syzbot


Applied filters: Label=subsystems:usb (drop)
Title Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: slab-use-after-free Read in sg_release usb scsi syz 1 21d 31d 1/28 never scsi: sg: Fix slab-use-after-free read in sg_release()
KASAN: slab-use-after-free Read in chaoskey_disconnect usb 2 83d 71d 24/28 never 422dc0a4d12d USB: chaoskey: fail open after removal
possible deadlock in chaoskey_release usb C 90 54d 59d 24/28 never d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
possible deadlock in chaoskey_open usb C 475 54d 60d 24/28 never d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
possible deadlock in usb_deregister_dev (3) usb C 103 54d 60d 24/28 never d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
WARNING in media_create_pad_link usb media C done done 104 16d 1668d 25/28 never 3dd075fe8ebb media: uvcvideo: Require entities to have a non-zero unique ID
INFO: task hung in usb_port_suspend usb C 12 47d 57d 28/28 25d 5189df7b8088 USB: gadget: dummy-hcd: Fix "task hung" problem
kernel BUG in __page_table_check_zero usb C error done 213 79d 566d 28/28 46d 79a61cc3fc04 mm: avoid leaving partial pfn mappings around in error case
INFO: rcu detected stall in schedule_timeout (6) usb C done 40 48d 205d 28/28 46d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
KASAN: use-after-free Read in rtw_load_firmware_cb usb wireless C 848 72d 135d 28/28 46d 0e735a4c6137 wifi: rtw88: always wait for both firmware loading attempts
INFO: rcu detected stall in aoecmd_cfg (2) usb block C done 7 100d 213d 28/28 46d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
KMSAN: kernel-infoleak in raw_ioctl (2) usb C 18201 71d 137d 28/28 46d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
KMSAN: kernel-usb-infoleak in usbtmc_write usb C 167 71d 135d 28/28 46d 625fa77151f0 USB: usbtmc: prevent kernel-usb-infoleak
INFO: task hung in uevent_show usb C done 9704 117d 178d 28/28 46d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
INFO: rcu detected stall in __mod_timer (5) usb C error done 10 124d 188d 28/28 47d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
possible deadlock in touch_wq_lockdep_map usb C 1208 70d 266d 28/28 65d ccbde4b128ef char: xillybus: Don't destroy workqueue from work item running on it
KMSAN: uninit-value in line6_midibuf_read usb sound C 357 74d 137d 28/28 65d 15b7a03205b3 ALSA: line6: Fix racy access to midibuf
KASAN: slab-out-of-bounds Read in cougar_report_fixup input usb C 31 96d 130d 28/28 65d a6e9c391d45b HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
memory leak in _r8712_init_xmit_priv (2) staging usb C 2 368d 384d 27/28 115d 9ed3e0a0e1b1 staging: rtl8712: remove unnecessary alignment of pxmitpriv->pxmitbuf
WARNING in btusb_submit_intr_urb/usb_submit_urb usb bluetooth C error 2 154d 165d 27/28 115d a368ecde8a50 USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
WARNING in implement input usb C error done 960 179d 1909d 26/28 129d 4aa2dcfbad53 HID: core: remove unnecessary WARN_ON() in implement()
INFO: rcu detected stall in __run_timer_base usb C done done 10 169d 238d 26/28 129d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
WARNING in kcov_remote_start (4) usb 107983 150d 181d 26/28 150d f85d39dd7ed8 kcov, usb: disable interrupts in kcov_remote_start_usb_softirq
WARNING in hid_output_report input usb C error 3 196d 216d 26/28 151d 4aa2dcfbad53 HID: core: remove unnecessary WARN_ON() in implement() fba383985354 net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
INFO: task hung in wdm_release usb C error 1 174d 170d 26/28 151d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
INFO: rcu detected stall in raw_ioctl usb C 49 157d 403d 26/28 151d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
KMSAN: uninit-value in asus_report_fixup input usb C done 35 172d 197d 26/28 151d 89e1ee118d6f hid: asus: asus_report_fixup: fix potential read out of bounds
BUG: soft lockup in hci_cmd_timeout bluetooth usb C 1 182d 178d 26/28 151d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
WARNING in cxacru_cm/usb_submit_urb usb C error inconclusive 14 170d 1738d 26/28 151d 2eabb655a968 usb: atm: cxacru: fix endpoint checking in cxacru_bind()
WARNING in kcov_remote_start (3) usb 265513 185d 254d 25/28 185d 19e35f24750d nfc: nci: Fix kcov check in nci_rx_work()
WARNING in ar5523_cmd/usb_submit_urb usb wireless C error 39 218d 1774d 25/28 185d e120b6388d7d wifi: ar5523: enable proper endpoint verification
WARNING in carl9170_usb_send_rx_irq_urb/usb_submit_urb usb wireless C error inconclusive 18 229d 1373d 25/28 185d b6dd09b3dac8 wifi: carl9170: add a proper sanity check for endpoints
WARNING in vmk80xx_auto_attach/usb_submit_urb usb C unreliable inconclusive 2 273d 1275d 25/28 199d d1718530e3f6 comedi: vmk80xx: fix incomplete endpoint checking
KASAN: slab-use-after-free Read in pvr2_context_set_notify usb pvrusb2 C 3814 312d 518d 25/28 312d ded85b0c0edd media: pvrusb2: fix use after free on context disconnection
KASAN: use-after-free Read in __media_entity_remove_links usb media C 7 1720d 1818d 25/28 339d 68035c80e129 media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
KMSAN: uninit-value in smsc95xx_reset usb C 425 408d 1573d 25/28 352d 51a32e828109 net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
linux-next boot error: KASAN: slab-out-of-bounds Write in vhci_setup usb 34 417d 421d 25/28 352d 17d6b82d2d6d usb/usbip: fix wrong data added to platform device
KMSAN: uninit-value in mii_nway_restart usb C 2449 422d 2013d 25/28 352d 8f8abb863fa5 net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
KMSAN: uninit-value in smsc75xx_bind usb C 63 450d 1947d 25/28 352d e9c65989920f net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
KASAN: slab-out-of-bounds Read in imon_probe media usb syz 2 447d 469d 25/28 352d a1766a4fd83b media: imon: fix access to invalid resource for the second interface
KMSAN: uninit-value in smsc95xx_eeprom_confirm_not_busy usb C 521 408d 521d 25/28 352d 51a32e828109 net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
UBSAN: shift-out-of-bounds in set_flicker usb media syz 5 398d 478d 25/28 352d 099be1822d1f media: gspca: cpia1: shift-out-of-bounds in set_flicker
KASAN: slab-out-of-bounds Read in read_descriptors (3) usb C error 7 509d 537d 23/28 422d ff33299ec8bb USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
KMSAN: uninit-value in alauda_check_media usb usb-storage C 1059 504d 1888d 23/28 422d a6ff6e7a9dd6 usb-storage: alauda: Fix uninit-value in alauda_check_media()
memory leak in raw_open usb C 1 517d 513d 23/28 422d 83e30f2bf86e USB: gadget: Fix the memory leak in raw_gadget driver
WARNING in corrupted (3) usb C done 19 517d 565d 23/28 422d 6f489a966fbe media: usb: siano: Fix warning due to null work_func_t function pointer
