Applied filters: Label=subsystems:usb (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: use-after-free Read in em28xx_init_extension (2) prio:high usb media 19 syz, C done 1464 72d 1673d 27/29 never 826915b6b65e media: em28xx: fix use-after-free of dev_next->devlist on disconnect
KCSAN: data-race in kick_pool_pick / wq_worker_running race:benign prio:low usb 6 C 93 6d04h 68d 24/29 never bda345b3fc59 workqueue: mark pool->nr_running as __data_racy
possible deadlock in zd_chip_disable_rxtx usb wireless 4 syz, C 44 89d 2148d 27/29 never 0e4532ec6586 wifi: zd1211rw: reject secondary interfaces to prevent conflicts
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high usb net 4 C 3 58d 88d 24/29 never 95a5c641fc7b usbnet: fix smp_processor_id() use in preemptible context
general protection fault in usbtest_probe prio:low usb 8 syz, C 17 72d 91d 27/29 never 00e2071f6d56 usb: usbtest: disable dynamic ID support
BUG: unable to handle kernel NULL pointer dereference in usb_stor_invoke_transport (2) prio:high usb usb-storage 10 syz, C error 12 29d 49d 21/29 never 6a3ee813d5fc usb: storage: ene_ub6250: set transport_reset to avoid NULL deref
KASAN: slab-use-after-free Read in trace_event_raw_event_udc_log_req prio:normal usb 19 C 2 41d 83d 27/29 never bdab5605259b usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()
general protection fault in uvcg_video_init prio:low usb 8 99 62d 92d 27/29 never 5b1da38592ef usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init()
memory leak in try_get_usb_function_instance prio:low usb 3 syz, C 1 79d 90d 27/29 never 0f6bffb5008f usb: gadget: midi2: remove default configfs groups on teardown
KASAN: stack-out-of-bounds Write in append_midi1_out_jack prio:normal usb 21 C 6 49d 63d 26/29 never 310c2d4608d8 usb: gadget: midi2: Fix the jack descriptor array sizes
general protection fault in f_midi2_stop_eps prio:high usb 2 syz, C error 541 52d 92d 27/29 never f0efaf187294 usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs
WARNING: refcount bug in trace_suspend_resume (2) prio:normal usb 13 syz, C 5 58d 80d 21/29 never cb3b441f2698 usb: gadget: fix refcount underflow in gadgetfs_bind() error path
general protection fault in usb_put_function_instance prio:low usb 2 12 82d 86d 27/29 never 6e74ac5c596f usb: gadget: fix null pointer dereference in usb_put_function_instance()
WARNING in f_midi_free prio:low usb -1 17 53d 88d 27/29 never 7e07d3e4c389 usb: gadget: f_midi: initialize work in f_midi_alloc()
KASAN: slab-use-after-free Read in f_midi2_opts_iface_name_show prio:normal usb 19 12 67d 75d 27/29 never fed0aa7c6eae usb: gadget: f_midi2: fix use-after-free in string attribute show path
WARNING in __fsg_is_set prio:low usb -1 1 89d 85d 21/29 never e84caed6e7f5 usb: gadget: f_mass_storage: ignore class requests while inactive
general protection fault in fsg_common_set_num_buffers prio:low usb 10 syz, C 19 47d 72d 27/29 never 2c0f5ca48674 usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()
general protection fault in dummy_udc_start prio:low usb 10 syz, C error 10139 19d 92d 21/29 never bdf12cde3083 usb: gadget: dummy_hcd: prevent unbind via sysfs
INFO: task hung in usbatm_usb_disconnect (2) prio:high usb 1 syz, C 30 8d08h 37d 24/29 never f10883b37d9c usb: atm: use request_firmware_direct() for firmware probing
UBSAN: shift-out-of-bounds in vcc_connect prio:high usb atm -1 syz 4 66d 66d 27/29 never a60fd8c6dbaa usb: atm: usbatm: fix invalid ci_range initialization
UBSAN: array-index-out-of-bounds in uea_bind prio:high usb 15 syz, C 87 72d 88d 27/29 never 37a5e120118a usb: atm: ueagle-atm: fix array-index-out-of-bounds in uea_bind()
WARNING in cxacru_cm/usb_submit_urb (3) prio:high usb -1 syz, C 86 75d 89d 1/29 never usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
KASAN: slab-use-after-free Read in cxacru_poll_status prio:high usb 19 syz 19 75d 89d 27/29 never b5b02ce65777 usb: atm: cxacru: fix use-after-free in cxacru_poll_status
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz, C error 3349 37d 668d 27/29 never 445fc368c6bc usb-storage: ene_ub6250: fix race between scan work and probe
KASAN: slab-use-after-free Write in keyspan_close prio:high usb 22 syz, C 1 45d 59d 26/29 never b48820de8c1a tty: port: fix tty_port_tty_vhangup() race
KASAN: use-after-free Read in pn533_acr122_is_rx_frame_valid prio:high usb nfc 19 syz, C error 54 23d 53d 26/29 never b61732f47316 nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()
KMSAN: uninit-value in rtl8150_open (2) prio:high usb net 7 5 149d 217d 27/29 never 8c9c5b9a6896 net: usb: rtl8150: handle link status read failures
BUG: sleeping function called from invalid context in cancel_delayed_work_sync prio:high usb mmc 10 syz, C 66474 2h54m 83d 22/29 never mmc: vub300: Remove the driver for the obsolete HW
BUG: sleeping function called from invalid context in mmc_free_host prio:high usb mmc 5 syz, C error 9784 7d13h 83d 22/29 never mmc: vub300: Remove the driver for the obsolete HW
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 49d 1878d 21/29 never 8a3435f98175 media: pvrusb2: fix URB pending flag leak on invalid endpoint
WARNING in vb2_video_unregister_device prio:low media usb -1 syz, C 2 42d 67d 25/29 never 2579cbe68005 media: em28xx: use video_unregister_device for radio_dev
KASAN: slab-use-after-free Read in __vb2_queue_cancel (2) prio:high usb media 19 syz, C 331 23d 69d 21/29 never 487344a63f6a media: em28xx: setup queues before registering V4L2 device
KASAN: use-after-free Read in em28xx_close_extension (2) prio:high usb media 19 syz, C error 56 4d15h 769d 27/29 never 95f76f51937f media: em28xx: defer audio-only extension registration
WARNING in cx25840_init prio:high usb media -1 syz, C error 23 1h32m 54d 21/29 never 75352cab0e26 media: cx25840: return -EOPNOTSUPP instead of WARN_ON in cx25840_init
WARNING in cx231xx_send_vendor_cmd/usb_submit_urb prio:low usb -1 syz, C error 9 16d 59d 21/29 never a19c9502a69b media: cx231xx: preserve I2C transfer length
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop prio:normal usb 17 506 66d 386d 27/29 never 2eed77fdcb0c kcov: fix data corruption and race conditions on PREEMPT_RT
KASAN: slab-use-after-free Read in lookup_noperm_common prio:high usb 19 syz, C 11 63d 90d 27/29 never b15b548d52b4 i2c: core: fix debugfs UAF on adapter removal
KASAN: slab-use-after-free Read in hidraw_report_event prio:high usb input 19 syz, C error 4 183d 184d 2/29 never hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
KASAN: slab-out-of-bounds Read in drm_property_add_enum prio:high usb dri 17 syz, C error 111 51d 70d 27/29 never da1ea35fea67 drm/gud: validate TV mode names before creating enum property
WARNING in drm_plane_create_rotation_property prio:high usb dri -1 syz, C error 12 49d 69d 27/29 never cb732d027aa1 drm/gud: validate GUD_ROTATION_0 is present in supported rotations
WARNING in drm_property_add_enum prio:high usb dri -1 syz, C error 271 51d 73d 27/29 never 500cb24cd61b drm/gud: NUL-terminate TV mode names read from the device
WARNING in __drm_atomic_helper_set_config prio:high usb dri -1 syz, C 19 39d 89d 25/29 never 755c94d178b7 drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN
possible deadlock in uvcg_extension_allow_link prio:low usb 4 syz, C 13 62d 86d 2/29 never configfs: give the root inode its own lockdep class
WARNING in spcp8x5_get_msr prio:low usb -1 syz, C 103 60d 83d 27/29 never d37186bd95a0 USB: serial: spcp8x5: drop broken carrier detect support
KASAN: slab-use-after-free Read in usa49_glocont_callback prio:high actionable usb 19 C 7 33d 75d 26/29 never 33c920f7c595 USB: serial: fix port tear down use-after-free
general protection fault in keyspan_break_ctl prio:high usb 8 syz, C 43 25d 62d 26/29 never ae0e61d95677 USB: serial: fix ioctl hangup race
possible deadlock in digi_set_modem_signals prio:high usb 4 syz, C error 14 64d 89d 27/29 never 177b48f840c7 USB: serial: digi_acceleport: add port lock nesting annotation
memory leak in uss720_probe prio:high usb 3 syz, C 3 78d 104d 27/29 never 15902712b9e2 USB: misc: uss720: Fix leak in get_1284_register
