syzbot


Applied filters: Label=subsystems:nfc (drop)
Title Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
INFO: task hung in rfkill_global_led_trigger_worker (2) net nfc C error 1362 307d 909d 26/28 307d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
KMSAN: uninit-value in nci_ntf_packet (2) nfc net C 13 337d 350d 25/28 335d 068648aab72c nfc/nci: Add the inconsistency check between the input data length and count
KMSAN: uninit-value in nci_rx_work net nfc C 582 341d 497d 25/28 341d e4a87abf5885 nfc: nci: Fix uninit-value in nci_rx_work
KASAN: slab-out-of-bounds Read in nfc_llcp_setsockopt net nfc C error 5 392d 401d 25/28 354d 7a87441c9651 nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
KMSAN: uninit-value in nci_ntf_packet net nfc C 79 356d 497d 25/28 354d d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
KMSAN: uninit-value in nci_dev_up nfc net C 7 414d 473d 25/28 354d d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
memory leak in virtual_ncidev_write (2) net nfc C 2 509d 670d 25/28 412d bfb007aebe6b nfc: nci: free rx_data_reassembly skb on NCI device cleanup
KASAN: slab-use-after-free Read in nfc_alloc_send_skb net nfc C error 3 520d 550d 25/28 468d c95f919567d6 nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
memory leak in skb_copy (2) nfc net syz 3 550d 667d 25/28 478d 84d2db91f14a nfc: virtual_ncidev: Add variable to check if ndev is running
BUG: corrupted list in nfc_llcp_register_device nfc net C error 136 585d 873d 25/28 508d dfc7f7a988da net: nfc: llcp: Add lock when modifying device list
UBSAN: shift-out-of-bounds in nci_activate_target net nfc C done 6 586d 771d 25/28 508d 354a6e707e29 nfc: nci: assert requested protocol is valid
general protection fault in pn533_out_complete nfc C error 15 835d 849d 22/28 704d 484b7059796e nfc: pn533: initialize struct pn533_out_arg properly
memory leak in nfc_genl_se_io net nfc C 1 819d 815d 22/28 704d 25ff6f8a5a3b nfc: fix memory leak of se_io context in nfc_genl_se_io
INFO: task hung in port100_probe usb nfc C error inconclusive 10 1161d 1420d 22/28 761d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
possible deadlock in nci_start_poll net nfc C error done 83 809d 909d 22/28 762d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
memory leak in virtual_ncidev_write net nfc C 1 907d 907d 22/28 808d 53270fb0fd77 NFC: nci: fix memory leak in nci_rx_data_packet()
possible deadlock in nci_set_local_general_bytes net nfc C 32 859d 910d 22/28 808d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
KASAN: use-after-free Read in port100_send_complete nfc usb C 1 1165d 1161d 22/28 808d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
possible deadlock in virtual_nci_close net nfc C done 939 809d 910d 22/28 808d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
possible deadlock in nci_close_device net nfc 2 888d 902d 22/28 808d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
WARNING in nci_send_cmd net nfc C 13 895d 908d 22/28 808d 0ad6bded175e nfc/nci: fix race with opening and closing
WARNING in nci_add_new_protocol net nfc 1 900d 896d 22/28 808d e329e71013c9 NFC: nci: Bounds check struct nfc_target arrays
general protection fault in nfc_alloc_send_skb net nfc C done 2 1229d 1223d 20/28 1161d dded08927ca3 nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
KASAN: use-after-free Read in nfc_llcp_put_ssap net nfc syz done 4 1465d 1472d 20/28 1279d c61760e6940d net/nfc: fix use-after-free llcp_sock_bind/connect
WARNING in port100_send_cmd_async/usb_submit_urb usb nfc C 83 1992d 2133d 15/28 1979d 5f9f0b11f081 nfc: port100: handle command failure cleanly
KASAN: use-after-free Read in pn533_send_complete nfc usb C 4 2023d 2044d 13/28 2016d 6af3aa57a098 NFC: pn533: fix use-after-free and memleaks
INFO: rcu detected stall in vprintk_emit net nfc syz 2 2506d 2512d 8/28 2470d 3bc53be9db21 net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL.