syzbot

 sign-in | mailing list | source | docs
🐞 Open [1437]
≡ Subsystems
🐞 Fixed [6754]
🐞 Invalid [17402]
⬇ Missing Backports [222]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

Applied filters: Manager=ci2-upstream-usb (drop) Label=subsystems:usb (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: slab-use-after-free Read in btusb_disconnect usb bluetooth 19 C 5 57d 143d 1/29 never 23d22f2f7176 Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
KASAN: slab-use-after-free Read in hdm_disconnect usb 19 C error 18706 26d 483d 29/29 6d11h 4b1270902609 most: usb: Fix use-after-free in hdm_disconnect
WARNING in media_create_pad_link (2) usb media -1 C error done 11 47d 250d 29/29 10d 0e2ee70291e6 media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
INFO: rcu detected stall in dummy_timer (4) usb 1 C inconclusive done 25 73d 1234d 29/29 10d eecd203ada43 media: imon: make send_packet() more robust
WARNING in rtl8150_start_xmit/usb_submit_urb usb net -1 C 5 66d 87d 29/29 25d 958baf5eaee3 net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb 19 C 1144 47d 353d 29/29 46d b56cc41a3ae7 hid: fix I2C read buffer overflow in raw_event() for mcp2221
WARNING in usbnet_status_start usb -1 C 349 126d 139d 29/29 81d 4c4ca3c46167 usb: net: sierra: check for no status endpoint
UBSAN: shift-out-of-bounds in s32ton (2) input usb -1 C 4 126d 133d 29/29 81d a6b87bfc2ab5 HID: core: Harden s32ton() against conversion to 0 bits
WARNING in ath6kl_bmi_get_target_info (2) usb wireless -1 C error 10349 142d 480d 29/29 110d e7417421d893 wifi: ath6kl: remove WARN on bad firmware input
UBSAN: shift-out-of-bounds in __kfifo_alloc usb input -1 C 33349 170d 238d 29/29 139d 6bf8ab7774a2 HID: wacom: fix shift OOB in kfifo allocation for zero pktlen
UBSAN: array-index-out-of-bounds in usbhid_parse usb 15 C error 89 173d 770d 29/29 139d fe7f7ac8e0c7 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
WARNING in usbnet_start_xmit/usb_submit_urb (2) usb -1 C error 10 278d 617d 28/29 167d 1cf9631d836b usbnet: gl620a: fix endpoint checking in genelink_bind()
general protection fault in ir_raw_event_store_with_filter usb media 24 C error 879 287d 2084d 28/29 167d f656cfbc7a29 media: streamzap: fix race between device disconnection and urb callback
WARNING in cxacru_cm/usb_submit_urb (2) usb -1 C 8 281d 291d 28/29 167d c90aad369899 usb: atm: cxacru: fix a flaw in existing endpoint checks
KASAN: slab-use-after-free Read in steam_input_open input usb 19 C done 5 261d 275d 28/29 167d e53fc232a65f HID: hid-steam: Fix use-after-free when detaching device
KASAN: stack-out-of-bounds Read in usb_check_int_endpoints usb 17 C 61 238d 301d 28/29 167d 0b43d98ff29b HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
WARNING in rtl8150_open/usb_submit_urb usb -1 C 5 294d 447d 28/29 202d 90b7f2961798 net: usb: rtl8150: enable basic endpoint checking
WARNING in thrustmaster_probe/usb_submit_urb usb -1 C 25 307d 408d 28/29 202d 50420d7c79c3 HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
possible deadlock in chaoskey_release usb 4 C 90 406d 411d 28/29 202d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
WARNING in uvc_status_unregister usb media -1 C done 61256 293d 400d 28/29 202d a67f75c2b5ec media: uvcvideo: Fix deadlock during uvc_probe
INFO: rcu detected stall in hub_event usb 1 C done 1233 202d 2195d 28/29 202d 64f2657b5793 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
possible deadlock in chaoskey_open usb 4 C 475 406d 411d 28/29 202d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
possible deadlock in usb_deregister_dev (3) usb 4 C 103 406d 411d 28/29 202d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
WARNING in media_create_pad_link usb media -1 C done done 104 368d 2019d 28/29 343d 3dd075fe8ebb media: uvcvideo: Require entities to have a non-zero unique ID
INFO: task hung in usb_port_suspend usb 1 C 12 399d 409d 28/29 376d 5189df7b8088 USB: gadget: dummy-hcd: Fix "task hung" problem
KASAN: use-after-free Read in rtw_load_firmware_cb usb wireless 19 C 848 423d 487d 28/29 398d 0e735a4c6137 wifi: rtw88: always wait for both firmware loading attempts
INFO: task hung in uevent_show usb 1 C done 9704 469d 530d 28/29 398d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
INFO: rcu detected stall in __mod_timer (5) usb 1 C error done 10 476d 540d 28/29 399d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
possible deadlock in touch_wq_lockdep_map usb 4 C 1208 422d 618d 28/29 417d ccbde4b128ef char: xillybus: Don't destroy workqueue from work item running on it
KASAN: slab-out-of-bounds Read in cougar_report_fixup input usb 17 C 31 448d 481d 28/29 417d a6e9c391d45b HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
WARNING in implement input usb -1 C error done 960 531d 2261d 26/29 480d 4aa2dcfbad53 HID: core: remove unnecessary WARN_ON() in implement()
WARNING in kcov_remote_start (4) usb -1 107983 502d 533d 26/29 502d f85d39dd7ed8 kcov, usb: disable interrupts in kcov_remote_start_usb_softirq
INFO: rcu detected stall in raw_ioctl usb 1 C 49 509d 755d 26/29 503d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
KMSAN: uninit-value in asus_report_fixup input usb 17 C done 35 524d 549d 26/29 503d 89e1ee118d6f hid: asus: asus_report_fixup: fix potential read out of bounds
WARNING in cxacru_cm/usb_submit_urb usb -1 C error inconclusive 14 521d 2090d 26/29 503d 2eabb655a968 usb: atm: cxacru: fix endpoint checking in cxacru_bind()
WARNING in kcov_remote_start (3) usb -1 265513 537d 606d 25/29 537d 19e35f24750d nfc: nci: Fix kcov check in nci_rx_work()
WARNING in ar5523_cmd/usb_submit_urb usb wireless -1 C error 39 570d 2126d 25/29 537d e120b6388d7d wifi: ar5523: enable proper endpoint verification
WARNING in carl9170_usb_send_rx_irq_urb/usb_submit_urb usb wireless -1 C error inconclusive 18 581d 1725d 25/29 537d b6dd09b3dac8 wifi: carl9170: add a proper sanity check for endpoints
KASAN: slab-use-after-free Read in pvr2_context_set_notify usb pvrusb2 24 C 3814 664d 870d 25/29 664d ded85b0c0edd media: pvrusb2: fix use after free on context disconnection
KASAN: use-after-free Read in __media_entity_remove_links usb media 19 C 7 2072d 2170d 25/29 691d 68035c80e129 media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
UBSAN: shift-out-of-bounds in set_flicker usb media -1 syz 5 749d 830d 25/29 704d 099be1822d1f media: gspca: cpia1: shift-out-of-bounds in set_flicker
WARNING in usbnet_start_xmit/usb_submit_urb usb -1 C done 92 887d 1470d 23/29 774d 5e1627cb43dd net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
WARNING in dlfb_submit_urb/usb_submit_urb (2) fbdev usb -1 C 2 925d 921d 22/29 877d ed9de4ed3987 fbdev: udlfb: Fix endpoint check
WARNING in __usbnet_read_cmd/usb_submit_urb usb -1 C error 5 1022d 1053d 22/29 896d 93fd565919cf net: USB: Fix wrong-direction WARNING in plusb.c net: USB: Fix wrong-direction WARNING in plusb.c
WARNING in sisusb_send_bulk_msg/usb_submit_urb usb -1 C unreliable 418 951d 2337d 22/29 900d df05a9b05e46 USB: sisusbvga: Add endpoint checks
WARNING in pegasus_open/usb_submit_urb input usb -1 C 7 980d 1991d 22/29 900d b3d80fd27a3c Input: pegasus-notetaker - check pipe type when probing
WARNING in shark_write_reg/usb_submit_urb usb -1 C error 63 949d 2323d 22/29 900d 76e31045ba03 media: radio-shark: Add endpoint checks
WARNING in ath6kl_htc_pipe_rx_complete usb wireless -1 C error 2008 939d 2209d 22/29 900d 75c4a8154cb6 wifi: ath6kl: reduce WARN to dev_dbg() in callback
WARNING in shark_write_val/usb_submit_urb usb -1 C error done 51 957d 2317d 22/29 900d 76e31045ba03 media: radio-shark: Add endpoint checks
possible deadlock in display_open usb 4 C inconclusive 48888 1272d 2299d 22/29 1004d db264d4c66c0 media: imon: reorganize serialization
WARNING in send_packet/usb_submit_urb usb -1 C inconclusive 847 1072d 1238d 22/29 1004d 813ceef062b5 media: imon: fix a race condition in send_packet()
KASAN: slab-out-of-bounds Read in thrustmaster_probe input usb 17 C unreliable 92 1349d 1373d 22/29 1004d fc3ef2e3297b HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
KASAN: use-after-free Read in usb_udc_uevent usb 19 syz error 30 1214d 2001d 22/29 1004d 2191c00855b0 USB: gadget: Fix use-after-free Read in usb_udc_uevent()
KASAN: use-after-free Read in ar5523_cmd_tx_cb usb wireless 19 C inconclusive 372 1100d 1155d 22/29 1004d b6702a942a06 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
WARNING in dlfb_submit_urb/usb_submit_urb usb fbdev -1 C done 481 1077d 2338d 22/29 1004d aaf7dbe07385 video: fbdev: udlfb: properly check endpoint type
KASAN: use-after-free Read in si470x_int_in_callback (2) usb media 19 C error 7303 1072d 2229d 22/29 1004d 7d21e0b1b41b media: si470x: Fix use-after-free in si470x_int_in_callback()
INFO: task hung in scsi_remove_host scsi usb 1 C done 328 1155d 1191d 22/29 1004d 2b36209ca818 scsi: core: Revert "Call blk_mq_free_tag_set() earlier" d94b2d00f7bf scsi: core: Revert "Make sure that hosts outlive targets" f782201ebc2b scsi: core: Revert "Make sure that targets outlive devices" 70e8d057bef5 scsi: core: Revert "Simplify LLD module reference counting"
UBSAN: array-index-out-of-bounds in pvr2_i2c_core_init pvrusb2 usb 15 C inconclusive 4 1288d 1320d 22/29 1004d 471bec68457a media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
WARNING in mcba_usb_probe/usb_submit_urb usb can -1 C error 537 1334d 2329d 22/29 1004d 136bed0bfd3b can: mcba_usb: properly check endpoint type
WARNING: locking bug in hfa384x_usbctlx_completion_task staging usb 4 C 2 1250d 1246d 22/29 1004d ee6c6e734247 staging/wlan-ng: get the correct struct hfa384x in work callback
INFO: task hung in add_early_randomness (2) usb crypto 1 C done 182 1052d 1270d 22/29 1004d 228432551bd8 virtio-rng: make device ready before making request
KASAN: use-after-free Read in driver_register usb 19 C 131 1247d 1298d 22/29 1004d 5f0b5f4d50fa usb: gadget: fix race when gadget driver register via ioctl
WARNING in driver_unregister input usb -1 C 1 1281d 1277d 22/29 1004d f2d8c2606825 usb: gadget: Fix non-unique driver names in raw-gadget driver
WARNING in aiptek_open/usb_submit_urb usb input -1 C error 2380 1340d 2362d 22/29 1004d 5600f6986628 Input: aiptek - properly check endpoint type
INFO: task hung in __input_unregister_device (4) usb input 1 C done 924 1176d 1241d 22/29 1004d 98e01215708b Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
KASAN: out-of-bounds Read in ath9k_hif_usb_rx_cb (3) wireless usb 17 C unreliable done 7 1380d 1784d 20/29 1349d 6ce708f54cc8 ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
KASAN: slab-out-of-bounds Write in betop_probe input usb 23 C unreliable 9 1557d 2113d 20/29 1349d 689e453a9b9c HID: betop: fix slab-out-of-bounds Write in betop_probe HID: betop: fix slab-out-of-bounds Write in betop_probe
divide error in usbnet_start_xmit usb 2 C 760 1481d 1497d 20/29 1357d 397430b50a36 usbnet: sanity check for maxpacket
INFO: trying to register non-static key in mxl111sf_ctrl_msg usb media -1 C 73 2312d 2416d 20/29 1357d 44870a9e7a3c media: mxl111sf: change mutex_init() location
KASAN: use-after-free Read in rtl8712_dl_fw usb staging 19 C 6961 1473d 1497d 20/29 1357d c052cc1a069c staging: rtl8712: fix use-after-free in rtl8712_dl_fw
INFO: trying to register non-static key in ath9k_wmi_event_tasklet wireless usb -1 C unreliable 7 1447d 1624d 20/29 1357d 8b3046abc99e ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
INFO: rcu detected stall in dummy_timer (3) usb 1 C error 132 1371d 1959d 20/29 1357d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
BUG: corrupted list in em28xx_init_extension usb media 8 C error 18 1587d 2132d 20/29 1357d 2c98b8a3458d media: em28xx: add missing em28xx_close_extension
WARNING: held lock freed in spi_unregister_controller spi usb 4 C inconclusive 251 1456d 1497d 20/29 1357d 6c53b45c71b4 spi: fix use-after-free of the add_lock mutex
WARNING in rtl28xxu_ctrl_msg/usb_submit_urb usb -1 C 50 1597d 1645d 20/29 1475d 76f22c93b209 media: rtl28xxu: fix zero-length control request media: rtl28xxu: fix zero-length control request
WARNING in hso_free_net_device usb -1 C error 528 1593d 2274d 20/29 1475d 788e67f18d79 usb: hso: fix error handling code of hso_create_net_device usb: hso: fix error handling code of hso_create_net_device
KASAN: null-ptr-deref Read in phy_disconnect net usb 11 C 255 1542d 1546d 20/29 1475d 1406e8cb4b05 net: usb: asix: do not call phy_disconnect() for ax88178
WARNING in dtv5100_probe/usb_submit_urb usb -1 C 51 1597d 1643d 20/29 1475d 8c8b9a9be2af media: dtv5100: fix control-request directions
WARNING in e2i_init/usb_submit_urb usb -1 4 1616d 1645d 20/29 1475d 41e81022a04a Input: usbtouchscreen - fix control-request directions
WARNING in hid_submit_ctrl/usb_submit_urb input usb -1 C done 38 1541d 1590d 20/29 1475d 0a824efdb724 HID: usbhid: Fix warning caused by 0-length input reports
general protection fault in magicmouse_remove input usb 2 C 47 1625d 1652d 20/29 1475d 4b4f6cecca44 HID: magicmouse: fix NULL-deref on disconnect
WARNING in osif_probe/usb_submit_urb usb -1 C 45 1600d 1645d 20/29 1475d 4ca070ef0dd8 i2c: robotfuzz-osif: fix control-request directions
WARNING in qt2_attach/usb_submit_urb usb -1 C 171 1624d 1645d 20/29 1475d eb8dbe80326c USB: serial: quatech2: fix control-request directions
WARNING in usb_new_device/usb_submit_urb usb -1 C 2 1639d 1635d 20/29 1475d 60dfe484cef4 USB: core: Avoid WARNings for 0-length descriptor requests
WARNING in rtl8152_probe usb -1 C 23 1634d 1657d 20/29 1475d 1a44fb38cc65 r8152: check the informaton of the device
KASAN: use-after-free Read in r871xu_dev_remove usb staging 19 C unreliable 152 1569d 1595d 20/29 1475d e9e6aa51b273 staging: rtl8712: error handling refactoring
KASAN: slab-out-of-bounds Read in snd_usbmidi_get_ms_info sound usb 17 C 10 1654d 1659d 20/29 1475d e84749a78dc8 ALSA: usb-audio: Validate MS endpoint descriptors
WARNING in input_register_device input usb -1 C error done 11 1692d 1844d 20/29 1475d b4104180a2ef kobject_uevent: remove warning in init_uevent_argv()
INFO: task hung in usb_remote_wakeup (2) usb 1 syz inconclusive done 9 1557d 1756d 20/29 1475d 363eaa3a450a usbip: synchronize event handler with sysfs code paths
WARNING in pvr2_i2c_core_done usb fs -1 C error 5780 1597d 2252d 20/29 1475d f8194e5e63fd media: pvrusb2: fix warning in pvr2_i2c_core_done
WARNING: zero-size vmalloc in dvb_dmx_init media usb -1 C 62 1597d 1661d 20/29 1475d c680ed46e418 media: dvb-usb: fix wrong definition
WARNING in __vmalloc_node_range usb media -1 C 7 1662d 1663d 20/29 1475d c680ed46e418 media: dvb-usb: fix wrong definition
general protection fault in drm_client_buffer_vunmap usb dri 2 C unreliable done 247 1718d 1820d 20/29 1686d 874a52f9b693 drm/fb-helper: only unmap if buffer not null
UBSAN: shift-out-of-bounds in mceusb_dev_printdata media usb -1 C error 331 1736d 1804d 20/29 1690d 9dec0f48a75e media: mceusb: sanity check for prescaler value
UBSAN: shift-out-of-bounds in snto32 input usb -1 C error 58 1734d 1806d 20/29 1690d a0312af1f94d HID: core: detect and skip invalid inputs to snto32()
UBSAN: shift-out-of-bounds in mceusb_dev_recv media usb -1 C 13 1736d 1801d 20/29 1690d 1b43bad31fb0 media: mceusb: Fix potential out-of-bounds shift
unexpected kernel reboot (3) input usb -1 C error error 21132 1690d 2690d 20/29 1690d c8e2fe13d1d1 x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
WARNING in spi_register_controller usb spi -1 C 1848 1804d 2418d 19/29 1720d 9c60cc797cf7 media: msi2500: assign SPI bus number dynamically
WARNING in yurex_write/usb_submit_urb usb -1 C error 78 1779d 1807d 19/29 1720d 372c93131998 USB: yurex: fix control-URB timeout handling
UBSAN: shift-out-of-bounds in snd_usbmidi_get_ms_info sound usb -1 C error 9 1778d 1797d 19/29 1720d c06ccf3ebb75 ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
general protection fault in tower_disconnect usb 2 C 53 1804d 1812d 19/29 1720d b175d273d4e4 USB: legotower: fix logical error in recent commit
KASAN: use-after-free Read in service_outstanding_interrupt usb 19 C 28 1780d 1935d 19/29 1720d 5e5ff0b4b6bc USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
INFO: task hung in wdm_flush usb 1 C 38294 1911d 2296d 15/29 1834d 37d2a36394d9 USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
WARNING in ati_remote_sendpacket/usb_submit_urb usb media -1 C 22 2005d 2316d 15/29 1834d a8be80053ea7 media: ati_remote: sanity check for both endpoints
general protection fault in vmk80xx_write_packet usb staging 2 C 82 1874d 2330d 15/29 1834d e1f13c879a7c staging: comedi: check validity of wMaxPacketSize of usb endpoints found
INFO: trying to register non-static key in del_timer_sync (2) wireless usb -1 C 1206 2366d 2418d 15/29 1834d 621a3a8b1c0e mwifiex: don't call del_timer_sync() on uninitialized timer
KASAN: slab-out-of-bounds Read in prism2sta_probe_usb staging usb 17 C 8 1912d 1943d 15/29 1871d fea22e159d51 staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
KASAN: slab-out-of-bounds Write in hiddev_ioctl_usage usb input 23 C 279 1914d 2257d 15/29 1886d 25a097f52046 HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
WARNING in slab_pre_alloc_hook usb -1 C 210 1911d 1932d 15/29 1886d f176ede3a3bd USB: yurex: Fix bad gfp argument
WARNING in r871xu_dev_remove usb staging -1 C 47375 1934d 2286d 15/29 1894d b4383c971bc5 staging: rtl8712: handle firmware load failure
general protection fault in cdev_del usb fs 2 C 315 1904d 2372d 15/29 1894d e911e99a0770 usb: hso: check for return value in hso_serial_common_create()
WARNING in submit_rx_urb/usb_submit_urb usb staging -1 C 397 1946d 2371d 15/29 1894d faaff9765664 staging: wlan-ng: properly check endpoint types