WARNING in usbnet_start_xmit/usb_submit_urb usb C done 92 536d 1118d 23/28 422d 5e1627cb43dd net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
memory leak in _r8712_init_xmit_priv staging usb C 1 518d 514d 23/28 422d ac83631230f7 staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
WARNING in class_register usb C done 10 617d 616d 23/28 485d f326ea63ecc6 driver core: class: fix slab-use-after-free Read in class_register()
WARNING in dlfb_submit_urb/usb_submit_urb (2) fbdev usb C 2 573d 569d 22/28 525d ed9de4ed3987 fbdev: udlfb: Fix endpoint check
WARNING in usbtmc_ioctl/usb_submit_urb (2) usb C done 3 586d 598d 22/28 525d 94d25e912898 USB: usbtmc: Fix direction for 0-length ioctl control messages
memory leak in class_create usb C 9 568d 586d 22/28 525d ddaf098ea779 driver core: class: properly reference count class_dev_iter()
WARNING in __usbnet_read_cmd/usb_submit_urb usb C error 5 670d 701d 22/28 544d 93fd565919cf net: USB: Fix wrong-direction WARNING in plusb.c net: USB: Fix wrong-direction WARNING in plusb.c
WARNING in sisusb_send_bulk_msg/usb_submit_urb usb C unreliable 418 599d 1985d 22/28 548d df05a9b05e46 USB: sisusbvga: Add endpoint checks
KASAN: use-after-free Write in gadgetfs_kill_sb usb C error 5 691d 725d 22/28 548d d18dcfe9860e USB: gadgetfs: Fix race between mounting and unmounting
KMSAN: uninit-value in kalmia_send_init_packet usb C 2 677d 676d 22/28 548d c68f345b7c42 net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
WARNING in pegasus_open/usb_submit_urb input usb C 7 629d 1639d 22/28 548d b3d80fd27a3c Input: pegasus-notetaker - check pipe type when probing
WARNING in shark_write_reg/usb_submit_urb usb C error 63 597d 1971d 22/28 548d 76e31045ba03 media: radio-shark: Add endpoint checks
memory leak in __proc_create scsi usb syz 1 641d 641d 22/28 548d be03df3d4bfe scsi: core: Fix a procfs host directory removal regression
general protection fault in xpad_probe usb C done 24 584d 606d 22/28 548d 53bea86b5712 Revert "Input: xpad - fix support for some third-party controllers"
KASAN: slab-use-after-free Read in class_register usb C done 13 618d 616d 22/28 548d f326ea63ecc6 driver core: class: fix slab-use-after-free Read in class_register()
WARNING in ath6kl_htc_pipe_rx_complete usb wireless C error 2008 587d 1857d 22/28 548d 75c4a8154cb6 wifi: ath6kl: reduce WARN to dev_dbg() in callback
WARNING in shark_write_val/usb_submit_urb usb C error done 51 605d 1965d 22/28 548d 76e31045ba03 media: radio-shark: Add endpoint checks
INFO: task hung in port100_probe usb nfc C error inconclusive 10 1006d 1264d 22/28 605d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
KMSAN: uninit-value in ax88178_reset usb C 284 960d 1067d 22/28 652d 920a9fa27e78 net: asix: add proper error handling of usb read errors
possible deadlock in display_open usb C inconclusive 48888 920d 1947d 22/28 652d db264d4c66c0 media: imon: reorganize serialization
KMSAN: uninit-value in asix_mdio_read (3) usb C 1582 935d 1000d 22/28 652d 920a9fa27e78 net: asix: add proper error handling of usb read errors
WARNING in snd_usbmidi_output_open alsa usb C done 37 750d 757d 22/28 652d ad72c3c3f6eb ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
WARNING in send_packet/usb_submit_urb usb C inconclusive 847 720d 886d 22/28 652d 813ceef062b5 media: imon: fix a race condition in send_packet()
KASAN: slab-out-of-bounds Read in thrustmaster_probe input usb C unreliable 92 997d 1021d 22/28 652d fc3ef2e3297b HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
INFO: task hung in misc_open (4) usb C error inconclusive 144 680d 1393d 22/28 652d 8386c414e27c PM: hibernate: defer device probing when resuming from hibernation
INFO: task hung in hub_port_init (2) usb C error 486 655d 1118d 22/28 652d 26fbe9772b8c USB: core: Fix hang in usb_kill_urb by adding memory barriers
general protection fault in i2c_setup_smbus_alert acpi usb C done 20 1019d 1037d 22/28 652d 8302532f47bb i2c: smbus: Check for parent device before dereference
KASAN: use-after-free Read in __snd_rawmidi_transmit_peek sound usb syz error 48 854d 964d 22/28 652d 0665886ad139 ALSA: usb-audio: Clear MIDI port active flag after draining
UBSAN: shift-out-of-bounds in hid_report_raw_event (2) input usb C error 1 757d 753d 22/28 652d ec61b4191858 HID: core: fix shift-out-of-bounds in hid_report_raw_event
KASAN: use-after-free Read in port100_send_complete nfc usb C 1 1009d 1005d 22/28 652d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
KASAN: use-after-free Read in usb_udc_uevent usb syz error 30 863d 1649d 22/28 652d 2191c00855b0 USB: gadget: Fix use-after-free Read in usb_udc_uevent()
memory leak in usb_set_configuration (3) usb C 2 890d 916d 22/28 652d 945a9a8e448b media: pvrusb2: fix memory leak in pvr_probe
KASAN: use-after-free Read in ar5523_cmd_tx_cb usb wireless C inconclusive 372 748d 803d 22/28 652d b6702a942a06 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
KMSAN: uninit-value in asix_mdio_write_nopm net usb 2 977d 998d 22/28 652d 920a9fa27e78 net: asix: add proper error handling of usb read errors
WARNING in dlfb_submit_urb/usb_submit_urb usb fbdev C done 481 725d 1986d 22/28 652d aaf7dbe07385 video: fbdev: udlfb: properly check endpoint type
KASAN: use-after-free Read in snd_rawmidi_transmit usb sound C done done 7 920d 954d 22/28 652d 0125de38122f ALSA: usb-audio: Cancel pending work at closing a MIDI substream
KASAN: use-after-free Read in si470x_int_in_callback (2) usb media C error 7303 720d 1877d 22/28 652d 7d21e0b1b41b media: si470x: Fix use-after-free in si470x_int_in_callback()
memory leak in gs_usb_probe can usb C 1 988d 984d 22/28 652d 50d34a0d151d can: gs_usb: gs_make_candev(): fix memory leak for devices with extended bit timing configuration
memory leak in airspy_probe media usb C 1 854d 850d 22/28 652d 23bc5eb55f8c media: airspy: fix memory leak in airspy probe
KMSAN: uninit-value in idmouse_open usb C 5 815d 810d 22/28 652d bce2b0539933 usb: idmouse: fix an uninit-value in idmouse_open
KASAN: null-ptr-deref Read in ida_free (2) usb C done 3 896d 897d 22/28 652d 90bc2af24638 USB: gadget: Fix double-free bug in raw_gadget driver
INFO: task hung in scsi_remove_host scsi usb C done 328 803d 839d 22/28 652d 2b36209ca818 scsi: core: Revert "Call blk_mq_free_tag_set() earlier" d94b2d00f7bf scsi: core: Revert "Make sure that hosts outlive targets" f782201ebc2b scsi: core: Revert "Make sure that targets outlive devices" 70e8d057bef5 scsi: core: Revert "Simplify LLD module reference counting"
UBSAN: array-index-out-of-bounds in pvr2_i2c_core_init pvrusb2 usb C inconclusive 4 936d 968d 22/28 652d 471bec68457a media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
WARNING in usbtmc_ioctl/usb_submit_urb usb C inconclusive 8 665d 1010d 22/28 652d e9b667a82cdc usb: usbtmc: Fix bug in pipe direction for control transfers
WARNING in mcba_usb_probe/usb_submit_urb usb can C error 537 982d 1977d 22/28 652d 136bed0bfd3b can: mcba_usb: properly check endpoint type
KASAN: use-after-free Read in udl_get_urb_timeout dri usb C done 142 808d 838d 22/28 652d ed9605a66b62 Revert "drm/udl: Kill pending URBs at suspend and disconnect"
memory leak in dvb_usb_device_init media usb syz 1 758d 928d 22/28 652d 94d90fb06b94 media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
WARNING: locking bug in hfa384x_usbctlx_completion_task staging usb C 2 899d 895d 22/28 652d ee6c6e734247 staging/wlan-ng: get the correct struct hfa384x in work callback
KMSAN: uninit-value in r871xu_drv_init usb C 7342 900d 2011d 22/28 652d 0458e5428e5e staging: rtl8712: fix uninit-value in r871xu_drv_init() d1b57669732d staging: rtl8712: fix uninit-value in usb_read8() and friends
INFO: task hung in add_early_randomness (2) usb crypto C done 182 700d 918d 22/28 652d 228432551bd8 virtio-rng: make device ready before making request
KMSAN: uninit-value in asix_check_host_enable usb C 109 960d 1018d 22/28 652d 920a9fa27e78 net: asix: add proper error handling of usb read errors
memory leak in hidraw_report_event input usb C 1 928d 927d 22/28 652d a5623a203cff HID: hidraw: fix memory leak in hidraw_release()
KASAN: use-after-free Read in driver_register usb C 131 895d 946d 22/28 652d 5f0b5f4d50fa usb: gadget: fix race when gadget driver register via ioctl
WARNING in driver_unregister input usb C 1 929d 925d 22/28 652d f2d8c2606825 usb: gadget: Fix non-unique driver names in raw-gadget driver
WARNING in aiptek_open/usb_submit_urb usb input C error 2380 988d 2010d 22/28 652d 5600f6986628 Input: aiptek - properly check endpoint type
memory leak in blk_mq_init_tags block usb C 2 979d 986d 22/28 652d 03252259e18e scsi: sd: Clean up gendisk if device_add_disk() failed
INFO: task hung in __input_unregister_device (4) usb input C done 924 824d 889d 22/28 652d 98e01215708b Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
KASAN: out-of-bounds Read in ath9k_hif_usb_rx_cb (3) wireless usb C unreliable done 7 1028d 1432d 20/28 997d 6ce708f54cc8 ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
KASAN: slab-out-of-bounds Write in betop_probe input usb C unreliable 9 1206d 1762d 20/28 997d 689e453a9b9c HID: betop: fix slab-out-of-bounds Write in betop_probe HID: betop: fix slab-out-of-bounds Write in betop_probe
KMSAN: uninit-value in dvb_usb_adapter_dvb_init (2) usb media C 34 1265d 1481d 20/28 997d c5453769f77c media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init 899a61a3305d media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
memory leak in __mdiobus_register usb C 1 1173d 1169d 20/28 1005d ab609f25d198 net: mdiobus: Fix memory leak in __mdiobus_register ca6e11c337da phy: mdio: fix memory leak
KMSAN: uninit-value in legacy_dvb_usb_read_remote_control media usb C 186 1115d 1456d 20/28 1005d afae4ef7d5ad media: dvb-usb: fix ununit-value in az6027_rc_query
memory leak in bsg_register_queue usb C 1 1188d 1184d 20/28 1005d 1a0db7744e45 scsi: bsg: Fix device unregistration
divide error in usbnet_start_xmit usb C 760 1129d 1146d 20/28 1005d 397430b50a36 usbnet: sanity check for maxpacket
KASAN: slab-out-of-bounds Write in usb_hcd_poll_rh_status (2) usb C inconclusive 116 1068d 1551d 20/28 1005d 1d7d4c07932e USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
INFO: trying to register non-static key in mxl111sf_ctrl_msg usb media C 73 1960d 2064d 20/28 1005d 44870a9e7a3c media: mxl111sf: change mutex_init() location
WARNING: ODEBUG bug in corrupted (2) usb input C error 2 1075d 1286d 20/28 1005d 33812fc7c8d7 HID: magicmouse: Fix an error handling path in magicmouse_probe()
KASAN: use-after-free Read in rtl8712_dl_fw usb staging C 6961 1121d 1145d 20/28 1005d c052cc1a069c staging: rtl8712: fix use-after-free in rtl8712_dl_fw
KMSAN: kernel-usb-infoleak in usbnet_write_cmd (3) usb C 256 1023d 1067d 20/28 1005d d668769eb9c5 net: mcs7830: handle usb read errors properly
KASAN: use-after-free Read in blk_mq_sched_tags_teardown block usb C done 6 1142d 1140d 20/28 1005d 8bdf7b3fe1f4 blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown()
INFO: trying to register non-static key in ath9k_wmi_event_tasklet wireless usb C unreliable 7 1095d 1272d 20/28 1005d 8b3046abc99e ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
INFO: task hung in set_current_rng crypto usb C unreliable done 1 1132d 1250d 20/28 1005d 2bb31abdbe55 hwrng: virtio - don't wait on cleanup
KMSAN: uninit-value in ax88772a_hw_reset usb C 94 1023d 1111d 20/28 1005d 8035b1a2a37a asix: fix uninit-value in asix_mdio_read()
INFO: rcu detected stall in dummy_timer (3) usb C error 132 1019d 1607d 20/28 1005d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
KMSAN: uninit-value in asix_mdio_read (2) usb C 1075 1005d 1085d 20/28 1005d 8035b1a2a37a asix: fix uninit-value in asix_mdio_read()
BUG: sleeping function called from invalid context in hci_cmd_sync_cancel usb net C done 28 1081d 1095d 20/28 1005d 744451c162a5 Bluetooth: hci_sync: Push sync command cancellation to workqueue
INFO: rcu detected stall in newstat fs usb C unreliable done 4 1099d 1222d 20/28 1005d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
INFO: task hung in do_proc_bulk usb syz inconclusive 8 1132d 1197d 20/28 1005d ae8709b296d8 USB: core: Make do_proc_control() and do_proc_bulk() killable
BUG: corrupted list in em28xx_init_extension usb media C error 18 1236d 1780d 20/28 1005d 2c98b8a3458d media: em28xx: add missing em28xx_close_extension
INFO: task hung in hwrng_register crypto usb syz unreliable done 1 1152d 1208d 20/28 1005d 2bb31abdbe55 hwrng: virtio - don't wait on cleanup
WARNING: held lock freed in spi_unregister_controller spi usb C inconclusive 251 1105d 1145d 20/28 1005d 6c53b45c71b4 spi: fix use-after-free of the add_lock mutex
WARNING in rtl28xxu_ctrl_msg/usb_submit_urb usb C 50 1245d 1293d 20/28 1123d 76f22c93b209 media: rtl28xxu: fix zero-length control request media: rtl28xxu: fix zero-length control request
WARNING in hso_free_net_device usb C error 528 1241d 1922d 20/28 1123d 788e67f18d79 usb: hso: fix error handling code of hso_create_net_device usb: hso: fix error handling code of hso_create_net_device
KASAN: null-ptr-deref Read in phy_disconnect net usb C 255 1190d 1194d 20/28 1124d 1406e8cb4b05 net: usb: asix: do not call phy_disconnect() for ax88178
memory leak in zr364xx_start_readpipe media usb C 2 1273d 1300d 20/28 1124d 0a045eac8d04 media: zr364xx: fix memory leak in zr364xx_start_readpipe
memory leak in pcan_usb_fd_init usb can C 19 1388d 1457d 20/28 1124d a0b96b4a6274 drivers: net: fix memory leak in peak_usb_create_dev
WARNING in dtv5100_probe/usb_submit_urb usb C 51 1245d 1291d 20/28 1124d 8c8b9a9be2af media: dtv5100: fix control-request directions
