nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xe6 ===================================================== BUG: KMSAN: use-after-free in nci_rf_discover_ntf_packet net/nfc/nci/ntf.c:386 [inline] BUG: KMSAN: use-after-free in nci_ntf_packet+0x2b0b/0x42b0 net/nfc/nci/ntf.c:828 nci_rf_discover_ntf_packet net/nfc/nci/ntf.c:386 [inline] nci_ntf_packet+0x2b0b/0x42b0 net/nfc/nci/ntf.c:828 nci_rx_work+0x403/0x750 net/nfc/nci/core.c:1555 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xb9a/0x1d90 kernel/workqueue.c:3319 worker_thread+0xedf/0x1590 kernel/workqueue.c:3400 kthread+0xd5c/0xf00 kernel/kthread.c:464 ret_from_fork+0x71/0x90 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Uninit was created at: slab_free_hook mm/slub.c:2306 [inline] slab_free mm/slub.c:4642 [inline] kmem_cache_free+0x286/0xf00 mm/slub.c:4744 skb_kfree_head net/core/skbuff.c:1056 [inline] skb_free_head net/core/skbuff.c:1070 [inline] skb_release_data+0xe56/0x1110 net/core/skbuff.c:1097 skb_release_all net/core/skbuff.c:1162 [inline] __kfree_skb+0x6b/0x260 net/core/skbuff.c:1176 consume_skb+0x83/0x230 net/core/skbuff.c:1408 skb_free_datagram+0x1e/0x30 net/core/datagram.c:323 netlink_recvmsg+0xab9/0x1760 net/netlink/af_netlink.c:1961 sock_recvmsg_nosec net/socket.c:1017 [inline] sock_recvmsg+0x2dc/0x390 net/socket.c:1039 ____sys_recvmsg+0x193/0x610 net/socket.c:2786 ___sys_recvmsg+0x20b/0x850 net/socket.c:2828 __sys_recvmsg net/socket.c:2861 [inline] __do_sys_recvmsg net/socket.c:2867 [inline] __se_sys_recvmsg net/socket.c:2864 [inline] __x64_sys_recvmsg+0x20e/0x3d0 net/socket.c:2864 x64_sys_call+0x11ff/0x3db0 arch/x86/include/generated/asm/syscalls_64.h:48 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd9/0x1b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 0 UID: 0 PID: 4344 Comm: kworker/u8:25 Not tainted 6.15.0-rc7-syzkaller-g4a95bc121ccd #0 PREEMPT(undef) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: nfc2_nci_rx_wq nci_rx_work =====================================================