KASAN: use-after-free Read in ax88172a_unbind usb 19 C done 2723 1946d 2186d 15/29 1894d c28d9a285668 ax88172a: fix ax88172a_unbind() failures
WARNING in submit_audio_out_urb/usb_submit_urb usb sound -1 syz 2 1964d 1964d 15/29 1894d 6e8a914ad619 ALSA: line6: Perform sanity check for each URB creation
general protection fault in go7007_usb_probe usb media 2 C 2103 1934d 2042d 15/29 1894d 137641287eb4 go7007: add sanity checking for endpoints
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id usb sound 23 C done 39 1974d 1980d 15/29 1956d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
INFO: task hung in locks_remove_posix fs usb input 1 syz 2231 1991d 2013d 15/29 1956d 187b96db5ca7 x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
KASAN: use-after-free Read in usblp_bulk_read usb 19 7 1965d 2043d 15/29 1956d 296a193b0612 usblp: poison URBs upon disconnect
WARNING in usbhid_raw_request/usb_submit_urb (3) usb -1 syz 18 2035d 2141d 15/29 1956d ac854131d984 USB: core: Fix misleading driver bug report
KASAN: slab-out-of-bounds Read in garmin_read_process usb 17 C 1 2074d 2074d 15/29 1956d e9b3c610a05c USB: serial: garmin_gps: add sanity checking for data length
KASAN: use-after-free Read in usbhid_close (3) input usb 19 C 6 2029d 2057d 15/29 1956d 0ed08faded1d HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
WARNING in wa_nep_create/usb_submit_urb usb staging -1 C 114 2045d 2329d 15/29 1975d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
WARNING in hwarc_neep_init/usb_submit_urb usb staging -1 C 1 2079d 2079d 15/29 1975d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
BUG: corrupted list in __uwb_rc_neh_rm staging usb 8 C 9 2051d 2086d 15/29 1975d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
KASAN: use-after-free Read in chaoskey_disconnect crypto usb 19 C 44 2188d 2217d 15/29 1984d 93ddb1f56ae1 USB: chaoskey: fix use-after-free on release
KASAN: slab-out-of-bounds Read in edge_interrupt_callback usb 17 C 1 2073d 2072d 15/29 2024d 57aa9f294b09 USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback
KASAN: slab-out-of-bounds Read in hfa384x_usbin_callback staging usb 17 C 1 2075d 2075d 15/29 2024d 1165dd73e811 staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback
BUG: soft lockup in sys_exit_group usb 1 C 6 2074d 2097d 15/29 2049d d683469b3c93 ALSA: line6: Fix endless MIDI read loop
KASAN: use-after-free Write in hiddev_disconnect usb input 24 20 2076d 2141d 15/29 2049d 5c02c447eaed HID: hiddev: Fix race in in hiddev_disconnect()
WARNING in _chaoskey_fill/usb_submit_urb usb -1 C 15 2201d 2254d 15/29 2083d 92aa5986f4f7 USB: chaoskey: fix error case of a timeout
WARNING in flexcop_usb_probe/usb_submit_urb usb media -1 C 4 2249d 2287d 15/29 2083d 1b976fc6d684 media: b2c2-flexcop-usb: add sanity checking
WARNING in dln2_start_rx_urbs/usb_submit_urb usb -1 C 44 2121d 2210d 15/29 2106d 2b8bd606b1e6 mfd: dln2: More sanity checking for endpoints
KASAN: slab-out-of-bounds Read in hid_field_extract input usb 17 C 6 2146d 2180d 15/29 2106d 8ec321e96e05 HID: Fix slab-out-of-bounds read in hid_field_extract
WARNING: ODEBUG bug in rsi_probe usb wireless -1 C 10487 2120d 2416d 15/29 2106d 92aafe77123a rsi: fix use-after-free on probe errors
WARNING in uvc_scan_chain_forward usb media -1 C 6 2145d 2170d 15/29 2106d 68035c80e129 media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
general protection fault in gigaset_probe staging usb 2 C 6 2195d 2314d 15/29 2110d 53f35a39c386 staging: gigaset: fix general protection fault on probe
KASAN: slab-out-of-bounds Read in build_audio_procunit (2) sound usb 17 C 1 2209d 2209d 15/29 2131d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
KASAN: global-out-of-bounds Write in kbd_event serial input usb 23 C 6 2187d 2210d 15/29 2173d b2b2dd71e085 tty: vt: keyboard: reject invalid keycodes
general protection fault in flexcop_usb_probe usb media 2 C 403 2187d 2418d 15/29 2173d 1b976fc6d684 media: b2c2-flexcop-usb: add sanity checking
kernel BUG at kernel/time/timer.c:LINE! (4) media usb -1 syz 1 2243d 2240d 15/29 2173d f3f5ba42c58d media: imon: invalid dereference in imon_touch_event
KASAN: use-after-free Read in appledisplay_bl_get_brightness usb 19 C 1 2256d 2254d 15/29 2173d 91feb01596e5 appledisplay: fix error handling in the scheduled work
INFO: trying to register non-static key in ida_destroy usb media -1 C 4272 2187d 2310d 15/29 2173d 8c279e9394ca media: uvcvideo: Fix error path in control parsing failure
general protection fault in snd_usb_create_mixer sound usb 2 C 1 2196d 2195d 15/29 2173d 9435f2bb6687 ALSA: usb-audio: Fix NULL dereference at parsing BADD
general protection fault in usb_set_interface usb 2 C 3 2258d 2261d 15/29 2173d c7a191464078 media: usbvision: Fix invalid accesses after device disconnect
WARNING in port100_send_cmd_async/usb_submit_urb usb nfc -1 C 83 2188d 2329d 15/29 2175d 5f9f0b11f081 nfc: port100: handle command failure cleanly
WARNING: ODEBUG bug in input_ff_destroy input usb -1 C 6 2195d 2203d 14/29 2187d fa3a5a1880c9 Input: ff-memless - kill timer in destroy()
KASAN: use-after-free Read in mcba_usb_disconnect can usb 19 C 2 2214d 2246d 14/29 2187d 4d6636498c41 can: mcba_usb: fix use-after-free on disconnect
KASAN: invalid-free in rsi_91x_deinit usb wireless 22 C 109 2260d 2407d 13/29 2187d 8b51dc729147 rsi: fix a double free bug in rsi_91x_deinit()
divide error in dummy_timer usb 2 C 3 2217d 2223d 13/29 2193d 54f83b8c8ea9 USB: gadget: Reject endpoints with 0 maxpacket value
INFO: task hung in ld_usb_write usb 1 C 831 2212d 2225d 13/29 2193d 52403cfbc635 USB: ldusb: fix control-message timeout
KASAN: use-after-free Read in iowarrior_disconnect usb 19 C 3056 2233d 2289d 13/29 2195d edc4746f253d USB: iowarrior: fix use-after-free on disconnect
divide error in usbtmc_generic_read usb 2 C 2 2294d 2294d 13/29 2195d de7b9aa633b6 usbtmc: more sanity checking for packet size
KASAN: slab-out-of-bounds Read in ld_usb_read (3) usb 17 C 74 2220d 2230d 13/29 2210d 7a6f22d7479b USB: ldusb: fix read info leaks
KASAN: slab-out-of-bounds Read in build_audio_procunit usb sound 17 C 6 2216d 2225d 13/29 2210d ba8bf0967a15 ALSA: usb-audio: Fix copy&paste error in the validator
KASAN: use-after-free Read in usb_autopm_put_interface usb 19 C 2373 2219d 2232d 13/29 2210d 7a7591979748 USB: usblp: fix use-after-free on disconnect
KASAN: use-after-free Read in pn533_send_complete nfc usb 19 C 4 2219d 2240d 13/29 2212d 6af3aa57a098 NFC: pn533: fix use-after-free and memleaks
possible deadlock in usb_deregister_dev (2) usb 4 C 956 2233d 2261d 13/29 2219d 33a7813219f2 USB: legousbtower: fix deadlock on disconnect
KASAN: use-after-free Read in adu_disconnect usb 19 C 5304 2233d 2303d 13/29 2219d 44efc269db79 USB: adutux: fix use-after-free on disconnect
INFO: rcu detected stall in dummy_timer usb 1 C 16 2234d 2299d 13/29 2219d 32a0721c6620 USB: yurex: Don't retry on unexpected errors
KASAN: invalid-free in disconnect_rio (2) usb 22 C 51 2236d 2258d 13/29 2219d 015664d15270 USB: rio500: Remove Rio 500 kernel driver
WARNING in em28xx_usb_disconnect usb media -1 C 8 2266d 2299d 13/29 2231d 46e4a26615cc media: em28xx: modules workqueue not inited for 2nd device
KASAN: use-after-free Read in si470x_int_in_callback usb media 19 C 25 2241d 2330d 13/29 2231d 0d616f2a3fdb media: radio/si470x: kill urb on error
general protection fault in ath6kl_usb_alloc_urb_from_pipe usb wireless 2 C 1160 2258d 2418d 13/29 2231d 39d170b3cb62 ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
KASAN: use-after-free Read in atusb_disconnect usb wpan 19 C 112 2233d 2274d 13/29 2231d 7fd25e6fc035 ieee802154: atusb: fix use-after-free at disconnect
KASAN: slab-out-of-bounds Read in hdpvr_probe usb media 17 C 10 2268d 2343d 13/29 2231d 8b8900b729e4 media: hdpvr: add terminating 0 at end of string
KASAN: global-out-of-bounds Read in load_next_firmware_from_table usb libertas 17 C 5 2280d 2330d 13/29 2231d 764f3f1ecffc libertas: Add missing sentinel at end of if_usb.c fw_table
divide error in usbnet_update_max_qlen usb 2 C 17 2248d 2261d 13/29 2231d 280ceaed79f1 usbnet: sanity checking of packet sizes and device mtu
KASAN: slab-out-of-bounds Read in technisat_usb2_rc_query usb media 17 C 2236 2277d 2416d 13/29 2231d 0c4df39e504b media: technisat-usb2: break out of loop at end of buffer
KASAN: global-out-of-bounds Read in dvb_pll_attach media usb 17 C 2 2269d 2329d 13/29 2231d c268e7adea52 media: dvb-frontends: use ida for pll number
general protection fault in pk_probe input usb 2 C 2 2278d 2274d 13/29 2231d 98375b86c791 HID: prodikeys: Fix general protection fault during probe
KASAN: global-out-of-bounds Read in hdpvr_probe usb media 17 C 15 2284d 2398d 13/29 2231d d4a6a9537bc3 media: hdpvr: Add device num check and handling
WARNING: ODEBUG bug in usbhid_disconnect (2) input usb -1 C 48 2252d 2274d 13/29 2231d 2bcdacb70327 HID: sony: Fix memory corruption issue on cleanup.