WARNING in blk_rq_append_bio block usb C done 6 1335d 1300d 20/28 1124d cbb749cf377a block: remove an incorrect check from blk_rq_append_bio
WARNING in e2i_init/usb_submit_urb usb 4 1264d 1293d 20/28 1124d 41e81022a04a Input: usbtouchscreen - fix control-request directions
memory leak in smsc75xx_bind usb syz 2 1292d 1293d 20/28 1124d 46a8b29c6306 net: usb: fix memory leak in smsc75xx_bind
memory leak in mcba_usb_probe usb C 34 1270d 1447d 20/28 1124d 91c02557174b can: mcba_usb: fix memory leak in mcba_usb
WARNING in hid_submit_ctrl/usb_submit_urb input usb C done 38 1189d 1238d 20/28 1124d 0a824efdb724 HID: usbhid: Fix warning caused by 0-length input reports
memory leak in nfcmrvl_nci_register_dev usb C 9 1390d 1435d 20/28 1124d e0652f8bb44d NFC: nci: fix memory leak in nci_allocate_device
memory leak in hdcs_probe_1020 media usb C 1 1351d 1347d 20/28 1124d 4f4e6644cd87 media: gscpa/stv06xx: fix memory leak
KMSAN: uninit-value in pegasus_probe usb C 258 1222d 1892d 20/28 1124d af35fc37354c net: pegasus: fix uninit-value in get_interrupt_interval
general protection fault in magicmouse_remove usb input C 47 1274d 1300d 20/28 1124d 4b4f6cecca44 HID: magicmouse: fix NULL-deref on disconnect
memory leak in dvb_create_media_graph usb media C 26 1329d 1487d 20/28 1124d bf9a40ae8d72 media: dvbdev: Fix memory leak in dvb_media_device_free()
memory leak in hdcs_probe_1x00 usb media C 1 1380d 1380d 20/28 1124d 4f4e6644cd87 media: gscpa/stv06xx: fix memory leak
WARNING in osif_probe/usb_submit_urb usb C 45 1249d 1293d 20/28 1124d 4ca070ef0dd8 i2c: robotfuzz-osif: fix control-request directions
possible deadlock in do_fcntl usb fs C done 245 1200d 1531d 20/28 1124d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
WARNING in qt2_attach/usb_submit_urb usb C 171 1273d 1293d 20/28 1124d eb8dbe80326c USB: serial: quatech2: fix control-request directions
memory leak in hub_event (2) usb C 2 1361d 1363d 20/28 1124d dcb4b8ad6a44 misc/uss720: fix memory leak in uss720_probe
memory leak in usb_set_configuration (2) usb C 2 1218d 1326d 20/28 1124d be8656e62e9e media: cpia2: fix memory leak in cpia2_usb_probe
WARNING in usb_new_device/usb_submit_urb usb C 2 1288d 1284d 20/28 1124d 60dfe484cef4 USB: core: Avoid WARNings for 0-length descriptor requests
WARNING in rtl8152_probe usb C 23 1282d 1305d 20/28 1124d 1a44fb38cc65 r8152: check the informaton of the device
WARNING in do_proc_control/usb_submit_urb usb C error 456 1232d 1246d 20/28 1124d b0863f192732 USB: core: Fix incorrect pipe calculation in do_proc_control()
general protection fault in gadget_setup usb 1 1350d 1334d 20/28 1124d 4a5d797a9f9c usb: gadget: dummy_hcd: fix gpf in gadget_setup
KASAN: slab-out-of-bounds Read in do_wait_for_common staging usb C error 5 1218d 1237d 20/28 1124d e9e6aa51b273 staging: rtl8712: error handling refactoring
memory leak in em28xx_dvb_init media usb C 1 1362d 1362d 20/28 1124d 0ae10a7dc899 media: em28xx: fix memory leak
memory leak in __usbhid_submit_report input usb C 129 1194d 1487d 20/28 1124d f7744fa16b96 HID: usbhid: free raw_report buffers in usbhid_stop
KASAN: use-after-free Read in r871xu_dev_remove usb staging C unreliable 152 1217d 1244d 20/28 1124d e9e6aa51b273 staging: rtl8712: error handling refactoring
KASAN: slab-out-of-bounds Read in snd_usbmidi_get_ms_info alsa usb C 10 1302d 1307d 20/28 1124d e84749a78dc8 ALSA: usb-audio: Validate MS endpoint descriptors
memory leak in snd_ctl_led_register usb C 1 1310d 1300d 20/28 1124d 3ae72f6ab9c1 ALSA: control led: fix memory leak in snd_ctl_led_register
KMSAN: kernel-usb-infoleak in hid_submit_ctrl input usb C 839 1298d 1906d 20/28 1124d 6be388f4a35d HID: usbhid: fix info leak in hid_submit_ctrl
KMSAN: uninit-value in asix_mdio_read usb C 915 1225d 1888d 20/28 1124d a786e3195d6a net: asix: fix uninit value bugs
WARNING in input_register_device input usb C error done 11 1341d 1492d 20/28 1124d b4104180a2ef kobject_uevent: remove warning in init_uevent_argv()
memory leak in cinergyt2_fe_attach usb media C 3 1428d 1486d 20/28 1124d 9ad1efee086e media: dvd_usb: memory leak in cinergyt2_fe_attach
INFO: task hung in usb_remote_wakeup (2) usb syz inconclusive done 9 1205d 1404d 20/28 1124d 363eaa3a450a usbip: synchronize event handler with sysfs code paths
WARNING in pvr2_i2c_core_done usb fs C error 5780 1245d 1900d 20/28 1124d f8194e5e63fd media: pvrusb2: fix warning in pvr2_i2c_core_done
WARNING: zero-size vmalloc in dvb_dmx_init usb media C 62 1246d 1310d 20/28 1124d c680ed46e418 media: dvb-usb: fix wrong definition
KASAN: use-after-free Read in blk_mq_exit_sched block usb C done 9 1263d 1277d 20/28 1124d f0c1c4d2864e blk-mq: fix use-after-free in blk_mq_exit_sched
WARNING in __vmalloc_node_range media usb C 7 1310d 1311d 20/28 1124d c680ed46e418 media: dvb-usb: fix wrong definition
memory leak in usb_urb_init media usb C 1 1437d 1433d 20/28 1124d b7cd0da982e3 media: dvb-usb: fix memory leak in dvb_usb_adapter_init
memory leak in atusb_probe usb wpan C 71 1340d 1485d 20/28 1124d 6b9fbe169551 drivers: net: fix memory leak in atusb_probe
UBSAN: shift-out-of-bounds in vhci_hub_control (2) usb C unreliable 5 1345d 1354d 20/28 1124d 1cc5ed25bdad usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control()
memory leak in v4l2_ctrl_handler_init_class usb media C 12 1328d 1381d 20/28 1124d 9c39be40c015 media: drivers/media/usb: fix memory leak in zr364xx_probe
KMSAN: uninit-value in ax88179_get_mac_addr usb C 149 1242d 1506d 20/28 1124d bd78980be1a6 net: usb: ax88179_178a: initialize local variables before use
general protection fault in drm_client_buffer_vunmap usb dri C unreliable done 247 1367d 1468d 20/28 1334d 874a52f9b693 drm/fb-helper: only unmap if buffer not null
general protection fault in usb_audio_probe usb sound C done 360 1368d 1370d 20/28 1338d 30dea07180de ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe
UBSAN: shift-out-of-bounds in mceusb_dev_printdata media usb C error 331 1384d 1452d 20/28 1338d 9dec0f48a75e media: mceusb: sanity check for prescaler value
general protection fault in kobject_cleanup gpio usb C unreliable 72 1368d 1381d 20/28 1338d a6112998ee45 gpio: fix NULL-deref-on-deregistration regression
UBSAN: shift-out-of-bounds in snto32 input usb C error 58 1382d 1455d 20/28 1338d a0312af1f94d HID: core: detect and skip invalid inputs to snto32()
memory leak in dlfb_usb_probe usb fbdev C 3 1452d 1454d 20/28 1338d 5c0e4110f751 udlfb: Fix memory leak in dlfb_usb_probe
memory leak in zr364xx_probe usb media C 6 1392d 1445d 20/28 1338d ea354b6ddd6f media: zr364xx: fix memory leaks in probe()
KASAN: use-after-free Read in usb_audio_disconnect sound usb C done 15 1368d 1369d 20/28 1338d c5aa956eaeb0 ALSA: usb-audio: fix use after free in usb_audio_disconnect
UBSAN: shift-out-of-bounds in mceusb_dev_recv media usb C 13 1385d 1449d 20/28 1338d 1b43bad31fb0 media: mceusb: Fix potential out-of-bounds shift
general protection fault in tomoyo_socket_sendmsg_permission usb 17 1395d 1485d 20/28 1338d 9380afd6df70 usbip: fix stub_dev usbip_sockfd_store() races leading to gpf 718ad9693e36 usbip: fix vhci_hcd attach_store() races leading to gpf 46613c9dfa96 usbip: fix vudc usbip_sockfd_store races leading to gpf
memory leak in edge_startup usb C 1 1381d 1377d 20/28 1338d cfdc67acc785 USB: serial: io_edgeport: fix memory leak in edge_startup
unexpected kernel reboot (3) input usb C error error 21132 1338d 2339d 20/28 1338d c8e2fe13d1d1 x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
KASAN: null-ptr-deref Write in event_handler usb C done 2869 1377d 1524d 20/28 1338d 9380afd6df70 usbip: fix stub_dev usbip_sockfd_store() races leading to gpf 718ad9693e36 usbip: fix vhci_hcd attach_store() races leading to gpf 46613c9dfa96 usbip: fix vudc usbip_sockfd_store races leading to gpf
WARNING in spi_register_controller usb spi C 1848 1452d 2066d 19/28 1369d 9c60cc797cf7 media: msi2500: assign SPI bus number dynamically
UBSAN: shift-out-of-bounds in dummy_hub_control usb C done 5 1445d 1443d 19/28 1369d c318840fb2a4 USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug
UBSAN: shift-out-of-bounds in parse_audio_format_i sound usb C error 19 1454d 1459d 19/28 1369d 175b8d89fe29 ALSA: pcm: oss: Fix potential out-of-bounds shift 43d5ca88dfcd ALSA: usb-audio: Fix potential out-of-bounds shift
UBSAN: shift-out-of-bounds in option_probe usb C error 22 1458d 1459d 19/28 1369d a251963f76fa USB: serial: option: add interface-number sanity check to flag handling
memory leak in hub_event usb C 7 1389d 1478d 19/28 1369d e469d0b09a19 media: gspca: Fix memory leak in probe
WARNING in yurex_write/usb_submit_urb usb C error 78 1427d 1456d 19/28 1369d 372c93131998 USB: yurex: fix control-URB timeout handling
UBSAN: shift-out-of-bounds in snd_usbmidi_get_ms_info alsa usb C error 9 1426d 1446d 19/28 1369d c06ccf3ebb75 ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
UBSAN: shift-out-of-bounds in vhci_hub_control usb C unreliable 4 1409d 1445d 19/28 1369d 718bf42b119d usb: usbip: vhci_hcd: protect shift size
general protection fault in tower_disconnect usb C 53 1452d 1460d 19/28 1369d b175d273d4e4 USB: legotower: fix logical error in recent commit
memory leak in wacom_probe input usb C 26 1432d 1486d 19/28 1369d 37309f47e2f5 HID: wacom: Fix memory leakage caused by kfifo_alloc
KASAN: use-after-free Read in service_outstanding_interrupt usb C 28 1428d 1583d 19/28 1369d 5e5ff0b4b6bc USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
WARNING in cm109_input_ev/usb_submit_urb input usb C unreliable 8 1457d 1478d 19/28 1369d 82e060904732 Input: cm109 - do not stomp on control URB
memory leak in gadget_setup usb C 49 1489d 1506d 15/28 1478d 129aa9734559 usb: raw-gadget: fix memory leak in gadget_setup
memory leak in gadget_bind usb C 62 1489d 1506d 15/28 1478d 129aa9734559 usb: raw-gadget: fix memory leak in gadget_setup
INFO: task hung in wdm_flush usb C 38294 1559d 1944d 15/28 1482d 37d2a36394d9 USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
KMSAN: uninit-value in batadv_hard_if_event (2) batman usb C 162 1498d 1581d 15/28 1482d f45a4248ea4c net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
WARNING in ati_remote_sendpacket/usb_submit_urb usb media C 22 1653d 1964d 15/28 1482d a8be80053ea7 media: ati_remote: sanity check for both endpoints
general protection fault in vmk80xx_write_packet usb staging C 82 1522d 1978d 15/28 1482d e1f13c879a7c staging: comedi: check validity of wMaxPacketSize of usb endpoints found
INFO: trying to register non-static key in del_timer_sync (2) wireless usb C 1206 2014d 2066d 15/28 1482d 621a3a8b1c0e mwifiex: don't call del_timer_sync() on uninitialized timer
KASAN: slab-out-of-bounds Read in read_descriptors (2) usb 1 1569d 1565d 15/28 1520d a18cd6c9b6bc usb: core: fix slab-out-of-bounds Read in read_descriptors
KASAN: slab-out-of-bounds Read in prism2sta_probe_usb staging usb C 8 1560d 1591d 15/28 1520d fea22e159d51 staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
KASAN: slab-out-of-bounds Write in hiddev_ioctl_usage input usb C 279 1562d 1905d 15/28 1535d 25a097f52046 HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
WARNING in slab_pre_alloc_hook usb C 210 1559d 1580d 15/28 1535d f176ede3a3bd USB: yurex: Fix bad gfp argument
KMSAN: kernel-infoleak in raw_ioctl usb C 22 1557d 1581d 15/28 1535d a092b7233f0e net: usb: Fix uninit-was-stored issue in asix_read_phy_addr()
WARNING in r871xu_dev_remove usb staging C 47375 1582d 1934d 15/28 1543d b4383c971bc5 staging: rtl8712: handle firmware load failure
general protection fault in cdev_del usb fs C 315 1552d 2020d 15/28 1543d e911e99a0770 usb: hso: check for return value in hso_serial_common_create()
WARNING in submit_rx_urb/usb_submit_urb usb staging C 397 1594d 2019d 15/28 1543d faaff9765664 staging: wlan-ng: properly check endpoint types
KASAN: use-after-free Read in ax88172a_unbind usb C done 2723 1594d 1835d 15/28 1543d c28d9a285668 ax88172a: fix ax88172a_unbind() failures
WARNING in submit_audio_out_urb/usb_submit_urb sound usb syz 2 1612d 1612d 15/28 1543d 6e8a914ad619 ALSA: line6: Perform sanity check for each URB creation
WARNING in snd_usbmidi_submit_urb/usb_submit_urb usb alsa C done 42 1626d 1650d 15/28 1543d 9b7e5208a941 ALSA: usb-audio: Fix race against the error recovery URB submission
general protection fault in go7007_usb_probe usb media C 2103 1582d 1691d 15/28 1543d 137641287eb4 go7007: add sanity checking for endpoints
WARNING in snd_usbmidi_input_start/usb_submit_urb usb alsa C done 231 1603d 1646d 15/28 1543d 9b7e5208a941 ALSA: usb-audio: Fix race against the error recovery URB submission
BUG: unable to handle kernel NULL pointer dereference in schedule_timeout usb 1 1625d 1625d 15/28 1604d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id usb sound C done 39 1623d 1628d 15/28 1604d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
KASAN: slab-out-of-bounds Write in snd_usb_mixer_interrupt sound usb C done 5 1626d 1628d 15/28 1604d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
INFO: task hung in locks_remove_posix fs input usb syz 2231 1639d 1662d 15/28 1604d 187b96db5ca7 x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
KASAN: use-after-free Read in usblp_bulk_read usb 7 1613d 1691d 15/28 1604d 296a193b0612 usblp: poison URBs upon disconnect
WARNING in usbhid_raw_request/usb_submit_urb (3) usb syz 18 1683d 1789d 15/28 1604d ac854131d984 USB: core: Fix misleading driver bug report
KASAN: slab-out-of-bounds Read in garmin_read_process usb C 1 1722d 1722d 15/28 1604d e9b3c610a05c USB: serial: garmin_gps: add sanity checking for data length
