Applied filters: Manager=ci2-upstream-usb (drop) Label=subsystems:wireless (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
possible deadlock in zd_chip_disable_rxtx usb wireless 4 syz, C 44 45d 2104d 26/29 never 0e4532ec6586 wifi: zd1211rw: reject secondary interfaces to prevent conflicts
KASAN: slab-use-after-free Write in rsi_91x_deinit actionable wireless prio:high 22 1 153d 147d 29/29 115d db57a1aa54ff wifi: rsi: fix kthread lifetime race between self-exit and external-stop
WARNING in ath6kl_bmi_get_target_info (2) usb wireless -1 syz, C error 10349 436d 774d 29/29 404d e7417421d893 wifi: ath6kl: remove WARN on bad firmware input
KASAN: use-after-free Read in rtw_load_firmware_cb usb wireless 19 syz, C 848 717d 781d 28/29 692d 0e735a4c6137 wifi: rtw88: always wait for both firmware loading attempts
WARNING in ar5523_cmd/usb_submit_urb usb wireless -1 syz, C error 39 863d 2420d 25/29 831d e120b6388d7d wifi: ar5523: enable proper endpoint verification
WARNING in carl9170_usb_send_rx_irq_urb/usb_submit_urb usb wireless -1 syz, C error inconclusive 18 875d 2019d 25/29 831d b6dd09b3dac8 wifi: carl9170: add a proper sanity check for endpoints
WARNING in ieee80211_rfkill_poll wireless -1 syz, C 684 1008d 1041d 25/29 967d 8e2f6f236621 wifi: cfg80211: lock wiphy mutex for rfkill poll
INFO: trying to register non-static key in skb_queue_tail wireless -1 syz, C unreliable done 171 1172d 2275d 23/29 1082d 061b0cb9327b wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
WARNING in ath6kl_htc_pipe_rx_complete usb wireless -1 syz, C error 2008 1233d 2503d 22/29 1194d 75c4a8154cb6 wifi: ath6kl: reduce WARN to dev_dbg() in callback
general protection fault in ath9k_hif_usb_rx_cb (2) wireless 2 syz, C error 1678 1496d 2249d 22/29 1298d 0ac4827f78c7 ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
KASAN: use-after-free Read in ar5523_cmd_tx_cb usb wireless 19 syz, C inconclusive 372 1394d 1449d 22/29 1298d b6702a942a06 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
WARNING in hif_usb_send/usb_submit_urb wireless -1 syz, C unreliable done 374 1379d 2170d 22/29 1298d 16ef02bad239 wifi: ath9k: verify the expected usb_endpoints are present
INFO: task hung in ath6kl_usb_power_off wireless 1 7454 1495d 2261d 22/29 1298d 62ebaf2f9261 ath6kl: avoid flush_scheduled_work() usage
KASAN: out-of-bounds Read in ath9k_hif_usb_rx_cb (3) wireless usb 17 syz, C unreliable done 7 1674d 2078d 20/29 1643d 6ce708f54cc8 ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
INFO: trying to register non-static key in ath9k_htc_rxep wireless -1 syz, C unreliable 9896 1705d 2278d 20/29 1651d b0ec7e55fce6 ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()
WARNING in rtl92cu_hw_init wireless -1 1 1750d 1746d 20/29 1651d 8b144dedb928 rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled
INFO: trying to register non-static key in ath9k_wmi_event_tasklet wireless usb -1 syz, C unreliable 7 1741d 1918d 20/29 1651d 8b3046abc99e ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
WARNING: suspicious RCU usage in get_wiphy_regdom wireless 4 syz, C done 5031 2066d 2097d 19/29 2014d 51d62f2f2c50 cfg80211: Save the regulatory domain with a lock
KASAN: use-after-free Write in rtl_fw_do_work (2) wireless 22 4 2099d 2105d 19/29 2014d 4dfde294b979 rtlwifi: rise completion at the last step of firmware callback
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb wireless 19 syz, C 2849 2128d 2363d 15/29 2128d 03fb92a432ea ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs()
INFO: trying to register non-static key in del_timer_sync (2) wireless usb -1 syz, C 1206 2660d 2712d 15/29 2128d 621a3a8b1c0e mwifiex: don't call del_timer_sync() on uninitialized timer
KASAN: use-after-free Write in ath9k_htc_rx_msg wireless 22 syz, C 93 2285d 2363d 15/29 2250d e4ff08a4d727 ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
KASAN: stack-out-of-bounds Write in ath9k_hif_usb_rx_cb wireless 21 syz, C 57 2285d 2359d 15/29 2250d 19d6c375d671 ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
KASAN: use-after-free Read in htc_connect_service wireless 19 syz, C 41041 2285d 2363d 15/29 2250d ced21a4c726b ath9k: Fix use-after-free Read in htc_connect_service
KASAN: use-after-free Read in ath9k_wmi_ctrl_rx wireless 19 syz, C 1 2362d 2362d 15/29 2250d abeaa85054ff ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
general protection fault in ath9k_hif_usb_rx_cb wireless 2 syz, C 913 2250d 2363d 15/29 2250d 2bbcaaee1fcb ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
KASAN: use-after-free Read in rsi_rx_done_handler wireless 19 8 2439d 2568d 15/29 2400d e93cd35101b6 rsi: fix use-after-free on failed probe and unbind
WARNING: ODEBUG bug in rsi_probe usb wireless -1 syz, C 10487 2414d 2709d 15/29 2400d 92aafe77123a rsi: fix use-after-free on probe errors
KASAN: invalid-free in rsi_91x_deinit usb wireless 24 syz, C 109 2554d 2701d 13/29 2481d 8b51dc729147 rsi: fix a double free bug in rsi_91x_deinit()
general protection fault in ath6kl_usb_alloc_urb_from_pipe usb wireless 2 syz, C 1160 2552d 2712d 13/29 2525d 39d170b3cb62 ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
WARNING in zd_mac_clear usb wireless -1 syz, C 13194 2552d 2712d 13/29 2525d 7a2eb7367fde zd1211rw: remove false assertion from zd_mac_clear()
INFO: trying to register non-static key in rtl_c2hcmd_launcher usb wireless -1 syz, C 48950 2604d 2712d 12/29 2597d 6c0ed66f1a5b rtlwifi: rtl8192cu: fix error handle when usb probe failed
KASAN: use-after-free Read in p54u_load_firmware_cb wireless usb 19 syz 40 2604d 2688d 12/29 2597d 6e41e2257f10 p54usb: Fix race between disconnect and firmware loading