KASAN: slab-use-after-free Write in usb_free_urb prio:high actionable usb 22 syz, C 11 5h16m 87d 7/29 never 402a9d6aab7a ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path
KASAN: slab-use-after-free Read in input_dev_uevent (2) prio:high usb input 19 syz, C error 23 29d 80d 26/29 never 0b7bd20f6379 ALSA: caiaq: unregister the input device when probe fails
BUG: scheduling while atomic in wait_clear_urbs prio:high usb sound 5 syz, C 14 12d 8d23h 17/29 never 8ea1086f3fff ALSA: pcm: Call snd_pcm_sync_stop outside spinlock in snd_pcm_drop()
KMSAN: uninit-value in steam_register prio:high input usb 7 3 143d 141d 27/29 never 33ff7b49c38b HID: steam: Reject short reads
WARNING in asus_remove prio:low input usb -1 syz, C 295 59d 272d 2/29 never HID: asus: Add check for cancelling fn_lock_sync_work
UBSAN: shift-out-of-bounds in s32ton (3) prio:high input usb -1 syz, C 5 22d 18d 24/29 never 5fe63b415c63 HID: core: Fix out-of-bounds left shift by 32 in s32ton()
general protection fault in magicmouse_event prio:high usb input 2 syz, C 4 8d11h 26d 24/29 never 5b66b65cfd6f HID: magicmouse: fix null pointer dereference in magicmouse_event()
KASAN: slab-use-after-free Read in roccat_open prio:high input usb 19 syz, C 2 40d 62d 2/29 never HID: roccat: use kref to manage device instances
KASAN: slab-use-after-free Read in roccat_disconnect prio:high input usb 19 syz, C error error 20 35d 56d 2/29 never HID: roccat: use kref to manage device instances
KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect prio:high usb 17 syz, C 19 98d 103d 29/29 72d 9dfd800b374c usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
general protection fault in dummy_timer (2) prio:high usb 19 syz, C 97 72d 703d 29/29 72d d5e5cd3654d2 usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
KASAN: slab-use-after-free Write in iowarrior_write_callback (2) actionable prio:high usb 22 1 173d 161d 29/29 91d bc0e4f16c44e USB: iowarrior: fix use-after-free on disconnect
WARNING: ODEBUG bug in i2c_device_remove (2) prio:high i2c usb -1 syz, C 3 176d 190d 29/29 105d 680daf40a82d media: rtl2832: fix use-after-free in rtl2832_remove()
KASAN: slab-out-of-bounds Read in usbtmc_interrupt prio:high usb 17 syz, C 5 163d 438d 29/29 105d 52f2ad3f7e5e usb: usbtmc: check URB actual_length for interrupt-IN notifications
KASAN: slab-use-after-free Read in rtl8150_start_xmit net usb 19 146 170d 190d 29/29 159d 23f0e34c64ac net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
memory leak in hub_event (4) usb 3 syz, C 1 186d 186d 29/29 159d 7a5f1cd22d47 ALSA: caiaq: fix usb_dev refcount leak on probe failure
INFO: task hung in lbs_remove_card prio:high usb libertas 1 syz, C 14933 161d 440d 29/29 159d 4a142520d166 wifi: libertas: notify firmware load wait on disconnect
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 22 syz, C error 27 230d 940d 29/29 160d 8a768552f7a8 usb: usbtmc: Flush anchored URBs in usbtmc_release
general protection fault in usb_gadget_udc_reset (4) usb 2 syz, C error 16 227d 368d 29/29 160d 616a63ff495d USB: dummy-hcd: Fix locking/synchronization error
BUG: sleeping function called from invalid context in usb_tx_block prio:high usb libertas 5 syz, C 780 191d 246d 29/29 160d 7c5c2b661bdb wifi: libertas: don't kill URBs in interrupt context
KASAN: use-after-free Read in v4l2_fh_init usb media 19 syz, C error inconclusive 7824 191d 2749d 29/29 160d a66485a934c7 media: em28xx: fix use-after-free in em28xx_v4l2_open()
INFO: task hung in rpm_resume (2) usb 1 syz, C 17 254d 379d 29/29 160d 069c8f5aebe4 net: usb: aqc111: Do not perform PM inside suspend callback
general protection fault in qt2_read_bulk_callback (2) usb 2 syz, C error 44 272d 273d 29/29 174d 0a15f43b92dd Revert "tty: tty_port: add workqueue to flip TTY buffer"
WARNING in pvr2_send_request_ex pvrusb2 usb -1 syz, C 2 318d 327d 29/29 175d a8333c8262ae media: pvrusb2: fix URB leak in pvr2_send_request_ex
WARNING in usb_tx_block usb libertas -1 syz, C 15 200d 317d 29/29 175d d66676e6ca96 wifi: libertas: fix WARNING in usb_tx_block
KASAN: slab-out-of-bounds Write in copy_to_urb (2) usb sound 21 syz, C 5 290d 288d 29/29 175d ef5749ef8b30 ALSA: usb-audio: Prevent excessive number of frames
memory leak in v4l2_ctrl_handler_init_class (2) usb media 3 syz, C 14 272d 337d 29/29 175d b8bf939d77c0 media: radio-keene: fix memory leak in error path
INFO: task hung in usb_bulk_msg (2) usb 1 syz, C 8 233d 262d 29/29 175d 7784caa413a8 USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
memory leak in es58x_open usb 3 syz 1 299d 310d 29/29 175d b1979778e985 can: etas_es58x: allow partial RX URB allocation to succeed
WARNING in mdiobus_get_phy net usb -1 syz 2 306d 317d 29/29 275d a1e077a3f76e net: usb: asix: validate PHY address before use
memory leak in rtl8150_set_multicast usb net 3 syz 1 320d 316d 29/29 275d 12cab1191d98 net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
kernel BUG in dql_completed net usb -1 1 321d 313d 29/29 275d e34f0df3d81a usbnet: avoid a possible crash in dql_completed()
KASAN: slab-out-of-bounds Write in copy_to_urb usb sound 21 syz, C 33 297d 357d 29/29 294d 05a1fc5efdd8 ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
WARNING in raw_ioctl usb mm -1 syz, C 664 325d 368d 29/29 294d a5160af78be7 usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
BUG: sleeping function called from invalid context in mon_complete usb 5 21 337d 410d 29/29 294d 09bf21bf5249 usbip: Fix locking bug in RT-enabled kernels
KASAN: slab-use-after-free Read in btusb_disconnect usb bluetooth 19 syz, C 5 395d 481d 29/29 294d 23d22f2f7176 Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
KASAN: slab-use-after-free Read in hdm_disconnect usb 19 syz, C error 18706 364d 821d 29/29 344d 4b1270902609 most: usb: Fix use-after-free in hdm_disconnect
WARNING in media_create_pad_link (2) usb media -1 syz, C error done 11 385d 588d 29/29 348d 0e2ee70291e6 media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
INFO: rcu detected stall in dummy_timer (4) usb driver-core 1 syz, C inconclusive done 25 411d 1572d 29/29 348d eecd203ada43 media: imon: make send_packet() more robust
WARNING in rtl8150_start_xmit/usb_submit_urb net usb -1 syz, C 5 404d 425d 29/29 363d 958baf5eaee3 net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
KASAN: slab-use-after-free Read in media_devnode_unregister usb media 19 syz, C 2055 411d 413d 29/29 363d 8cfc8cec1b4d media: mc: Clear minor number before put device
general protection fault in snd_usbmidi_do_output usb sound 2 syz, C error 8 394d 401d 29/29 363d 9f2c0ac1423d ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
BUG: sleeping function called from invalid context in dummy_dequeue usb 5 syz, C error 6278 408d 429d 29/29 363d 8d63c83d8eb9 USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
KMSAN: uninit-value in lan78xx_reset net usb 7 syz, C 14 384d 419d 29/29 363d 49bdb63ff644 net: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx_read_raw_eeprom
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb 19 syz, C 1144 385d 690d 29/29 384d b56cc41a3ae7 hid: fix I2C read buffer overflow in raw_event() for mcp2221
UBSAN: shift-out-of-bounds in ax88772_bind usb -1 syz, C done 19 432d 438d 29/29 384d 24ef2f53c07f net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
WARNING in follow_page_pte input usb mm -1 syz, C done 6 448d 448d 29/29 384d cf1b80dc31a1 mm: pass page directly instead of using folio_page
INFO: task hung in hub_activate (3) usb 1 177 483d 483d 29/29 407d 9bd9c8026341 usb: hub: Fix flushing of delayed work used for post resume purposes
WARNING in flush_delayed_work usb -1 syz, C 704 483d 487d 29/29 407d 9bd9c8026341 usb: hub: Fix flushing of delayed work used for post resume purposes
WARNING in osif_xfer/usb_submit_urb usb -1 syz, C error done 18 493d 541d 29/29 412d 56ad91c1aa9c i2c: robotfuzz-osif: disable zero-length read messages
KASAN: slab-out-of-bounds Read in mon_copy_to_buff usb 17 syz, C 7 471d 478d 29/29 419d 0d0777ccaa2d HID: core: ensure __hid_request reserves the report ID as the first byte
WARNING in usbnet_status_start usb -1 syz, C 349 464d 477d 29/29 419d 4c4ca3c46167 usb: net: sierra: check for no status endpoint