KASAN: slab-out-of-bounds Read in usb_reset_and_verify_device usb 17 syz 1 2282d 2274d 13/29 2231d 3dd550a2d365 USB: usbcore: Fix slab-out-of-bounds bug during device reset
possible deadlock in open_rio (3) usb 4 C 169 2258d 2260d 13/29 2231d 9472aff16ca0 USB: rio500: Fix lockdep violation
WARNING in zd_mac_clear usb wireless -1 C 13194 2258d 2418d 13/29 2231d 7a2eb7367fde zd1211rw: remove false assertion from zd_mac_clear()
WARNING in iguanair_probe/usb_submit_urb media usb -1 C 3 2262d 2313d 13/29 2231d ab1cbdf159be media: iguanair: add sanity checks
general protection fault in __pm_runtime_resume input usb pm 2 C 197 2252d 2315d 13/29 2231d 5f9242775bb6 HID: logitech: Fix general protection fault caused by Logitech driver
divide error in cdc_ncm_update_rxtx_max usb 2 C 5 2247d 2261d 13/29 2231d 3fe4b3351301 cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
possible deadlock in open_rio usb 4 1107 2270d 2307d 12/29 2270d 2ca359f4f8b9 Revert "USB: rio500: simplify locking"
possible deadlock in usb_deregister_dev usb 4 C 82 2296d 2303d 12/29 2270d c468a8aa790e usb: iowarrior: fix deadlock on disconnect
WARNING in __iforce_usb_xmit/usb_submit_urb input usb -1 C 3 2299d 2303d 12/29 2270d 849f5ae3a513 Input: iforce - add sanity checks
WARNING in kbtab_open/usb_submit_urb usb -1 C 5 2298d 2316d 12/29 2270d c88090dfc842 Input: kbtab - sanity check for endpoint type
WARNING in usbtouch_open input usb -1 C 768 2296d 2310d 12/29 2270d b55d996f057b Input: usbtouchscreen - initialize PM mutex before using it
KASAN: use-after-free Read in usb_free_coherent usb 19 310 2296d 2307d 12/29 2270d fc05481b2fca usb: yurex: Fix use-after-free in yurex_delete
KASAN: use-after-free Read in ld_usb_release usb 19 C 14 2290d 2299d 12/29 2270d 303911cfc5b9 USB: core: Fix races in character device registration and deregistraion
KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind net usb 17 C 2 2294d 2296d 12/29 2270d 54364278fb3c USB: CDC: fix sanity checks in CDC union parser
KASAN: use-after-free Read in device_release_driver_internal usb 19 C 5 2292d 2316d 12/29 2270d c52873e5a1ef usb: cdc-acm: make sure a refcount is taken early enough
WARNING in wdm_write/usb_submit_urb usb -1 C 15 2274d 2289d 12/29 2270d 1426bd2c9f7e USB: cdc-wdm: fix race between write and disconnect due to flag abuse
KASAN: use-after-free Read in hiddev_release input usb 19 C 11 2291d 2307d 12/29 2281d 9c09b214f30e HID: hiddev: avoid opening a disconnected device 6d4472d7bec3 HID: hiddev: do cleanup in failure of opening a device
WARNING in gpio_to_desc usb gpio -1 C 3 2298d 2329d 12/29 2281d c3953a3c2d31 NFC: nfcmrvl: fix gpio-handling regression
general protection fault in snd_usb_pipe_sanity_check usb sound 2 C 72 2296d 2310d 12/29 2294d 5d78e1c2b7f4 ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
KASAN: stack-out-of-bounds Read in hfcsusb_probe usb isdn4linux 17 C 634 2310d 2416d 12/29 2294d f384e62a82ba ISDN: hfcsusb: checking idx of ep configuration
kernel BUG at drivers/usb/wusbcore/wusbhc.c:LINE! usb -1 C 1 2316d 2316d 12/29 2294d f90bf1ece48a usb: wusbcore: fix unbalanced get/put cluster_id
WARNING: Support for this device (Terratec Grabster AV400) is experimental. usb -1 C 371 2310d 2400d 12/29 2303d 1753c7c4367a media: pvrusb2: use a different format for warnings
KASAN: use-after-free Read in cpia2_usb_disconnect usb media 19 C 3 2329d 2414d 12/29 2303d eff73de2b160 media: cpia2_usb: first wake up, then free in disconnect
WARNING in __flush_work (3) usb -1 C 1251 2306d 2416d 12/29 2303d 11a087f484bf media: uvcvideo: Fix access to uninitialized fields on probe error
KASAN: use-after-free Read in dvb_usb_device_exit usb 19 C 825 2303d 2418d 12/29 2303d 6cf97230cd5f media: dvb: usb: fix use after free in dvb_usb_device_exit
INFO: trying to register non-static key in rtl_c2hcmd_launcher usb wireless -1 C 48950 2310d 2418d 12/29 2303d 6c0ed66f1a5b rtlwifi: rtl8192cu: fix error handle when usb probe failed
KASAN: null-ptr-deref Read in zr364xx_vidioc_querycap usb media 11 C 76 2310d 2401d 12/29 2303d 5d2e73a5f80a media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
WARNING: ath10k USB support is incomplete, don't expect anything to work! usb -1 C 347 2311d 2391d 12/29 2303d 265df32eae58 ath10k: Change the warning message string
KASAN: use-after-free Read in v4l2_release usb media 19 C 275 2311d 2415d 12/29 2303d c666355e60dd media: radio-raremono: change devm_k*alloc to k*alloc
WARNING: Detected a wedged cx25840 chip; the device will not work. usb -1 C 62 2311d 2400d 12/29 2303d 1753c7c4367a media: pvrusb2: use a different format for warnings
WARNING in snd_usb_motu_microbookii_communicate/usb_submit_urb usb -1 C 3 2320d 2358d 12/29 2303d 801ebf1043ae ALSA: usb-audio: Sanity checks for each pipe and EP types
KASAN: use-after-free Read in p54u_load_firmware_cb wireless usb 19 syz 40 2311d 2394d 12/29 2303d 6e41e2257f10 p54usb: Fix race between disconnect and firmware loading
KASAN: global-out-of-bounds Read in qmi_wwan_probe usb 17 C 2 2333d 2345d 12/29 2310d 904d88d743b0 qmi_wwan: Fix out-of-bounds read
KASAN: null-ptr-deref Write in submit_audio_out_urb (2) usb 12 C 3423 2310d 2342d 12/29 2310d 3450121997ce ALSA: line6: Fix write on zero-sized buffer
WARNING: proc registration bug in snd_info_card_register usb sound -1 C 453 2374d 2418d 12/29 2344d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
general protection fault in sisusb_probe usb 2 C 3 2388d 2391d 12/29 2349d 9a5729f68d3a USB: sisusbvga: fix oops in error path of sisusb_probe
KASAN: slab-out-of-bounds Write in usb_get_bos_descriptor usb 23 syz 3 2377d 2390d 12/29 2349d a03ff5446081 USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
KASAN: invalid-free in disconnect_rio usb 22 C 180 2373d 2418d 12/29 2349d 3864d33943b4 USB: rio500: refuse more than one device at a time
general protection fault in smsusb_init_device media usb 2 C 23 2373d 2412d 12/29 2349d 31e0456de5be media: usb: siano: Fix general protection fault in smsusb
KASAN: null-ptr-deref Write in submit_audio_out_urb sound usb 12 C 185 2357d 2373d 12/29 2351d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
INFO: task hung in usb_kill_urb usb 1 C 1515 2413d 2418d 12/29 2355d 50896c410354 USB: dummy-hcd: Fix failure to give back unlinked URBs USB: dummy-hcd: Fix failure to give back unlinked URBs
general protection fault in __dev_printk usb 2 C 300 2400d 2413d 12/29 2373d ef61eb43ada6 USB: yurex: Fix protection fault after device removal
INFO: trying to register non-static key in vmk80xx_detach usb staging -1 C 1528 2373d 2418d 12/29 2373d 08b7c2f9208f staging: comedi: vmk80xx: Fix use of uninitialized semaphore
INFO: trying to register non-static key in ni6501_detach staging usb -1 C 127 2373d 2416d 12/29 2373d 660cf4ce9d0f staging: comedi: ni_usb6501: Fix use of uninitialized mutex
KASAN: use-after-free Read in snd_info_free_entry usb sound 19 C 47 2385d 2416d 12/29 2373d 2a3f7221acdd ALSA: core: Fix card races between register and disconnect 8c2f870890fd ALSA: info: Fix racy addition/deletion of nodes
KASAN: slab-out-of-bounds Read in ds_probe usb 17 C 5 2375d 2413d 12/29 2373d c114944d7d67 USB: w1 ds2490: Fix bug caused by improper use of altsetting array
KASAN: stack-out-of-bounds Read in string usb 17 C 46 2406d 2418d 12/29 2384d c01c348ecdc6 USB: core: Fix unterminated string returned by usb_string()
WARNING in usb_submit_urb (4) usb -1 syz done 46 2386d 2574d 12/29 2384d c2b71462d294 USB: core: Fix bug caused by duplicate interface PM usage counter