KASAN: use-after-free Read in usbhid_close (3) input usb C 6 1678d 1705d 15/28 1604d 0ed08faded1d HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
BUG: unable to handle kernel NULL pointer dereference in udc_bind_to_driver usb 1 1632d 1632d 15/28 1604d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
WARNING in wa_nep_create/usb_submit_urb usb staging C 114 1693d 1977d 15/28 1623d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
WARNING in hwarc_neep_init/usb_submit_urb staging usb C 1 1727d 1727d 15/28 1623d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
BUG: corrupted list in __uwb_rc_neh_rm staging usb C 9 1699d 1734d 15/28 1623d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
KASAN: use-after-free Read in chaoskey_disconnect crypto usb C 44 1837d 1865d 15/28 1633d 93ddb1f56ae1 USB: chaoskey: fix use-after-free on release
KASAN: slab-out-of-bounds Read in edge_interrupt_callback usb C 1 1721d 1720d 15/28 1672d 57aa9f294b09 USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback
KASAN: slab-out-of-bounds Read in hfa384x_usbin_callback staging usb C 1 1723d 1723d 15/28 1672d 1165dd73e811 staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback
BUG: soft lockup in sys_exit_group usb C 6 1722d 1745d 15/28 1697d d683469b3c93 ALSA: line6: Fix endless MIDI read loop
KASAN: use-after-free Write in hiddev_disconnect input usb 20 1725d 1789d 15/28 1697d 5c02c447eaed HID: hiddev: Fix race in in hiddev_disconnect()
WARNING in _chaoskey_fill/usb_submit_urb usb C 15 1849d 1902d 15/28 1732d 92aa5986f4f7 USB: chaoskey: fix error case of a timeout
WARNING in flexcop_usb_probe/usb_submit_urb usb media C 4 1898d 1935d 15/28 1732d 1b976fc6d684 media: b2c2-flexcop-usb: add sanity checking
KMSAN: uninit-value in sd_init (2) media usb C 94 1860d 1856d 15/28 1754d de89d0864f66 media: gspca: zero usb_buf
KMSAN: uninit-value in digitv_rc_query media usb C 4 1873d 1856d 15/28 1754d eecc70d22ae5 media: digitv: don't continue if remote control state can't be read 569bc8d6a6a5 media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
KMSAN: uninit-value in number media usb C 190 1758d 1856d 15/28 1754d 51d0c99b391f media: af9005: uninitialized variable printked
KMSAN: uninit-value in i2c_w (2) media usb C 3 1867d 1856d 15/28 1754d de89d0864f66 media: gspca: zero usb_buf
KMSAN: uninit-value in read_sensor_register (2) media usb C 44 1861d 1879d 15/28 1754d de89d0864f66 media: gspca: zero usb_buf
WARNING in dln2_start_rx_urbs/usb_submit_urb usb C 44 1769d 1858d 15/28 1754d 2b8bd606b1e6 mfd: dln2: More sanity checking for endpoints
KASAN: slab-out-of-bounds Read in hid_field_extract input usb C 6 1795d 1828d 15/28 1754d 8ec321e96e05 HID: Fix slab-out-of-bounds read in hid_field_extract
WARNING: ODEBUG bug in rsi_probe usb wireless C 10487 1768d 2064d 15/28 1754d 92aafe77123a rsi: fix use-after-free on probe errors
WARNING in uvc_scan_chain_forward usb media C 6 1794d 1818d 15/28 1754d 68035c80e129 media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
general protection fault in gigaset_probe staging usb C 6 1843d 1962d 15/28 1759d 53f35a39c386 staging: gigaset: fix general protection fault on probe
KASAN: slab-out-of-bounds Read in build_audio_procunit (2) sound usb C 1 1858d 1857d 15/28 1780d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
KMSAN: uninit-value in usbnet_probe usb C 1 2012d 2012d 15/28 1796d 78226f6eaac8 net: usb: asix: init MAC address buffers
KASAN: global-out-of-bounds Write in kbd_event serial input usb C 6 1836d 1858d 15/28 1822d b2b2dd71e085 tty: vt: keyboard: reject invalid keycodes
general protection fault in flexcop_usb_probe usb media C 403 1836d 2066d 15/28 1822d 1b976fc6d684 media: b2c2-flexcop-usb: add sanity checking
kernel BUG at kernel/time/timer.c:LINE! (4) media usb syz 1 1891d 1888d 15/28 1822d f3f5ba42c58d media: imon: invalid dereference in imon_touch_event
KASAN: use-after-free Read in appledisplay_bl_get_brightness usb C 1 1904d 1902d 15/28 1822d 91feb01596e5 appledisplay: fix error handling in the scheduled work
INFO: trying to register non-static key in ida_destroy usb media C 4272 1835d 1958d 15/28 1822d 8c279e9394ca media: uvcvideo: Fix error path in control parsing failure
general protection fault in snd_usb_create_mixer sound usb C 1 1844d 1843d 15/28 1822d 9435f2bb6687 ALSA: usb-audio: Fix NULL dereference at parsing BADD
general protection fault in usb_set_interface usb C 3 1906d 1909d 15/28 1822d c7a191464078 media: usbvision: Fix invalid accesses after device disconnect
WARNING in port100_send_cmd_async/usb_submit_urb usb nfc C 83 1836d 1977d 15/28 1824d 5f9f0b11f081 nfc: port100: handle command failure cleanly
KMSAN: uninit-value in ax88172a_bind usb C 5 1867d 1880d 14/28 1835d a9a51bd727d1 ax88172a: fix information leak on short answers
KMSAN: use-after-free in build_audio_procunit usb sound C 2 1873d 1873d 14/28 1835d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
KMSAN: uninit-value in get_min_max_with_quirks sound usb C 11 1868d 1856d 14/28 1835d 167beb175679 ALSA: usb-audio: Fix missing error check at mixer resolution test
WARNING: ODEBUG bug in input_ff_destroy usb input C 6 1843d 1851d 14/28 1835d fa3a5a1880c9 Input: ff-memless - kill timer in destroy()
KMSAN: uninit-value in cdc_ncm_set_dgram_size usb C 4 1866d 1865d 14/28 1835d 332f989a3b00 CDC-NCM: handle incomplete transfer of MTU
KASAN: use-after-free Read in mcba_usb_disconnect can usb C 2 1862d 1895d 14/28 1835d 4d6636498c41 can: mcba_usb: fix use-after-free on disconnect
KMSAN: kernel-usb-infoleak in pcan_usb_wait_rsp usb C 2 1879d 1879d 14/28 1835d f7a1337f0d29 can: peak_usb: fix slab info leak
KASAN: invalid-free in rsi_91x_deinit usb wireless C 109 1908d 2055d 13/28 1836d 8b51dc729147 rsi: fix a double free bug in rsi_91x_deinit()
KMSAN: use-after-free in adu_disconnect usb C 16 1881d 1887d 13/28 1837d 44efc269db79 USB: adutux: fix use-after-free on disconnect
KMSAN: use-after-free in mutex_spin_on_owner usb C 1 1886d 1886d 13/28 1837d edc4746f253d USB: iowarrior: fix use-after-free on disconnect
KMSAN: use-after-free in iowarrior_disconnect usb C 21 1881d 1887d 13/28 1837d edc4746f253d USB: iowarrior: fix use-after-free on disconnect
KMSAN: use-after-free in usb_autopm_put_interface usb C 63 1867d 1881d 13/28 1837d 7a7591979748 USB: usblp: fix use-after-free on disconnect
KMSAN: use-after-free in __pm_runtime_resume usb 1 1887d 1887d 13/28 1837d 5f9242775bb6 HID: logitech: Fix general protection fault caused by Logitech driver
KMSAN: uninit-value in lg4ff_set_autocenter_default input usb C 1 1868d 1867d 13/28 1838d d9d4b1e46d95 HID: Fix assumption that devices have inputs
divide error in dummy_timer usb C 3 1866d 1871d 13/28 1842d 54f83b8c8ea9 USB: gadget: Reject endpoints with 0 maxpacket value
INFO: task hung in ld_usb_write usb C 831 1860d 1873d 13/28 1842d 52403cfbc635 USB: ldusb: fix control-message timeout
KASAN: use-after-free Read in iowarrior_disconnect usb C 3056 1881d 1937d 13/28 1844d edc4746f253d USB: iowarrior: fix use-after-free on disconnect
divide error in usbtmc_generic_read usb C 2 1942d 1942d 13/28 1844d de7b9aa633b6 usbtmc: more sanity checking for packet size
KASAN: use-after-free Read in vhci_hub_control usb C done 41 2242d 2287d 13/28 1844d 81f7567c51ad usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
KASAN: slab-out-of-bounds Read in ld_usb_read (3) usb C 74 1868d 1879d 13/28 1858d 7a6f22d7479b USB: ldusb: fix read info leaks
KASAN: slab-out-of-bounds Read in build_audio_procunit usb sound C 6 1864d 1873d 13/28 1858d ba8bf0967a15 ALSA: usb-audio: Fix copy&paste error in the validator
KASAN: use-after-free Read in usb_autopm_put_interface usb C 2373 1867d 1880d 13/28 1858d 7a7591979748 USB: usblp: fix use-after-free on disconnect
KMSAN: uninit-value in sr9800_bind usb C 27 1869d 1892d 13/28 1860d 77b6d09f4ae6 net: usb: sr9800: fix uninitialized local variable
KASAN: use-after-free Read in pn533_send_complete nfc usb C 4 1867d 1888d 13/28 1860d 6af3aa57a098 NFC: pn533: fix use-after-free and memleaks
possible deadlock in usb_deregister_dev (2) usb C 956 1881d 1909d 13/28 1868d 33a7813219f2 USB: legousbtower: fix deadlock on disconnect
KMSAN: uninit-value in mts_usb_probe usb C 29 1887d 1893d 13/28 1868d 177238c3d47d USB: microtek: fix info-leak at probe
KMSAN: uninit-value in iowarrior_disconnect usb C 18 1885d 1892d 13/28 1868d edc4746f253d USB: iowarrior: fix use-after-free on disconnect
KASAN: use-after-free Read in adu_disconnect usb C 5304 1881d 1951d 13/28 1868d 44efc269db79 USB: adutux: fix use-after-free on disconnect
INFO: rcu detected stall in dummy_timer usb C 16 1882d 1947d 13/28 1868d 32a0721c6620 USB: yurex: Don't retry on unexpected errors
KASAN: invalid-free in disconnect_rio (2) usb C 51 1885d 1906d 13/28 1868d 015664d15270 USB: rio500: Remove Rio 500 kernel driver
WARNING in em28xx_usb_disconnect usb media C 8 1914d 1947d 13/28 1880d 46e4a26615cc media: em28xx: modules workqueue not inited for 2nd device
KASAN: use-after-free Read in si470x_int_in_callback usb media C 25 1889d 1978d 13/28 1880d 0d616f2a3fdb media: radio/si470x: kill urb on error
general protection fault in ath6kl_usb_alloc_urb_from_pipe usb wireless C 1160 1906d 2066d 13/28 1880d 39d170b3cb62 ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
KMSAN: uninit-value in read_sensor_register media usb C 25 1880d 2010d 13/28 1880d 4843a543fad3 media: gspca: zero usb_buf on error
KMSAN: kernel-usb-infoleak in ttusb_dec_send_command usb C 2 1947d 1957d 13/28 1880d a10feaf8c464 media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
KASAN: use-after-free Read in atusb_disconnect usb wpan C 112 1881d 1922d 13/28 1880d 7fd25e6fc035 ieee802154: atusb: fix use-after-free at disconnect
KASAN: slab-out-of-bounds Read in hdpvr_probe usb media C 10 1916d 1992d 13/28 1880d 8b8900b729e4 media: hdpvr: add terminating 0 at end of string
KASAN: global-out-of-bounds Read in load_next_firmware_from_table usb libertas C 5 1928d 1978d 13/28 1880d 764f3f1ecffc libertas: Add missing sentinel at end of if_usb.c fw_table
divide error in usbnet_update_max_qlen usb C 17 1897d 1909d 13/28 1880d 280ceaed79f1 usbnet: sanity checking of packet sizes and device mtu
KASAN: slab-out-of-bounds Read in technisat_usb2_rc_query usb media C 2236 1926d 2064d 13/28 1880d 0c4df39e504b media: technisat-usb2: break out of loop at end of buffer
KASAN: global-out-of-bounds Read in dvb_pll_attach media usb C 2 1917d 1977d 13/28 1880d c268e7adea52 media: dvb-frontends: use ida for pll number
general protection fault in pk_probe input usb C 2 1926d 1922d 13/28 1880d 98375b86c791 HID: prodikeys: Fix general protection fault during probe
KASAN: global-out-of-bounds Read in hdpvr_probe usb media C 15 1933d 2046d 13/28 1880d d4a6a9537bc3 media: hdpvr: Add device num check and handling
WARNING: ODEBUG bug in usbhid_disconnect (2) input usb C 48 1900d 1922d 13/28 1880d 2bcdacb70327 HID: sony: Fix memory corruption issue on cleanup.
KASAN: slab-out-of-bounds Read in usb_reset_and_verify_device usb syz 1 1930d 1922d 13/28 1880d 3dd550a2d365 USB: usbcore: Fix slab-out-of-bounds bug during device reset
KMSAN: uninit-value in i2c_w usb media C 2 2014d 2013d 13/28 1880d 4843a543fad3 media: gspca: zero usb_buf on error
possible deadlock in open_rio (3) usb C 169 1906d 1908d 13/28 1880d 9472aff16ca0 USB: rio500: Fix lockdep violation
WARNING in zd_mac_clear usb wireless C 13194 1906d 2066d 13/28 1880d 7a2eb7367fde zd1211rw: remove false assertion from zd_mac_clear()
KMSAN: uninit-value in sd_init media usb C 122 1880d 2013d 13/28 1880d 4843a543fad3 media: gspca: zero usb_buf on error
WARNING in iguanair_probe/usb_submit_urb media usb C 3 1911d 1961d 13/28 1880d ab1cbdf159be media: iguanair: add sanity checks
general protection fault in __pm_runtime_resume input usb pm C 197 1900d 1963d 13/28 1880d 5f9242775bb6 HID: logitech: Fix general protection fault caused by Logitech driver
divide error in cdc_ncm_update_rxtx_max usb C 5 1895d 1909d 13/28 1880d 3fe4b3351301 cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
possible deadlock in open_rio usb 1107 1918d 1955d 12/28 1918d 2ca359f4f8b9 Revert "USB: rio500: simplify locking"
possible deadlock in usb_deregister_dev usb C 82 1944d 1951d 12/28 1919d c468a8aa790e usb: iowarrior: fix deadlock on disconnect
WARNING in __iforce_usb_xmit/usb_submit_urb usb input C 3 1947d 1951d 12/28 1919d 849f5ae3a513 Input: iforce - add sanity checks
WARNING in kbtab_open/usb_submit_urb usb C 5 1946d 1964d 12/28 1919d c88090dfc842 Input: kbtab - sanity check for endpoint type
WARNING in usbtouch_open input usb C 768 1944d 1958d 12/28 1919d b55d996f057b Input: usbtouchscreen - initialize PM mutex before using it
KASAN: use-after-free Read in usb_free_coherent usb 310 1944d 1955d 12/28 1919d fc05481b2fca usb: yurex: Fix use-after-free in yurex_delete
KASAN: use-after-free Read in ld_usb_release usb C 14 1938d 1947d 12/28 1919d 303911cfc5b9 USB: core: Fix races in character device registration and deregistraion
KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind net usb C 2 1942d 1944d 12/28 1919d 54364278fb3c USB: CDC: fix sanity checks in CDC union parser
KASAN: use-after-free Read in device_release_driver_internal usb C 5 1940d 1964d 12/28 1919d c52873e5a1ef usb: cdc-acm: make sure a refcount is taken early enough
WARNING in wdm_write/usb_submit_urb usb C 15 1923d 1937d 12/28 1919d 1426bd2c9f7e USB: cdc-wdm: fix race between write and disconnect due to flag abuse
KMSAN: kernel-usb-infoleak in pcan_usb_pro_send_req usb C 16 1932d 1957d 12/28 1929d 30a8beeb3042 can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
