83 484d 585d 22/27 437d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
memory leak in virtual_ncidev_write net nfc C 1 582d 582d 22/27 483d 53270fb0fd77 NFC: nci: fix memory leak in nci_rx_data_packet()
possible deadlock in nci_set_local_general_bytes net nfc C 32 534d 585d 22/27 483d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
KASAN: use-after-free Read in port100_send_complete nfc usb C 1 840d 836d 22/27 483d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
possible deadlock in virtual_nci_close net nfc C done 939 484d 586d 22/27 483d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
possible deadlock in nci_close_device net nfc 2 564d 578d 22/27 483d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
WARNING in nci_send_cmd net nfc C 13 570d 584d 22/27 483d 0ad6bded175e nfc/nci: fix race with opening and closing
WARNING in nci_add_new_protocol net nfc 1 576d 572d 22/27 483d e329e71013c9 NFC: nci: Bounds check struct nfc_target arrays
general protection fault in nfc_alloc_send_skb net nfc C done 2 904d 898d 20/27 836d dded08927ca3 nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
KASAN: use-after-free Read in nfc_llcp_put_ssap net nfc syz done 4 1140d 1148d 20/27 955d c61760e6940d net/nfc: fix use-after-free llcp_sock_bind/connect
WARNING in port100_send_cmd_async/usb_submit_urb usb nfc C 83 1668d 1809d 15/27 1655d 5f9f0b11f081 nfc: port100: handle command failure cleanly
KASAN: use-after-free Read in pn533_send_complete nfc usb C 4 1699d 1719d 13/27 1691d 6af3aa57a098 NFC: pn533: fix use-after-free and memleaks
INFO: rcu detected stall in vprintk_emit net nfc syz 2 2182d 2188d 8/27 2145d 3bc53be9db21 net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL.