Applied filters: Label=subsystems:driver-core (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
general protection fault in bnep_session prio:high driver-core 7 syz error 1395 44d 705d 27/29 never 9b851b09b392 Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()
KASAN: slab-use-after-free Read in __dynamic_dev_dbg prio:normal driver-core media 19 syz, C 551 16h12m 43d 23/29 never 118a3590a408 media: imon: fix use-after-free in display_close via dev_dbg
KASAN: slab-use-after-free Read in sysfs_emit prio:high driver-core fs 19 syz, C 22 8d03h 84d 23/29 never af452b9e0133 media: redrat3: fix UAF in probe error path leaving rc device registered
general protection fault in seq_read_iter (2) prio:low fs driver-core 19 4 71d 175d 27/29 never net: add missing ref_tracker_dir_exit() to net_passive_dec()
INFO: task hung in remove_one prio:low fs driver-core 1 syz error 337 13h53m 661d 27/29 never b3217bdb0091 netdevsim: drop the ability to change max_vfs via debugfs
KASAN: slab-use-after-free Read in netdev_register_kobject (2) prio:high actionable driver-core 19 3 145d 150d 29/29 73d bb067a99a035 Bluetooth: bnep: pin L2CAP connection during netdev registration
KASAN: slab-use-after-free Read in debugfs_u32_get (2) prio:normal driver-core fs 19 syz 1 124d 134d 29/29 92d 2e996ca81f95 netdevsim: remove ethtool debugfs files before freeing netdev
possible deadlock in assign_fw driver-core 4 syz, C done 185 140d 844d 29/29 106d d3ec78f8f8d4 firmware_loader: Fix recursive lock in device_cache_fw_images()
KASAN: slab-use-after-free Read in rpm_suspend driver-core pm 19 3 316d 414d 29/29 161d 29ab76827761 PM: runtime: Fix a race condition related to device removal
memory leak in debugfs_change_name driver-core fs 3 syz, C 1 329d 325d 29/29 281d d412ff9e26eb debugfs: Fix memleak in debugfs_change_name().
KASAN: slab-use-after-free Read in driver_remove_file driver-core fs 19 syz, C error done 296 328d 457d 29/29 282d 72262330f7b3 comedi: c6xdigio: Fix invalid PNP driver unregistration
WARNING in driver_unregister (2) driver-core -1 syz, C error 3214 326d 481d 29/29 295d 72262330f7b3 comedi: c6xdigio: Fix invalid PNP driver unregistration
INFO: rcu detected stall in dummy_timer (4) usb driver-core 1 syz, C inconclusive done 25 412d 1573d 29/29 349d eecd203ada43 media: imon: make send_packet() more robust
possible deadlock in device_create driver-core 4 25 389d 421d 29/29 365d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
WARNING in sysfs_emit_at driver-core fs -1 syz, C 2 418d 414d 29/29 365d 9dfec4a51df9 USB: core: remove the move buf action
possible deadlock in path_openat (3) fs driver-core 4 1 424d 424d 29/29 365d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
INFO: task hung in uevent_show (2) driver-core 1 syz, C inconclusive 8325 481d 719d 29/29 469d dc1771f71854 Revert "drivers: core: synchronize really_probe() and dev_uevent()"
KASAN: slab-use-after-free Read in software_node_notify_remove acpi driver-core 19 syz, C done 28 549d 571d 28/29 506d bc2c46426f2d software node: Prevent link creation failure from causing kobj reference count imbalance
KASAN: use-after-free Read in netdev_unregister_kobject driver-core pm 19 syz, C error 6281 689d 920d 28/29 682d 27aabf27fd01 Bluetooth: fix use-after-free in device_for_each_child()
INFO: task hung in uevent_show usb driver-core 1 syz, C done 9704 808d 869d 28/29 737d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
WARNING: refcount bug in get_taint driver-core net 13 2 794d 819d 27/29 794d 2fe5273f149c net/smc: prevent UAF in inet_create()
INFO: rcu detected stall in rtnl_newlink (4) driver-core sctp fs 1 syz, C error 9 897d 973d 25/29 890d b1f532a3b1e6 batman-adv: Avoid infinite loop trying to resize local TT
KASAN: slab-use-after-free Read in __fput (2) fs driver-core 19 syz, C done 6 914d 919d 25/29 890d 4efaa5acf0a1 epoll: be better about file lifetimes
INFO: trying to register non-static key in debugfs_file_get driver-core fs -1 289 1043d 1043d 25/29 1010d 88ac06a9f938 Revert "debugfs: annotate debugfs handlers vs. removal with lockdep"
WARNING in debugfs_file_get driver-core fs -1 239 1044d 1061d 25/29 1010d 88ac06a9f938 Revert "debugfs: annotate debugfs handlers vs. removal with lockdep"
general protection fault in usb_hub_create_port_device driver-core 2 syz, C done done 4 1144d 1150d 25/29 1043d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
general protection fault in serio_handle_event driver-core 2 syz, C done done 6 1139d 1147d 25/29 1043d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
general protection fault in nfc_register_device driver-core 11 syz, C done 190 1045d 1158d 25/29 1043d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
general protection fault in wpan_phy_register driver-core 2 syz, C done done 7 1136d 1143d 25/29 1043d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
general protection fault in hci_register_dev driver-core 2 syz, C unreliable done 4 1141d 1148d 25/29 1043d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
KMSAN: uninit-value in ieee802154_subif_start_xmit driver-core bpf 8 syz, C done 119 1184d 1180d 23/29 1113d db2baf82b098 bpf: Fix an incorrect verification success with movsx insn
WARNING in class_register usb driver-core -1 syz, C done 10 1308d 1307d 23/29 1176d f326ea63ecc6 driver core: class: fix slab-use-after-free Read in class_register()
memory leak in class_create usb driver-core 3 syz, C 9 1259d 1277d 22/29 1216d ddaf098ea779 driver core: class: properly reference count class_dev_iter()
general protection fault in xpad_probe driver-core 2 syz, C done 24 1275d 1297d 22/29 1239d 53bea86b5712 Revert "Input: xpad - fix support for some third-party controllers"
KASAN: slab-use-after-free Read in class_register usb driver-core 19 syz, C done 13 1309d 1307d 22/29 1239d f326ea63ecc6 driver core: class: fix slab-use-after-free Read in class_register()
linux-next boot error: general protection fault in driver_bound driver-core -1 1 1535d 1535d 22/29 1343d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in dev_uevent driver-core 19 syz 54 1350d 2323d 22/29 1343d 16b1941eac2b usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
general protection fault in i2c_setup_smbus_alert acpi driver-core usb 2 syz, C done 20 1710d 1728d 22/29 1343d 8302532f47bb i2c: smbus: Check for parent device before dereference
kernel panic: corrupted stack end in hub_event driver-core kernfs 2 93 1351d 1696d 22/29 1343d b81d591386c3 riscv: Increase stack size under KASAN
general protection fault in __pm_runtime_resume (2) driver-core pm 2 syz, C error 7 1682d 1691d 22/29 1343d 32cb08e95869 Bluetooth: hci_uart: add missing NULL check in h5_enqueue
BUG: corrupted list in hci_conn_add_sysfs bluetooth driver-core 19 syz, C error done 9 1498d 1497d 22/29 1343d 448a496f7606 Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
KMSAN: uninit-value in r871xu_drv_init usb driver-core 7 syz, C 7342 1591d 2702d 22/29 1343d 0458e5428e5e staging: rtl8712: fix uninit-value in r871xu_drv_init() d1b57669732d staging: rtl8712: fix uninit-value in usb_read8() and friends
WARNING in component_del dri driver-core -1 syz, C done 6 1724d 1746d 22/29 1343d c853685d11c0 usb: core: Unregister device on component_add() failure
KASAN: use-after-free Read in driver_register usb driver-core 19 syz, C 131 1586d 1637d 22/29 1343d 5f0b5f4d50fa usb: gadget: fix race when gadget driver register via ioctl
WARNING in driver_unregister usb driver-core input -1 syz, C 1 1620d 1616d 22/29 1343d f2d8c2606825 usb: gadget: Fix non-unique driver names in raw-gadget driver
kernel panic: corrupted stack end in loop_control_ioctl driver-core fs 2 2 1465d 1550d 22/29 1343d b81d591386c3 riscv: Increase stack size under KASAN
upstream boot error: BUG: unable to handle kernel paging request in __init_work driver-core pm -1 1 1537d 1537d 22/29 1343d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
memory leak in __mdiobus_register driver-core usb 3 syz, C 1 1864d 1860d 20/29 1696d ab609f25d198 net: mdiobus: Fix memory leak in __mdiobus_register ca6e11c337da phy: mdio: fix memory leak
memory leak in bsg_register_queue driver-core usb 3 syz, C 1 1879d 1875d 20/29 1696d 1a0db7744e45 scsi: bsg: Fix device unregistration
WARNING: ODEBUG bug in really_probe driver-core -1 1 1766d 1760d 20/29 1696d 33812fc7c8d7 HID: magicmouse: Fix an error handling path in magicmouse_probe()
KASAN: null-ptr-deref Write in __pm_runtime_resume driver-core pm 12 syz, C done 108 1710d 1888d 20/29 1696d 2fc7acb69fa3 Bluetooth: hci_uart: fix GPF in h5_recv
memory leak in kobject_set_name_vargs (4) driver-core 3 syz, C 171 1882d 2169d 20/29 1815d 8fd0c1b0647a nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
memory leak in snd_ctl_led_register driver-core usb 3 syz, C 1 2001d 1991d 20/29 1815d 3ae72f6ab9c1 ALSA: control led: fix memory leak in snd_ctl_led_register
WARNING in input_register_device usb input driver-core -1 syz, C error done 11 2032d 2183d 20/29 1815d b4104180a2ef kobject_uevent: remove warning in init_uevent_argv()
BUG: corrupted list in kobject_add_internal (3) bluetooth driver-core 8 syz, C inconclusive 3 1850d 1955d 20/29 1815d 92fe24a7db75 Bluetooth: skip invalid hci_sync_conn_complete_evt
KASAN: use-after-free Read in firmware_fallback_sysfs driver-core 19 syz, C error 16514 1897d 2096d 20/29 1815d 75d95e2e39b2 firmware_loader: fix use-after-free in firmware_fallback_sysfs
WARNING in internal_create_group driver-core fs -1 syz, C inconclusive 20 1879d 1933d 20/29 1815d b1a811633f73 block: nbd: add sanity check for first_minor
BUG: corrupted list in kobject_add_internal bluetooth driver-core 8 syz, C done done 9 2211d 2274d 15/29 2173d a46b7ed4d52d Bluetooth: Fix auto-creation of hci_conn at Conn Complete event
INFO: rcu detected stall in cleanup_net (4) driver-core 1 syz, C done 5 2245d 2241d 15/29 2211d b5b73b26b3ca taprio: Fix allowing too small intervals
upstream boot error: KASAN: global-out-of-bounds Read in internal_create_group driver-core fs -1 273 2257d 2269d 15/29 2226d 62c789270c0b libnvdimm: KASAN: global-out-of-bounds Read in internal_create_group
KASAN: use-after-free Read in lockref_get driver-core fs 19 7 2338d 2437d 15/29 2234d bad8e64fb19d blktrace: fix debugfs use after free
INFO: task hung in __do_sys_reboot driver-core 1 1554 2250d 2306d 15/29 2234d b292b50b0efc driver core: Fix probe_count imbalance in really_probe()
general protection fault in kobject_get (2) driver-core 2 2 2324d 2353d 15/29 2295d 11a0ae4c4bff RDMA: Allow ib_client's to fail when add() is called
general protection fault in start_creating fs driver-core 2 syz, C done 106 2317d 2346d 15/29 2295d d56f5136b010 KVM: let kvm_destroy_vm_debugfs clean up vCPU debugfs directories
general protection fault in kobject_get driver-core 2 4 2366d 2432d 15/29 2363d 5bdfa854013c RDMA/mad: Do not crash if the rdma device does not have a umad interface
WARNING: kobject bug in add_one_compat_dev driver-core -1 2 2434d 2436d 15/29 2363d f2f2b3bbf0d9 RDMA/core: Fix missing error check on dev_set_name()
KMSAN: uninit-value in simple_attr_read driver-core fs 7 syz, C 6 2366d 2436d 15/29 2363d a65cab7d7f05 libfs: fix infoleak in simple_attr_read()
WARNING: kobject bug in ib_register_device driver-core -1 syz, C done 14 2401d 2439d 15/29 2363d 7aefa6237cfe RDMA/nl: Do not permit empty devices names during RDMA_NLDEV_CMD_NEWLINK/SET
BUG: corrupted list in __dentry_kill (2) driver-core fs 8 syz, C done 4945 2513d 2513d 15/29 2445d a3d1e7eb5abe simple_recursive_removal(): kernel-side rm -rf for ramfs-style filesystems
general protection fault in open_rio driver-core 2 2 2591d 2592d 13/29 2559d 015664d15270 USB: rio500: Remove Rio 500 kernel driver
WARNING in kfree driver-core fs -1 syz, C done 2 2618d 2617d 13/29 2571d 43ce4c1feadb vfs: Add a single-or-reconfig keying to vfs_get_super()
KASAN: use-after-free Read in device_release_driver_internal usb driver-core 19 syz, C 5 2631d 2655d 12/29 2610d c52873e5a1ef usb: cdc-acm: make sure a refcount is taken early enough
general protection fault in rcu_core driver-core 2 syz done 1 2669d 2668d 12/29 2620d 95fa145479fb bpf: sockmap/tls, close can race with map free
linux-next boot error: WARNING in corrupted driver-core pm -1 12 2672d 2674d 12/29 2634d 18c49926c4bf cpufreq: Add QoS requests for userspace constraints
memory leak in kobject_set_name_vargs driver-core 3 syz, C 12 2676d 2710d 12/29 2668d 4f488fbca2a8 cfg80211: fix memory leak of wiphy device name
general protection fault in sisusb_probe driver-core usb 2 syz, C 3 2727d 2730d 12/29 2688d 9a5729f68d3a USB: sisusbvga: fix oops in error path of sisusb_probe
general protection fault in __dev_printk usb driver-core 2 syz, C 300 2739d 2752d 12/29 2712d ef61eb43ada6 USB: yurex: Fix protection fault after device removal
KASAN: stack-out-of-bounds Read in string usb driver-core 17 syz, C 46 2746d 2757d 12/29 2724d c01c348ecdc6 USB: core: Fix unterminated string returned by usb_string()
KASAN: use-after-free Read in kobject_put driver-core 19 syz, C 12 2801d 2932d 11/29 2772d e20a2e9c42c9 Bluetooth: Fix decrementing reference count twice in releasing socket
WARNING in sysfs_remove_group driver-core fs -1 syz, C 11125 3035d 3289d 8/29 3034d d3349b6b3c37 loop: remember whether sysfs_create_group() was done
WARNING in dev_vprintk_emit driver-core -1 syz, C 77 3080d 3207d 5/29 3066d 814596495dd2 cfg80211: further limit wiphy names to 64 bytes
KASAN: use-after-free Read in debugfs_remove (2) driver-core fs 19 1 3113d 3111d 5/29 3087d f53823c18131 bdi: Fix use after free bug in debugfs_remove()
WARNING: kobject bug in device_add driver-core -1 syz, C 563 3096d 3136d 5/29 3096d 3e14c6abbfb5 kobject: don't use WARN for registration failures
WARNING in sysfs_warn_dup driver-core fs -1 11 3194d 3237d 4/29 3189d 5d54f948aaac sysfs: turn WARN() into pr_warn()