UBSAN: shift-out-of-bounds in s32ton (2) input usb -1 syz, C 4 464d 471d 29/29 419d a6b87bfc2ab5 HID: core: Harden s32ton() against conversion to 0 bits
WARNING in ath6kl_bmi_get_target_info (2) usb wireless -1 syz, C error 10349 480d 818d 29/29 448d e7417421d893 wifi: ath6kl: remove WARN on bad firmware input
KMSAN: uninit-value in mii_nway_restart (2) usb 7 syz, C 224 509d 618d 29/29 477d 9ad0452c0277 net: ch9200: fix uninitialised access during mii_nway_restart
general protection fault in lookup_or_create_module_kobject bluetooth usb 2 syz, C 266 536d 541d 29/29 477d a6aeb739974e module: ensure that kobject_put() is safe for module type kobjects
UBSAN: shift-out-of-bounds in __kfifo_alloc input usb -1 syz, C 33349 508d 576d 29/29 477d 6bf8ab7774a2 HID: wacom: fix shift OOB in kfifo allocation for zero pktlen
UBSAN: array-index-out-of-bounds in usbhid_parse usb 15 syz, C error 89 511d 1108d 29/29 477d fe7f7ac8e0c7 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
WARNING: ODEBUG bug in snd_rawmidi_free sound usb -1 syz, C error 1 542d 538d 29/29 477d 0718a78f6a9f ALSA: usb-audio: Kill timer properly at removal
KMSAN: uninit-value in usbnet_probe (3) usb 7 syz, C 159 519d 536d 29/29 477d 405b0d610745 net: usb: aqc111: fix error handling of usbnet read calls
WARNING in usbnet_start_xmit/usb_submit_urb (2) usb -1 syz, C error 10 616d 955d 28/29 505d 1cf9631d836b usbnet: gl620a: fix endpoint checking in genelink_bind()
general protection fault in ir_raw_event_store_with_filter usb media 22 syz, C error 879 625d 2422d 28/29 505d f656cfbc7a29 media: streamzap: fix race between device disconnection and urb callback
WARNING in cxacru_cm/usb_submit_urb (2) usb -1 syz, C 8 619d 629d 28/29 505d c90aad369899 usb: atm: cxacru: fix a flaw in existing endpoint checks
KASAN: slab-use-after-free Read in steam_input_open input usb 19 syz, C done 5 599d 613d 28/29 505d e53fc232a65f HID: hid-steam: Fix use-after-free when detaching device
KASAN: stack-out-of-bounds Read in usb_check_int_endpoints usb 17 syz, C 61 576d 639d 28/29 505d 0b43d98ff29b HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
general protection fault in qt2_read_bulk_callback usb 2 syz, C error 5 659d 655d 28/29 540d 575a5adf48b0 USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
KASAN: slab-use-after-free Read in chaoskey_disconnect usb 19 2 773d 761d 28/29 540d 422dc0a4d12d USB: chaoskey: fail open after removal
WARNING in rtl8150_open/usb_submit_urb usb -1 syz, C 5 632d 785d 28/29 540d 90b7f2961798 net: usb: rtl8150: enable basic endpoint checking
WARNING in thrustmaster_probe/usb_submit_urb usb -1 syz, C 25 645d 746d 28/29 540d 50420d7c79c3 HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
KASAN: slab-use-after-free Read in sg_release scsi usb 19 syz 1 711d 721d 28/29 540d f10593ad9bc3 scsi: sg: Fix slab-use-after-free read in sg_release()
possible deadlock in chaoskey_release usb 4 syz, C 90 744d 749d 28/29 540d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
KMSAN: uninit-value in dib3000mb_attach (2) usb media 7 syz, C 4873 675d 2196d 28/29 540d 2dd59fe0e19e media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
WARNING in uvc_status_unregister usb media -1 syz, C done 61256 631d 738d 28/29 540d a67f75c2b5ec media: uvcvideo: Fix deadlock during uvc_probe
INFO: rcu detected stall in hub_event usb 1 syz, C done 1233 540d 2533d 28/29 540d 64f2657b5793 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
possible deadlock in chaoskey_open usb 4 syz, C 475 744d 749d 28/29 540d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
possible deadlock in usb_deregister_dev (3) usb 4 syz, C 103 744d 749d 28/29 540d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
WARNING in media_create_pad_link usb media -1 syz, C done done 104 706d 2357d 28/29 681d 3dd075fe8ebb media: uvcvideo: Require entities to have a non-zero unique ID
INFO: task hung in usb_port_suspend usb 1 syz, C 12 737d 747d 28/29 714d 5189df7b8088 USB: gadget: dummy-hcd: Fix "task hung" problem
kernel BUG in __page_table_check_zero usb -1 syz, C error done 213 768d 1256d 28/29 736d 79a61cc3fc04 mm: avoid leaving partial pfn mappings around in error case
INFO: rcu detected stall in schedule_timeout (6) usb 1 syz, C done 40 737d 895d 28/29 736d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
KASAN: use-after-free Read in rtw_load_firmware_cb usb wireless 19 syz, C 848 761d 825d 28/29 736d 0e735a4c6137 wifi: rtw88: always wait for both firmware loading attempts
INFO: rcu detected stall in aoecmd_cfg (2) usb block 1 syz, C done 7 790d 902d 28/29 736d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
KMSAN: kernel-infoleak in raw_ioctl (2) usb 9 syz, C 18201 761d 826d 28/29 736d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
KMSAN: kernel-usb-infoleak in usbtmc_write usb 9 syz, C 167 761d 825d 28/29 736d 625fa77151f0 USB: usbtmc: prevent kernel-usb-infoleak
INFO: task hung in uevent_show usb driver-core 1 syz, C done 9704 807d 868d 28/29 736d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
INFO: rcu detected stall in __mod_timer (5) usb 1 syz, C error done 10 814d 878d 28/29 737d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
possible deadlock in touch_wq_lockdep_map usb 4 syz, C 1208 760d 956d 28/29 755d ccbde4b128ef char: xillybus: Don't destroy workqueue from work item running on it
KMSAN: uninit-value in line6_midibuf_read usb sound 7 syz, C 357 764d 826d 28/29 755d 15b7a03205b3 ALSA: line6: Fix racy access to midibuf
KASAN: slab-out-of-bounds Read in cougar_report_fixup input usb 17 syz, C 31 786d 819d 28/29 755d a6e9c391d45b HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
memory leak in _r8712_init_xmit_priv (2) usb staging 3 syz, C 2 1058d 1073d 27/29 805d 9ed3e0a0e1b1 staging: rtl8712: remove unnecessary alignment of pxmitpriv->pxmitbuf
WARNING in btusb_submit_intr_urb/usb_submit_urb bluetooth usb -1 syz, C error 2 844d 854d 27/29 805d a368ecde8a50 USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
WARNING in implement input usb -1 syz, C error done 960 869d 2599d 26/29 818d 4aa2dcfbad53 HID: core: remove unnecessary WARN_ON() in implement()
INFO: rcu detected stall in __run_timer_base usb 1 syz, C done done 10 859d 927d 26/29 818d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
WARNING in kcov_remote_start (4) usb -1 107983 840d 871d 26/29 840d f85d39dd7ed8 kcov, usb: disable interrupts in kcov_remote_start_usb_softirq
WARNING in hid_output_report input usb -1 syz, C error 3 886d 905d 26/29 841d 4aa2dcfbad53 HID: core: remove unnecessary WARN_ON() in implement() fba383985354 net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
INFO: task hung in wdm_release usb 1 syz, C error 1 864d 860d 26/29 841d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
INFO: rcu detected stall in raw_ioctl usb 1 syz, C 49 847d 1093d 26/29 841d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
KMSAN: uninit-value in asus_report_fixup input usb 17 syz, C done 35 862d 886d 26/29 841d 89e1ee118d6f hid: asus: asus_report_fixup: fix potential read out of bounds
BUG: soft lockup in hci_cmd_timeout bluetooth usb 1 syz, C 1 872d 868d 26/29 841d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
WARNING in cxacru_cm/usb_submit_urb usb -1 syz, C error inconclusive 14 859d 2428d 26/29 841d 2eabb655a968 usb: atm: cxacru: fix endpoint checking in cxacru_bind()
WARNING in kcov_remote_start (3) usb -1 265513 875d 944d 25/29 875d 19e35f24750d nfc: nci: Fix kcov check in nci_rx_work()
WARNING in ar5523_cmd/usb_submit_urb usb wireless -1 syz, C error 39 908d 2464d 25/29 875d e120b6388d7d wifi: ar5523: enable proper endpoint verification
WARNING in carl9170_usb_send_rx_irq_urb/usb_submit_urb usb wireless -1 syz, C error inconclusive 18 919d 2063d 25/29 875d b6dd09b3dac8 wifi: carl9170: add a proper sanity check for endpoints
WARNING in vmk80xx_auto_attach/usb_submit_urb usb -1 syz, C unreliable inconclusive 2 963d 1964d 25/29 888d d1718530e3f6 comedi: vmk80xx: fix incomplete endpoint checking
KASAN: slab-use-after-free Read in pvr2_context_set_notify usb pvrusb2 22 syz, C 3814 1002d 1208d 25/29 1002d ded85b0c0edd media: pvrusb2: fix use after free on context disconnection
KASAN: use-after-free Read in __media_entity_remove_links usb media 19 syz, C 7 2410d 2508d 25/29 1029d 68035c80e129 media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
KMSAN: uninit-value in smsc95xx_reset usb 7 syz, C 425 1098d 2263d 25/29 1042d 51a32e828109 net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
linux-next boot error: KASAN: slab-out-of-bounds Write in vhci_setup usb -1 34 1107d 1111d 25/29 1042d 17d6b82d2d6d usb/usbip: fix wrong data added to platform device
KMSAN: uninit-value in mii_nway_restart usb 7 syz, C 2449 1111d 2703d 25/29 1042d 8f8abb863fa5 net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
KMSAN: uninit-value in smsc75xx_bind usb 7 syz, C 63 1140d 2637d 25/29 1042d e9c65989920f net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
KASAN: slab-out-of-bounds Read in imon_probe media usb 17 syz 2 1137d 1159d 25/29 1042d a1766a4fd83b media: imon: fix access to invalid resource for the second interface
KMSAN: uninit-value in smsc95xx_eeprom_confirm_not_busy usb 7 syz, C 521 1098d 1211d 25/29 1042d 51a32e828109 net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
UBSAN: shift-out-of-bounds in set_flicker usb media -1 syz 5 1087d 1168d 25/29 1042d 099be1822d1f media: gspca: cpia1: shift-out-of-bounds in set_flicker
KASAN: slab-out-of-bounds Read in read_descriptors (3) usb 17 syz, C error 7 1199d 1226d 23/29 1112d ff33299ec8bb USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
KMSAN: uninit-value in alauda_check_media usb usb-storage 7 syz, C 1059 1194d 2577d 23/29 1112d a6ff6e7a9dd6 usb-storage: alauda: Fix uninit-value in alauda_check_media()
memory leak in raw_open usb 3 syz, C 1 1207d 1203d 23/29 1112d 83e30f2bf86e USB: gadget: Fix the memory leak in raw_gadget driver
WARNING in corrupted (3) usb -1 syz, C done 19 1207d 1254d 23/29 1112d 6f489a966fbe media: usb: siano: Fix warning due to null work_func_t function pointer
WARNING in usbnet_start_xmit/usb_submit_urb usb -1 syz, C done 92 1225d 1808d 23/29 1112d 5e1627cb43dd net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
memory leak in _r8712_init_xmit_priv staging usb 3 syz, C 1 1208d 1204d 23/29 1112d ac83631230f7 staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
WARNING in class_register usb driver-core -1 syz, C done 10 1307d 1305d 23/29 1175d f326ea63ecc6 driver core: class: fix slab-use-after-free Read in class_register()
WARNING in dlfb_submit_urb/usb_submit_urb (2) fbdev usb -1 syz, C 2 1263d 1259d 22/29 1215d ed9de4ed3987 fbdev: udlfb: Fix endpoint check
WARNING in usbtmc_ioctl/usb_submit_urb (2) usb -1 syz, C done 3 1276d 1288d 22/29 1215d 94d25e912898 USB: usbtmc: Fix direction for 0-length ioctl control messages
memory leak in class_create usb driver-core 3 syz, C 9 1258d 1276d 22/29 1215d ddaf098ea779 driver core: class: properly reference count class_dev_iter()
WARNING in __usbnet_read_cmd/usb_submit_urb usb -1 syz, C error 5 1360d 1391d 22/29 1233d 93fd565919cf net: USB: Fix wrong-direction WARNING in plusb.c net: USB: Fix wrong-direction WARNING in plusb.c
WARNING in sisusb_send_bulk_msg/usb_submit_urb usb -1 syz, C unreliable 418 1289d 2675d 22/29 1238d df05a9b05e46 USB: sisusbvga: Add endpoint checks
KASAN: use-after-free Write in gadgetfs_kill_sb usb 22 syz, C error 5 1381d 1415d 22/29 1238d d18dcfe9860e USB: gadgetfs: Fix race between mounting and unmounting
KMSAN: uninit-value in kalmia_send_init_packet usb 7 syz, C 2 1367d 1366d 22/29 1238d c68f345b7c42 net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
WARNING in pegasus_open/usb_submit_urb input usb -1 syz, C 7 1318d 2329d 22/29 1238d b3d80fd27a3c Input: pegasus-notetaker - check pipe type when probing
WARNING in shark_write_reg/usb_submit_urb usb -1 syz, C error 63 1287d 2661d 22/29 1238d 76e31045ba03 media: radio-shark: Add endpoint checks
memory leak in __proc_create scsi usb 3 syz 1 1331d 1331d 22/29 1238d be03df3d4bfe scsi: core: Fix a procfs host directory removal regression
KASAN: slab-use-after-free Read in class_register usb driver-core 19 syz, C done 13 1307d 1306d 22/29 1238d f326ea63ecc6 driver core: class: fix slab-use-after-free Read in class_register()
WARNING in ath6kl_htc_pipe_rx_complete usb wireless -1 syz, C error 2008 1277d 2547d 22/29 1238d 75c4a8154cb6 wifi: ath6kl: reduce WARN to dev_dbg() in callback
WARNING in shark_write_val/usb_submit_urb usb -1 syz, C error done 51 1295d 2655d 22/29 1238d 76e31045ba03 media: radio-shark: Add endpoint checks
INFO: task hung in port100_probe usb nfc 1 syz, C error inconclusive 10 1695d 1954d 22/29 1294d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
KMSAN: uninit-value in ax88178_reset usb 7 syz, C 284 1650d 1757d 22/29 1342d 920a9fa27e78 net: asix: add proper error handling of usb read errors
possible deadlock in display_open usb 4 syz, C inconclusive 48888 1610d 2637d 22/29 1342d db264d4c66c0 media: imon: reorganize serialization
KMSAN: uninit-value in asix_mdio_read (3) usb 7 syz, C 1582 1625d 1690d 22/29 1342d 920a9fa27e78 net: asix: add proper error handling of usb read errors
WARNING in snd_usbmidi_output_open sound usb -1 syz, C done 37 1439d 1447d 22/29 1342d ad72c3c3f6eb ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
WARNING in send_packet/usb_submit_urb usb -1 syz, C inconclusive 847 1410d 1576d 22/29 1342d 813ceef062b5 media: imon: fix a race condition in send_packet()
KASAN: slab-out-of-bounds Read in thrustmaster_probe input usb 17 syz, C unreliable 92 1687d 1711d 22/29 1342d fc3ef2e3297b HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
INFO: task hung in misc_open (4) usb 1 syz, C error inconclusive 144 1370d 2083d 22/29 1342d 8386c414e27c PM: hibernate: defer device probing when resuming from hibernation
INFO: task hung in hub_port_init (2) usb 1 syz, C error 486 1345d 1807d 22/29 1342d 26fbe9772b8c USB: core: Fix hang in usb_kill_urb by adding memory barriers
general protection fault in i2c_setup_smbus_alert acpi driver-core usb 2 syz, C done 20 1708d 1727d 22/29 1342d 8302532f47bb i2c: smbus: Check for parent device before dereference
KASAN: use-after-free Read in __snd_rawmidi_transmit_peek usb sound 19 syz error 48 1543d 1654d 22/29 1342d 0665886ad139 ALSA: usb-audio: Clear MIDI port active flag after draining
UBSAN: shift-out-of-bounds in hid_report_raw_event (2) input usb -1 syz, C error 1 1447d 1443d 22/29 1342d ec61b4191858 HID: core: fix shift-out-of-bounds in hid_report_raw_event
KASAN: use-after-free Read in port100_send_complete nfc usb 19 syz, C 1 1699d 1695d 22/29 1342d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
KASAN: use-after-free Read in usb_udc_uevent usb 19 syz error 30 1552d 2339d 22/29 1342d 2191c00855b0 USB: gadget: Fix use-after-free Read in usb_udc_uevent()
memory leak in usb_set_configuration (3) usb 3 syz, C 2 1580d 1606d 22/29 1342d 945a9a8e448b media: pvrusb2: fix memory leak in pvr_probe
KASAN: use-after-free Read in ar5523_cmd_tx_cb usb wireless 19 syz, C inconclusive 372 1438d 1493d 22/29 1342d b6702a942a06 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
KMSAN: uninit-value in asix_mdio_write_nopm net usb 7 2 1667d 1688d 22/29 1342d 920a9fa27e78 net: asix: add proper error handling of usb read errors
WARNING in dlfb_submit_urb/usb_submit_urb usb fbdev -1 syz, C done 481 1415d 2676d 22/29 1342d aaf7dbe07385 video: fbdev: udlfb: properly check endpoint type
KASAN: use-after-free Read in snd_rawmidi_transmit sound usb 19 syz, C done done 7 1610d 1644d 22/29 1342d 0125de38122f ALSA: usb-audio: Cancel pending work at closing a MIDI substream
KASAN: use-after-free Read in si470x_int_in_callback (2) usb media 19 syz, C error 7303 1410d 2567d 22/29 1342d 7d21e0b1b41b media: si470x: Fix use-after-free in si470x_int_in_callback()
memory leak in gs_usb_probe can usb 3 syz, C 1 1678d 1674d 22/29 1342d 50d34a0d151d can: gs_usb: gs_make_candev(): fix memory leak for devices with extended bit timing configuration
memory leak in airspy_probe media usb 3 syz, C 1 1543d 1539d 22/29 1342d 23bc5eb55f8c media: airspy: fix memory leak in airspy probe
KMSAN: uninit-value in idmouse_open usb 7 syz, C 5 1504d 1500d 22/29 1342d bce2b0539933 usb: idmouse: fix an uninit-value in idmouse_open
KASAN: null-ptr-deref Read in ida_free (2) usb 11 syz, C done 3 1586d 1587d 22/29 1342d 90bc2af24638 USB: gadget: Fix double-free bug in raw_gadget driver
INFO: task hung in scsi_remove_host usb scsi 1 syz, C done 328 1493d 1529d 22/29 1342d 2b36209ca818 scsi: core: Revert "Call blk_mq_free_tag_set() earlier" d94b2d00f7bf scsi: core: Revert "Make sure that hosts outlive targets" f782201ebc2b scsi: core: Revert "Make sure that targets outlive devices" 70e8d057bef5 scsi: core: Revert "Simplify LLD module reference counting"
UBSAN: array-index-out-of-bounds in pvr2_i2c_core_init pvrusb2 usb 15 syz, C inconclusive 4 1626d 1658d 22/29 1342d 471bec68457a media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
WARNING in usbtmc_ioctl/usb_submit_urb usb -1 syz, C inconclusive 8 1355d 1699d 22/29 1342d e9b667a82cdc usb: usbtmc: Fix bug in pipe direction for control transfers
WARNING in mcba_usb_probe/usb_submit_urb usb can -1 syz, C error 537 1672d 2667d 22/29 1342d 136bed0bfd3b can: mcba_usb: properly check endpoint type
KASAN: use-after-free Read in udl_get_urb_timeout usb dri 19 syz, C done 142 1498d 1528d 22/29 1342d ed9605a66b62 Revert "drm/udl: Kill pending URBs at suspend and disconnect"
memory leak in dvb_usb_device_init usb media 3 syz 1 1447d 1617d 22/29 1342d 94d90fb06b94 media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
WARNING: locking bug in hfa384x_usbctlx_completion_task staging usb 4 syz, C 2 1588d 1584d 22/29 1342d ee6c6e734247 staging/wlan-ng: get the correct struct hfa384x in work callback
KMSAN: uninit-value in r871xu_drv_init usb driver-core 7 syz, C 7342 1590d 2701d 22/29 1342d 0458e5428e5e staging: rtl8712: fix uninit-value in r871xu_drv_init() d1b57669732d staging: rtl8712: fix uninit-value in usb_read8() and friends
INFO: task hung in add_early_randomness (2) usb crypto 1 syz, C done 182 1390d 1608d 22/29 1342d 228432551bd8 virtio-rng: make device ready before making request
KMSAN: uninit-value in asix_check_host_enable usb 7 syz, C 109 1650d 1708d 22/29 1342d 920a9fa27e78 net: asix: add proper error handling of usb read errors
memory leak in hidraw_report_event input usb 3 syz, C 1 1617d 1617d 22/29 1342d a5623a203cff HID: hidraw: fix memory leak in hidraw_release()
KASAN: use-after-free Read in driver_register usb driver-core 19 syz, C 131 1585d 1636d 22/29 1342d 5f0b5f4d50fa usb: gadget: fix race when gadget driver register via ioctl
WARNING in driver_unregister usb driver-core input -1 syz, C 1 1619d 1615d 22/29 1342d f2d8c2606825 usb: gadget: Fix non-unique driver names in raw-gadget driver
WARNING in aiptek_open/usb_submit_urb usb input -1 syz, C error 2380 1678d 2700d 22/29 1342d 5600f6986628 Input: aiptek - properly check endpoint type
memory leak in blk_mq_init_tags block usb 3 syz, C 2 1669d 1675d 22/29 1342d 03252259e18e scsi: sd: Clean up gendisk if device_add_disk() failed
INFO: task hung in __input_unregister_device (4) usb input 1 syz, C done 924 1514d 1579d 22/29 1342d 98e01215708b Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
KASAN: out-of-bounds Read in ath9k_hif_usb_rx_cb (3) wireless usb 17 syz, C unreliable done 7 1718d 2122d 20/29 1687d 6ce708f54cc8 ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
KASAN: slab-out-of-bounds Write in betop_probe input usb 21 syz, C unreliable 9 1895d 2451d 20/29 1687d 689e453a9b9c HID: betop: fix slab-out-of-bounds Write in betop_probe HID: betop: fix slab-out-of-bounds Write in betop_probe
KMSAN: uninit-value in dvb_usb_adapter_dvb_init (2) media usb 7 syz, C 34 1955d 2171d 20/29 1687d c5453769f77c media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init 899a61a3305d media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
memory leak in __mdiobus_register driver-core usb 3 syz, C 1 1862d 1858d 20/29 1695d ab609f25d198 net: mdiobus: Fix memory leak in __mdiobus_register ca6e11c337da phy: mdio: fix memory leak
KMSAN: uninit-value in legacy_dvb_usb_read_remote_control usb media 7 syz, C 186 1805d 2146d 20/29 1695d afae4ef7d5ad media: dvb-usb: fix ununit-value in az6027_rc_query
memory leak in bsg_register_queue driver-core usb 3 syz, C 1 1878d 1874d 20/29 1695d 1a0db7744e45 scsi: bsg: Fix device unregistration
divide error in usbnet_start_xmit usb 2 syz, C 760 1819d 1835d 20/29 1695d 397430b50a36 usbnet: sanity check for maxpacket
KASAN: slab-out-of-bounds Write in usb_hcd_poll_rh_status (2) usb 21 syz, C inconclusive 116 1758d 2241d 20/29 1695d 1d7d4c07932e USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
INFO: trying to register non-static key in mxl111sf_ctrl_msg usb media -1 syz, C 73 2650d 2753d 20/29 1695d 44870a9e7a3c media: mxl111sf: change mutex_init() location
WARNING: ODEBUG bug in corrupted (2) usb input -1 syz, C error 2 1764d 1976d 20/29 1695d 33812fc7c8d7 HID: magicmouse: Fix an error handling path in magicmouse_probe()
KASAN: use-after-free Read in rtl8712_dl_fw usb staging 19 syz, C 6961 1811d 1835d 20/29 1695d c052cc1a069c staging: rtl8712: fix use-after-free in rtl8712_dl_fw
KMSAN: kernel-usb-infoleak in usbnet_write_cmd (3) usb 9 syz, C 256 1713d 1757d 20/29 1695d d668769eb9c5 net: mcs7830: handle usb read errors properly
KASAN: use-after-free Read in blk_mq_sched_tags_teardown block usb 19 syz, C done 6 1832d 1829d 20/29 1695d 8bdf7b3fe1f4 blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown()
INFO: trying to register non-static key in ath9k_wmi_event_tasklet wireless usb -1 syz, C unreliable 7 1785d 1962d 20/29 1695d 8b3046abc99e ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
INFO: task hung in set_current_rng crypto usb 1 syz, C unreliable done 1 1821d 1939d 20/29 1695d 2bb31abdbe55 hwrng: virtio - don't wait on cleanup
KMSAN: uninit-value in ax88772a_hw_reset usb 7 syz, C 94 1713d 1801d 20/29 1695d 8035b1a2a37a asix: fix uninit-value in asix_mdio_read()
INFO: rcu detected stall in dummy_timer (3) usb 1 syz, C error 132 1709d 2297d 20/29 1695d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
KMSAN: uninit-value in asix_mdio_read (2) usb 7 syz, C 1075 1695d 1775d 20/29 1695d 8035b1a2a37a asix: fix uninit-value in asix_mdio_read()
BUG: sleeping function called from invalid context in hci_cmd_sync_cancel net usb 5 syz, C done 28 1770d 1784d 20/29 1695d 744451c162a5 Bluetooth: hci_sync: Push sync command cancellation to workqueue
INFO: rcu detected stall in newstat fs usb 1 syz, C unreliable done 4 1789d 1912d 20/29 1695d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
INFO: task hung in do_proc_bulk usb 1 syz inconclusive 8 1821d 1887d 20/29 1695d ae8709b296d8 USB: core: Make do_proc_control() and do_proc_bulk() killable
BUG: corrupted list in em28xx_init_extension usb media 8 syz, C error 18 1925d 2470d 20/29 1695d 2c98b8a3458d media: em28xx: add missing em28xx_close_extension
INFO: task hung in hwrng_register usb crypto 1 syz unreliable done 1 1841d 1897d 20/29 1695d 2bb31abdbe55 hwrng: virtio - don't wait on cleanup
WARNING: held lock freed in spi_unregister_controller spi usb 4 syz, C inconclusive 251 1794d 1835d 20/29 1695d 6c53b45c71b4 spi: fix use-after-free of the add_lock mutex
WARNING in rtl28xxu_ctrl_msg/usb_submit_urb usb -1 syz, C 50 1935d 1983d 20/29 1813d 76f22c93b209 media: rtl28xxu: fix zero-length control request media: rtl28xxu: fix zero-length control request
WARNING in hso_free_net_device usb -1 syz, C error 528 1931d 2612d 20/29 1813d 788e67f18d79 usb: hso: fix error handling code of hso_create_net_device usb: hso: fix error handling code of hso_create_net_device
KASAN: null-ptr-deref Read in phy_disconnect net usb 11 syz, C 255 1880d 1884d 20/29 1813d 1406e8cb4b05 net: usb: asix: do not call phy_disconnect() for ax88178
memory leak in zr364xx_start_readpipe media usb 3 syz, C 2 1963d 1990d 20/29 1813d 0a045eac8d04 media: zr364xx: fix memory leak in zr364xx_start_readpipe
memory leak in pcan_usb_fd_init usb can 3 syz, C 19 2077d 2147d 20/29 1813d a0b96b4a6274 drivers: net: fix memory leak in peak_usb_create_dev
WARNING in dtv5100_probe/usb_submit_urb usb -1 syz, C 51 1935d 1981d 20/29 1813d 8c8b9a9be2af media: dtv5100: fix control-request directions