KASAN: use-after-free Read in hiddev_release input usb C 11 1940d 1955d 12/28 1929d 9c09b214f30e HID: hiddev: avoid opening a disconnected device 6d4472d7bec3 HID: hiddev: do cleanup in failure of opening a device
KMSAN: kernel-usb-infoleak in pcan_usb_pro_init usb C 13 1933d 1957d 12/28 1929d ead16e53c2f0 can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
WARNING in gpio_to_desc usb gpio C 3 1947d 1977d 12/28 1929d c3953a3c2d31 NFC: nfcmrvl: fix gpio-handling regression
KMSAN: uninit-value in read_eprom_word usb C 31 1931d 1957d 12/28 1929d 224c04973db1 net: usb: pegasus: fix improper read if get_registers() fail
general protection fault in snd_usb_pipe_sanity_check usb sound C 72 1944d 1958d 12/28 1943d 5d78e1c2b7f4 ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
KASAN: stack-out-of-bounds Read in hfcsusb_probe usb isdn4linux C 634 1958d 2064d 12/28 1943d f384e62a82ba ISDN: hfcsusb: checking idx of ep configuration
kernel BUG at drivers/usb/wusbcore/wusbhc.c:LINE! usb C 1 1964d 1964d 12/28 1943d f90bf1ece48a usb: wusbcore: fix unbalanced get/put cluster_id
WARNING: Support for this device (Terratec Grabster AV400) is experimental. usb C 371 1958d 2048d 12/28 1951d 1753c7c4367a media: pvrusb2: use a different format for warnings
KMSAN: uninit-value in ax88772_bind usb C 80 1953d 2014d 12/28 1951d 78226f6eaac8 net: usb: asix: init MAC address buffers
KASAN: use-after-free Read in cpia2_usb_disconnect usb media C 3 1978d 2062d 12/28 1951d eff73de2b160 media: cpia2_usb: first wake up, then free in disconnect
WARNING in __flush_work (3) usb C 1251 1954d 2064d 12/28 1951d 11a087f484bf media: uvcvideo: Fix access to uninitialized fields on probe error
KASAN: use-after-free Read in dvb_usb_device_exit usb C 825 1952d 2066d 12/28 1951d 6cf97230cd5f media: dvb: usb: fix use after free in dvb_usb_device_exit
INFO: trying to register non-static key in rtl_c2hcmd_launcher usb wireless C 48950 1958d 2066d 12/28 1951d 6c0ed66f1a5b rtlwifi: rtl8192cu: fix error handle when usb probe failed
KASAN: null-ptr-deref Read in zr364xx_vidioc_querycap usb media C 76 1958d 2049d 12/28 1951d 5d2e73a5f80a media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
WARNING: ath10k USB support is incomplete, don't expect anything to work! usb C 347 1959d 2039d 12/28 1951d 265df32eae58 ath10k: Change the warning message string
KASAN: use-after-free Read in v4l2_release usb media C 275 1959d 2063d 12/28 1951d c666355e60dd media: radio-raremono: change devm_k*alloc to k*alloc
WARNING: Detected a wedged cx25840 chip; the device will not work. usb C 62 1959d 2048d 12/28 1951d 1753c7c4367a media: pvrusb2: use a different format for warnings
WARNING in snd_usb_motu_microbookii_communicate/usb_submit_urb usb C 3 1968d 2006d 12/28 1951d 801ebf1043ae ALSA: usb-audio: Sanity checks for each pipe and EP types
KASAN: use-after-free Read in p54u_load_firmware_cb wireless usb syz 40 1959d 2042d 12/28 1951d 6e41e2257f10 p54usb: Fix race between disconnect and firmware loading
KASAN: global-out-of-bounds Read in qmi_wwan_probe usb C 2 1981d 1993d 12/28 1958d 904d88d743b0 qmi_wwan: Fix out-of-bounds read
KASAN: null-ptr-deref Write in submit_audio_out_urb (2) usb C 3423 1958d 1990d 12/28 1958d 3450121997ce ALSA: line6: Fix write on zero-sized buffer
WARNING: proc registration bug in snd_info_card_register usb sound C 453 2022d 2066d 12/28 1993d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
general protection fault in sisusb_probe usb C 3 2036d 2039d 12/28 1997d 9a5729f68d3a USB: sisusbvga: fix oops in error path of sisusb_probe
KASAN: slab-out-of-bounds Write in usb_get_bos_descriptor usb syz 3 2025d 2038d 12/28 1997d a03ff5446081 USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
KASAN: invalid-free in disconnect_rio usb C 180 2021d 2066d 12/28 1997d 3864d33943b4 USB: rio500: refuse more than one device at a time
general protection fault in smsusb_init_device media usb C 23 2021d 2060d 12/28 1997d 31e0456de5be media: usb: siano: Fix general protection fault in smsusb
KASAN: null-ptr-deref Write in submit_audio_out_urb sound usb C 185 2006d 2021d 12/28 1999d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
INFO: task hung in usb_kill_urb usb C 1515 2061d 2066d 12/28 2003d 50896c410354 USB: dummy-hcd: Fix failure to give back unlinked URBs USB: dummy-hcd: Fix failure to give back unlinked URBs
general protection fault in __dev_printk usb C 300 2048d 2061d 12/28 2021d ef61eb43ada6 USB: yurex: Fix protection fault after device removal
INFO: trying to register non-static key in vmk80xx_detach staging usb C 1528 2021d 2066d 12/28 2021d 08b7c2f9208f staging: comedi: vmk80xx: Fix use of uninitialized semaphore
INFO: trying to register non-static key in ni6501_detach staging usb C 127 2022d 2064d 12/28 2021d 660cf4ce9d0f staging: comedi: ni_usb6501: Fix use of uninitialized mutex
KASAN: use-after-free Read in snd_info_free_entry usb sound C 47 2033d 2064d 12/28 2021d 2a3f7221acdd ALSA: core: Fix card races between register and disconnect 8c2f870890fd ALSA: info: Fix racy addition/deletion of nodes
KASAN: slab-out-of-bounds Read in ds_probe usb C 5 2023d 2061d 12/28 2021d c114944d7d67 USB: w1 ds2490: Fix bug caused by improper use of altsetting array
KASAN: stack-out-of-bounds Read in string usb C 46 2055d 2066d 12/28 2033d c01c348ecdc6 USB: core: Fix unterminated string returned by usb_string()
WARNING in usb_submit_urb (4) usb syz done 46 2034d 2223d 12/28 2033d c2b71462d294 USB: core: Fix bug caused by duplicate interface PM usage counter
KASAN: invalid-free in hub_event usb 1 2203d 2203d 11/28 2181d d81bb019d7bb USB: Fix invalid-free bug in port_over_current_notify()
WARNING in usb_submit_urb (3) usb C 58 2232d 2248d 11/28 2231d 665c365a77fb USB: fix the usbfs flag sanitization for control transfers
KASAN: slab-out-of-bounds Read in vhci_hub_control usb C 43 2241d 2286d 11/28 2231d 81f7567c51ad usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
general protection fault in usb_find_alt_setting (2) usb C 53 2265d 2287d 11/28 2249d c9a4cb204e9e USB: handle NULL config in usb_find_alt_setting()
KASAN: use-after-free Read in destroy_async_on_interface usb C 134 2265d 2287d 11/28 2249d bd729f9d67aa USB: fix error handling in usb_driver_claim_interface()
WARNING in usb_submit_urb (2) usb C 259 2249d 2287d 11/28 2249d 7a68d9fb8510 USB: usbdevfs: sanitize flags more
KASAN: use-after-free Read in mon_bin_vma_fault usb 7 2525d 2536d 4/28 2498d 46eb14a6e158 USB: fix usbmon BUG trigger
BUG: Bad page state (3) usb C 3 2525d 2532d 4/28 2500d 46eb14a6e158 USB: fix usbmon BUG trigger
WARNING in usb_submit_urb usb C 2 2595d 2587d 4/28 2500d 446f666da9f0 USB: usbfs: Filter flags passed in from user space
kernel BUG at ./include/linux/mm.h:LINE! (3) usb C 621 2520d 2537d 3/28 2515d 46eb14a6e158 USB: fix usbmon BUG trigger