WARNING in blk_rq_append_bio block usb -1 syz, C done 6 2025d 1990d 20/29 1813d cbb749cf377a block: remove an incorrect check from blk_rq_append_bio
WARNING in e2i_init/usb_submit_urb usb -1 4 1954d 1983d 20/29 1813d 41e81022a04a Input: usbtouchscreen - fix control-request directions
memory leak in smsc75xx_bind usb 3 syz 2 1982d 1983d 20/29 1813d 46a8b29c6306 net: usb: fix memory leak in smsc75xx_bind
memory leak in mcba_usb_probe usb 3 syz, C 34 1960d 2137d 20/29 1813d 91c02557174b can: mcba_usb: fix memory leak in mcba_usb
WARNING in hid_submit_ctrl/usb_submit_urb input usb -1 syz, C done 38 1879d 1928d 20/29 1813d 0a824efdb724 HID: usbhid: Fix warning caused by 0-length input reports
memory leak in nfcmrvl_nci_register_dev usb 3 syz, C 9 2080d 2125d 20/29 1813d e0652f8bb44d NFC: nci: fix memory leak in nci_allocate_device
memory leak in hdcs_probe_1020 usb media 3 syz, C 1 2041d 2037d 20/29 1813d 4f4e6644cd87 media: gscpa/stv06xx: fix memory leak
KMSAN: uninit-value in pegasus_probe usb 7 syz, C 258 1911d 2581d 20/29 1813d af35fc37354c net: pegasus: fix uninit-value in get_interrupt_interval
general protection fault in magicmouse_remove input usb 2 syz, C 47 1963d 1990d 20/29 1813d 4b4f6cecca44 HID: magicmouse: fix NULL-deref on disconnect
memory leak in dvb_create_media_graph usb media 3 syz, C 26 2019d 2177d 20/29 1813d bf9a40ae8d72 media: dvbdev: Fix memory leak in dvb_media_device_free()
memory leak in hdcs_probe_1x00 media usb 3 syz, C 1 2070d 2070d 20/29 1813d 4f4e6644cd87 media: gscpa/stv06xx: fix memory leak
WARNING in osif_probe/usb_submit_urb usb -1 syz, C 45 1938d 1983d 20/29 1813d 4ca070ef0dd8 i2c: robotfuzz-osif: fix control-request directions
possible deadlock in do_fcntl usb fs 4 syz, C done 245 1889d 2221d 20/29 1813d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
WARNING in qt2_attach/usb_submit_urb usb -1 syz, C 171 1962d 1983d 20/29 1813d eb8dbe80326c USB: serial: quatech2: fix control-request directions
memory leak in hub_event (2) usb 3 syz, C 2 2050d 2053d 20/29 1813d dcb4b8ad6a44 misc/uss720: fix memory leak in uss720_probe
memory leak in usb_set_configuration (2) usb 3 syz, C 2 1907d 2016d 20/29 1813d be8656e62e9e media: cpia2: fix memory leak in cpia2_usb_probe
WARNING in usb_new_device/usb_submit_urb usb -1 syz, C 2 1977d 1973d 20/29 1813d 60dfe484cef4 USB: core: Avoid WARNings for 0-length descriptor requests
WARNING in rtl8152_probe usb -1 syz, C 23 1972d 1995d 20/29 1813d 1a44fb38cc65 r8152: check the informaton of the device
WARNING in do_proc_control/usb_submit_urb usb -1 syz, C error 456 1922d 1936d 20/29 1813d b0863f192732 USB: core: Fix incorrect pipe calculation in do_proc_control()
general protection fault in gadget_setup usb 2 1 2040d 2024d 20/29 1813d 4a5d797a9f9c usb: gadget: dummy_hcd: fix gpf in gadget_setup
KASAN: slab-out-of-bounds Read in do_wait_for_common usb staging 19 syz, C error 5 1907d 1927d 20/29 1813d e9e6aa51b273 staging: rtl8712: error handling refactoring
memory leak in em28xx_dvb_init media usb 3 syz, C 1 2052d 2052d 20/29 1813d 0ae10a7dc899 media: em28xx: fix memory leak
memory leak in __usbhid_submit_report input usb 3 syz, C 129 1883d 2177d 20/29 1813d f7744fa16b96 HID: usbhid: free raw_report buffers in usbhid_stop
KASAN: use-after-free Read in r871xu_dev_remove usb staging 19 syz, C unreliable 152 1907d 1933d 20/29 1813d e9e6aa51b273 staging: rtl8712: error handling refactoring
KASAN: slab-out-of-bounds Read in snd_usbmidi_get_ms_info usb sound 17 syz, C 10 1992d 1997d 20/29 1813d e84749a78dc8 ALSA: usb-audio: Validate MS endpoint descriptors
memory leak in snd_ctl_led_register driver-core usb 3 syz, C 1 2000d 1990d 20/29 1813d 3ae72f6ab9c1 ALSA: control led: fix memory leak in snd_ctl_led_register
KMSAN: kernel-usb-infoleak in hid_submit_ctrl input usb 9 syz, C 839 1987d 2596d 20/29 1813d 6be388f4a35d HID: usbhid: fix info leak in hid_submit_ctrl
KMSAN: uninit-value in asix_mdio_read usb 7 syz, C 915 1914d 2577d 20/29 1813d a786e3195d6a net: asix: fix uninit value bugs
WARNING in input_register_device usb input driver-core -1 syz, C error done 11 2030d 2182d 20/29 1813d b4104180a2ef kobject_uevent: remove warning in init_uevent_argv()
memory leak in cinergyt2_fe_attach usb media 3 syz, C 3 2118d 2176d 20/29 1813d 9ad1efee086e media: dvd_usb: memory leak in cinergyt2_fe_attach
INFO: task hung in usb_remote_wakeup (2) usb 1 syz inconclusive done 9 1895d 2093d 20/29 1813d 363eaa3a450a usbip: synchronize event handler with sysfs code paths
WARNING in pvr2_i2c_core_done usb -1 syz, C error 5780 1935d 2590d 20/29 1813d f8194e5e63fd media: pvrusb2: fix warning in pvr2_i2c_core_done
WARNING: zero-size vmalloc in dvb_dmx_init media usb -1 syz, C 62 1935d 1999d 20/29 1813d c680ed46e418 media: dvb-usb: fix wrong definition
KASAN: use-after-free Read in blk_mq_exit_sched block usb 19 syz, C done 9 1953d 1967d 20/29 1813d f0c1c4d2864e blk-mq: fix use-after-free in blk_mq_exit_sched
WARNING in __vmalloc_node_range media usb -1 syz, C 7 1999d 2001d 20/29 1813d c680ed46e418 media: dvb-usb: fix wrong definition
memory leak in usb_urb_init media usb 3 syz, C 1 2126d 2122d 20/29 1813d b7cd0da982e3 media: dvb-usb: fix memory leak in dvb_usb_adapter_init
memory leak in atusb_probe usb wpan 3 syz, C 71 2029d 2175d 20/29 1813d 6b9fbe169551 drivers: net: fix memory leak in atusb_probe
UBSAN: shift-out-of-bounds in vhci_hub_control (2) usb -1 syz, C unreliable 5 2035d 2044d 20/29 1813d 1cc5ed25bdad usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control()
memory leak in v4l2_ctrl_handler_init_class usb media 3 syz, C 12 2018d 2071d 20/29 1813d 9c39be40c015 media: drivers/media/usb: fix memory leak in zr364xx_probe
KMSAN: uninit-value in ax88179_get_mac_addr usb 7 syz, C 149 1931d 2196d 20/29 1813d bd78980be1a6 net: usb: ax88179_178a: initialize local variables before use
general protection fault in drm_client_buffer_vunmap usb dri 2 syz, C unreliable done 247 2056d 2158d 20/29 2024d 874a52f9b693 drm/fb-helper: only unmap if buffer not null
general protection fault in usb_audio_probe sound usb 2 syz, C done 360 2058d 2060d 20/29 2027d 30dea07180de ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe
UBSAN: shift-out-of-bounds in mceusb_dev_printdata media usb -1 syz, C error 331 2074d 2142d 20/29 2027d 9dec0f48a75e media: mceusb: sanity check for prescaler value
general protection fault in kobject_cleanup gpio usb 2 syz, C unreliable 72 2058d 2071d 20/29 2027d a6112998ee45 gpio: fix NULL-deref-on-deregistration regression
UBSAN: shift-out-of-bounds in snto32 input usb -1 syz, C error 58 2072d 2144d 20/29 2027d a0312af1f94d HID: core: detect and skip invalid inputs to snto32()
memory leak in dlfb_usb_probe usb fbdev 3 syz, C 3 2141d 2144d 20/29 2027d 5c0e4110f751 udlfb: Fix memory leak in dlfb_usb_probe
memory leak in zr364xx_probe usb media 3 syz, C 6 2082d 2135d 20/29 2027d ea354b6ddd6f media: zr364xx: fix memory leaks in probe()
KASAN: use-after-free Read in usb_audio_disconnect sound usb 19 syz, C done 15 2058d 2059d 20/29 2027d c5aa956eaeb0 ALSA: usb-audio: fix use after free in usb_audio_disconnect
UBSAN: shift-out-of-bounds in mceusb_dev_recv media usb -1 syz, C 13 2074d 2139d 20/29 2027d 1b43bad31fb0 media: mceusb: Fix potential out-of-bounds shift
general protection fault in tomoyo_socket_sendmsg_permission usb 8 17 2085d 2175d 20/29 2027d 9380afd6df70 usbip: fix stub_dev usbip_sockfd_store() races leading to gpf 718ad9693e36 usbip: fix vhci_hcd attach_store() races leading to gpf 46613c9dfa96 usbip: fix vudc usbip_sockfd_store races leading to gpf
memory leak in edge_startup usb 3 syz, C 1 2070d 2066d 20/29 2027d cfdc67acc785 USB: serial: io_edgeport: fix memory leak in edge_startup
unexpected kernel reboot (3) input usb -1 syz, C error error 21132 2028d 3028d 20/29 2027d c8e2fe13d1d1 x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
KASAN: null-ptr-deref Write in event_handler usb 12 syz, C done 2869 2067d 2214d 20/29 2027d 9380afd6df70 usbip: fix stub_dev usbip_sockfd_store() races leading to gpf 718ad9693e36 usbip: fix vhci_hcd attach_store() races leading to gpf 46613c9dfa96 usbip: fix vudc usbip_sockfd_store races leading to gpf
WARNING in spi_register_controller usb spi -1 syz, C 1848 2142d 2756d 19/29 2058d 9c60cc797cf7 media: msi2500: assign SPI bus number dynamically
UBSAN: shift-out-of-bounds in dummy_hub_control usb -1 syz, C done 5 2135d 2132d 19/29 2058d c318840fb2a4 USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug
UBSAN: shift-out-of-bounds in parse_audio_format_i sound usb -1 syz, C error 19 2143d 2149d 19/29 2058d 175b8d89fe29 ALSA: pcm: oss: Fix potential out-of-bounds shift 43d5ca88dfcd ALSA: usb-audio: Fix potential out-of-bounds shift
UBSAN: shift-out-of-bounds in option_probe usb -1 syz, C error 22 2148d 2149d 19/29 2058d a251963f76fa USB: serial: option: add interface-number sanity check to flag handling
memory leak in hub_event usb 3 syz, C 7 2079d 2168d 19/29 2058d e469d0b09a19 media: gspca: Fix memory leak in probe
WARNING in yurex_write/usb_submit_urb usb -1 syz, C error 78 2117d 2145d 19/29 2058d 372c93131998 USB: yurex: fix control-URB timeout handling
UBSAN: shift-out-of-bounds in snd_usbmidi_get_ms_info sound usb -1 syz, C error 9 2116d 2135d 19/29 2058d c06ccf3ebb75 ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
UBSAN: shift-out-of-bounds in vhci_hub_control usb -1 syz, C unreliable 4 2099d 2135d 19/29 2058d 718bf42b119d usb: usbip: vhci_hcd: protect shift size
general protection fault in tower_disconnect usb 2 syz, C 53 2142d 2150d 19/29 2058d b175d273d4e4 USB: legotower: fix logical error in recent commit
memory leak in wacom_probe input usb 3 syz, C 26 2121d 2176d 19/29 2058d 37309f47e2f5 HID: wacom: Fix memory leakage caused by kfifo_alloc
KASAN: use-after-free Read in service_outstanding_interrupt usb 19 syz, C 28 2118d 2273d 19/29 2058d 5e5ff0b4b6bc USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
WARNING in cm109_input_ev/usb_submit_urb input usb -1 syz, C unreliable 8 2147d 2168d 19/29 2058d 82e060904732 Input: cm109 - do not stomp on control URB
memory leak in gadget_setup usb 3 syz, C 49 2179d 2196d 15/29 2168d 129aa9734559 usb: raw-gadget: fix memory leak in gadget_setup
memory leak in gadget_bind usb 3 syz, C 62 2179d 2196d 15/29 2168d 129aa9734559 usb: raw-gadget: fix memory leak in gadget_setup
INFO: task hung in wdm_flush usb 1 syz, C 38294 2249d 2634d 15/29 2172d 37d2a36394d9 USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
KMSAN: uninit-value in batadv_hard_if_event (2) batman usb 7 syz, C 162 2188d 2271d 15/29 2172d f45a4248ea4c net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
WARNING in ati_remote_sendpacket/usb_submit_urb usb media -1 syz, C 22 2343d 2654d 15/29 2172d a8be80053ea7 media: ati_remote: sanity check for both endpoints
general protection fault in vmk80xx_write_packet usb staging 2 syz, C 82 2212d 2668d 15/29 2172d e1f13c879a7c staging: comedi: check validity of wMaxPacketSize of usb endpoints found
INFO: trying to register non-static key in del_timer_sync (2) usb wireless -1 syz, C 1206 2704d 2756d 15/29 2172d 621a3a8b1c0e mwifiex: don't call del_timer_sync() on uninitialized timer
KASAN: slab-out-of-bounds Read in read_descriptors (2) usb 17 1 2259d 2255d 15/29 2209d a18cd6c9b6bc usb: core: fix slab-out-of-bounds Read in read_descriptors
KASAN: slab-out-of-bounds Read in prism2sta_probe_usb staging usb 17 syz, C 8 2250d 2281d 15/29 2209d fea22e159d51 staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
KASAN: slab-out-of-bounds Write in hiddev_ioctl_usage input usb 21 syz, C 279 2252d 2595d 15/29 2224d 25a097f52046 HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
WARNING in slab_pre_alloc_hook usb -1 syz, C 210 2249d 2270d 15/29 2224d f176ede3a3bd USB: yurex: Fix bad gfp argument
KMSAN: kernel-infoleak in raw_ioctl usb 9 syz, C 22 2246d 2271d 15/29 2224d a092b7233f0e net: usb: Fix uninit-was-stored issue in asix_read_phy_addr()
WARNING in r871xu_dev_remove usb staging -1 syz, C 47375 2272d 2624d 15/29 2232d b4383c971bc5 staging: rtl8712: handle firmware load failure
general protection fault in cdev_del usb fs 2 syz, C 315 2242d 2710d 15/29 2232d e911e99a0770 usb: hso: check for return value in hso_serial_common_create()
WARNING in submit_rx_urb/usb_submit_urb usb staging -1 syz, C 397 2284d 2709d 15/29 2232d faaff9765664 staging: wlan-ng: properly check endpoint types
KASAN: use-after-free Read in ax88172a_unbind usb 19 syz, C done 2723 2284d 2524d 15/29 2232d c28d9a285668 ax88172a: fix ax88172a_unbind() failures
WARNING in submit_audio_out_urb/usb_submit_urb sound usb -1 syz 2 2302d 2302d 15/29 2232d 6e8a914ad619 ALSA: line6: Perform sanity check for each URB creation
WARNING in snd_usbmidi_submit_urb/usb_submit_urb usb sound -1 syz, C done 42 2316d 2340d 15/29 2232d 9b7e5208a941 ALSA: usb-audio: Fix race against the error recovery URB submission
general protection fault in go7007_usb_probe usb media 2 syz, C 2103 2272d 2380d 15/29 2232d 137641287eb4 go7007: add sanity checking for endpoints
WARNING in snd_usbmidi_input_start/usb_submit_urb usb sound -1 syz, C done 231 2293d 2336d 15/29 2232d 9b7e5208a941 ALSA: usb-audio: Fix race against the error recovery URB submission
BUG: unable to handle kernel NULL pointer dereference in schedule_timeout usb 10 1 2314d 2314d 15/29 2294d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id usb sound 21 syz, C done 39 2312d 2317d 15/29 2294d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
KASAN: slab-out-of-bounds Write in snd_usb_mixer_interrupt sound usb 21 syz, C done 5 2316d 2317d 15/29 2294d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
INFO: task hung in locks_remove_posix fs input usb 1 syz 2231 2329d 2351d 15/29 2294d 187b96db5ca7 x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
KASAN: use-after-free Read in usblp_bulk_read usb 19 7 2303d 2381d 15/29 2294d 296a193b0612 usblp: poison URBs upon disconnect
WARNING in usbhid_raw_request/usb_submit_urb (3) usb -1 syz 18 2373d 2479d 15/29 2294d ac854131d984 USB: core: Fix misleading driver bug report
KASAN: slab-out-of-bounds Read in garmin_read_process usb 17 syz, C 1 2412d 2412d 15/29 2294d e9b3c610a05c USB: serial: garmin_gps: add sanity checking for data length
KASAN: use-after-free Read in usbhid_close (3) input usb 19 syz, C 6 2367d 2395d 15/29 2294d 0ed08faded1d HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
BUG: unable to handle kernel NULL pointer dereference in udc_bind_to_driver usb 10 1 2322d 2322d 15/29 2294d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
WARNING in wa_nep_create/usb_submit_urb usb staging -1 syz, C 114 2383d 2667d 15/29 2313d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
WARNING in hwarc_neep_init/usb_submit_urb staging usb -1 syz, C 1 2417d 2417d 15/29 2313d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
BUG: corrupted list in __uwb_rc_neh_rm usb staging 8 syz, C 9 2389d 2424d 15/29 2313d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
KASAN: use-after-free Read in chaoskey_disconnect crypto usb 19 syz, C 44 2526d 2555d 15/29 2322d 93ddb1f56ae1 USB: chaoskey: fix use-after-free on release
KASAN: slab-out-of-bounds Read in edge_interrupt_callback usb 17 syz, C 1 2411d 2410d 15/29 2362d 57aa9f294b09 USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback
KASAN: slab-out-of-bounds Read in hfa384x_usbin_callback staging usb 17 syz, C 1 2413d 2412d 15/29 2362d 1165dd73e811 staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback
BUG: soft lockup in sys_exit_group usb 1 syz, C 6 2412d 2435d 15/29 2387d d683469b3c93 ALSA: line6: Fix endless MIDI read loop
KASAN: use-after-free Write in hiddev_disconnect input usb 22 20 2414d 2479d 15/29 2387d 5c02c447eaed HID: hiddev: Fix race in in hiddev_disconnect()
WARNING in _chaoskey_fill/usb_submit_urb usb -1 syz, C 15 2539d 2592d 15/29 2421d 92aa5986f4f7 USB: chaoskey: fix error case of a timeout
WARNING in flexcop_usb_probe/usb_submit_urb usb media -1 syz, C 4 2587d 2625d 15/29 2421d 1b976fc6d684 media: b2c2-flexcop-usb: add sanity checking
KMSAN: uninit-value in sd_init (2) media usb 7 syz, C 94 2550d 2546d 15/29 2444d de89d0864f66 media: gspca: zero usb_buf
KMSAN: uninit-value in digitv_rc_query media usb 7 syz, C 4 2562d 2546d 15/29 2444d eecc70d22ae5 media: digitv: don't continue if remote control state can't be read 569bc8d6a6a5 media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
KMSAN: uninit-value in number media usb 7 syz, C 190 2448d 2546d 15/29 2444d 51d0c99b391f media: af9005: uninitialized variable printked
KMSAN: uninit-value in i2c_w (2) media usb 7 syz, C 3 2557d 2546d 15/29 2444d de89d0864f66 media: gspca: zero usb_buf
KMSAN: uninit-value in read_sensor_register (2) usb media 7 syz, C 44 2551d 2568d 15/29 2444d de89d0864f66 media: gspca: zero usb_buf
WARNING in dln2_start_rx_urbs/usb_submit_urb usb mfd -1 syz, C 44 2459d 2548d 15/29 2444d 2b8bd606b1e6 mfd: dln2: More sanity checking for endpoints
KASAN: slab-out-of-bounds Read in hid_field_extract input usb 17 syz, C 6 2484d 2518d 15/29 2444d 8ec321e96e05 HID: Fix slab-out-of-bounds read in hid_field_extract
WARNING: ODEBUG bug in rsi_probe usb wireless -1 syz, C 10487 2458d 2753d 15/29 2444d 92aafe77123a rsi: fix use-after-free on probe errors
WARNING in uvc_scan_chain_forward usb media -1 syz, C 6 2483d 2508d 15/29 2444d 68035c80e129 media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
general protection fault in gigaset_probe staging usb 2 syz, C 6 2533d 2652d 15/29 2448d 53f35a39c386 staging: gigaset: fix general protection fault on probe
KASAN: slab-out-of-bounds Read in build_audio_procunit (2) sound usb 17 syz, C 1 2547d 2547d 15/29 2469d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
KMSAN: uninit-value in usbnet_probe usb 7 syz, C 1 2702d 2702d 15/29 2485d 78226f6eaac8 net: usb: asix: init MAC address buffers
KASAN: global-out-of-bounds Write in kbd_event input usb serial 21 syz, C 6 2525d 2548d 15/29 2511d b2b2dd71e085 tty: vt: keyboard: reject invalid keycodes
general protection fault in flexcop_usb_probe usb media 2 syz, C 403 2525d 2756d 15/29 2511d 1b976fc6d684 media: b2c2-flexcop-usb: add sanity checking
kernel BUG at kernel/time/timer.c:LINE! (4) usb media -1 syz 1 2581d 2578d 15/29 2511d f3f5ba42c58d media: imon: invalid dereference in imon_touch_event
KASAN: use-after-free Read in appledisplay_bl_get_brightness usb 19 syz, C 1 2594d 2592d 15/29 2511d 91feb01596e5 appledisplay: fix error handling in the scheduled work
INFO: trying to register non-static key in ida_destroy usb media -1 syz, C 4272 2525d 2648d 15/29 2511d 8c279e9394ca media: uvcvideo: Fix error path in control parsing failure
general protection fault in snd_usb_create_mixer usb sound 2 syz, C 1 2534d 2533d 15/29 2511d 9435f2bb6687 ALSA: usb-audio: Fix NULL dereference at parsing BADD
general protection fault in usb_set_interface usb 2 syz, C 3 2596d 2599d 15/29 2511d c7a191464078 media: usbvision: Fix invalid accesses after device disconnect
WARNING in port100_send_cmd_async/usb_submit_urb usb nfc -1 syz, C 83 2526d 2667d 15/29 2513d 5f9f0b11f081 nfc: port100: handle command failure cleanly
KMSAN: uninit-value in ax88172a_bind usb 7 syz, C 5 2557d 2570d 14/29 2525d a9a51bd727d1 ax88172a: fix information leak on short answers
KMSAN: use-after-free in build_audio_procunit sound usb 18 syz, C 2 2562d 2562d 14/29 2525d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
KMSAN: uninit-value in get_min_max_with_quirks sound usb 7 syz, C 11 2557d 2546d 14/29 2525d 167beb175679 ALSA: usb-audio: Fix missing error check at mixer resolution test
WARNING: ODEBUG bug in input_ff_destroy input usb -1 syz, C 6 2533d 2541d 14/29 2525d fa3a5a1880c9 Input: ff-memless - kill timer in destroy()
KMSAN: uninit-value in cdc_ncm_set_dgram_size usb 7 syz, C 4 2555d 2554d 14/29 2525d 332f989a3b00 CDC-NCM: handle incomplete transfer of MTU
KASAN: use-after-free Read in mcba_usb_disconnect can usb 19 syz, C 2 2552d 2584d 14/29 2525d 4d6636498c41 can: mcba_usb: fix use-after-free on disconnect
KMSAN: kernel-usb-infoleak in pcan_usb_wait_rsp usb 9 syz, C 2 2569d 2568d 14/29 2525d f7a1337f0d29 can: peak_usb: fix slab info leak
KASAN: invalid-free in rsi_91x_deinit usb wireless 24 syz, C 109 2598d 2745d 13/29 2525d 8b51dc729147 rsi: fix a double free bug in rsi_91x_deinit()
KMSAN: use-after-free in adu_disconnect usb 18 syz, C 16 2571d 2577d 13/29 2527d 44efc269db79 USB: adutux: fix use-after-free on disconnect
KMSAN: use-after-free in mutex_spin_on_owner usb 18 syz, C 1 2576d 2576d 13/29 2527d bc0e4f16c44e USB: iowarrior: fix use-after-free on disconnect
KMSAN: use-after-free in iowarrior_disconnect usb 18 syz, C 21 2571d 2577d 13/29 2527d bc0e4f16c44e USB: iowarrior: fix use-after-free on disconnect
KMSAN: use-after-free in usb_autopm_put_interface usb 18 syz, C 63 2557d 2570d 13/29 2527d 7a7591979748 USB: usblp: fix use-after-free on disconnect
KMSAN: use-after-free in __pm_runtime_resume usb 18 1 2577d 2577d 13/29 2527d 5f9242775bb6 HID: logitech: Fix general protection fault caused by Logitech driver
KMSAN: uninit-value in lg4ff_set_autocenter_default input usb 7 syz, C 1 2557d 2557d 13/29 2527d d9d4b1e46d95 HID: Fix assumption that devices have inputs
divide error in dummy_timer usb 2 syz, C 3 2555d 2561d 13/29 2531d 54f83b8c8ea9 USB: gadget: Reject endpoints with 0 maxpacket value
INFO: task hung in ld_usb_write usb 1 syz, C 831 2550d 2563d 13/29 2531d 52403cfbc635 USB: ldusb: fix control-message timeout
KASAN: use-after-free Read in iowarrior_disconnect usb 19 syz, C 3056 2571d 2627d 13/29 2533d bc0e4f16c44e USB: iowarrior: fix use-after-free on disconnect
divide error in usbtmc_generic_read usb 2 syz, C 2 2632d 2632d 13/29 2533d de7b9aa633b6 usbtmc: more sanity checking for packet size
KASAN: use-after-free Read in vhci_hub_control usb 19 syz, C done 41 2931d 2977d 13/29 2533d 81f7567c51ad usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
KASAN: slab-out-of-bounds Read in ld_usb_read (3) usb 17 syz, C 74 2557d 2568d 13/29 2548d 7a6f22d7479b USB: ldusb: fix read info leaks
KASAN: slab-out-of-bounds Read in build_audio_procunit usb sound 17 syz, C 6 2554d 2563d 13/29 2548d ba8bf0967a15 ALSA: usb-audio: Fix copy&paste error in the validator
KASAN: use-after-free Read in usb_autopm_put_interface usb 19 syz, C 2373 2557d 2570d 13/29 2548d 7a7591979748 USB: usblp: fix use-after-free on disconnect
KMSAN: uninit-value in sr9800_bind usb 7 syz, C 27 2559d 2582d 13/29 2550d 77b6d09f4ae6 net: usb: sr9800: fix uninitialized local variable
KASAN: use-after-free Read in pn533_send_complete nfc usb 19 syz, C 4 2557d 2578d 13/29 2550d 6af3aa57a098 NFC: pn533: fix use-after-free and memleaks
possible deadlock in usb_deregister_dev (2) usb 4 syz, C 956 2571d 2599d 13/29 2557d 33a7813219f2 USB: legousbtower: fix deadlock on disconnect
KMSAN: uninit-value in mts_usb_probe usb 7 syz, C 29 2577d 2582d 13/29 2557d 177238c3d47d USB: microtek: fix info-leak at probe
KMSAN: uninit-value in iowarrior_disconnect usb 7 syz, C 18 2575d 2581d 13/29 2557d bc0e4f16c44e USB: iowarrior: fix use-after-free on disconnect
KASAN: use-after-free Read in adu_disconnect usb 19 syz, C 5304 2571d 2641d 13/29 2557d 44efc269db79 USB: adutux: fix use-after-free on disconnect
INFO: rcu detected stall in dummy_timer usb 1 syz, C 16 2572d 2637d 13/29 2557d 32a0721c6620 USB: yurex: Don't retry on unexpected errors
KASAN: invalid-free in disconnect_rio (2) usb 24 syz, C 51 2574d 2596d 13/29 2557d 015664d15270 USB: rio500: Remove Rio 500 kernel driver
WARNING in em28xx_usb_disconnect usb media -1 syz, C 8 2604d 2637d 13/29 2569d 46e4a26615cc media: em28xx: modules workqueue not inited for 2nd device
KASAN: use-after-free Read in si470x_int_in_callback usb media 19 syz, C 25 2579d 2668d 13/29 2569d 0d616f2a3fdb media: radio/si470x: kill urb on error
general protection fault in ath6kl_usb_alloc_urb_from_pipe usb wireless 2 syz, C 1160 2596d 2756d 13/29 2569d 39d170b3cb62 ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
KMSAN: uninit-value in read_sensor_register usb media 7 syz, C 25 2569d 2699d 13/29 2569d 4843a543fad3 media: gspca: zero usb_buf on error
KMSAN: kernel-usb-infoleak in ttusb_dec_send_command usb 9 syz, C 2 2637d 2647d 13/29 2569d a10feaf8c464 media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
KASAN: use-after-free Read in atusb_disconnect usb wpan 19 syz, C 112 2571d 2612d 13/29 2569d 7fd25e6fc035 ieee802154: atusb: fix use-after-free at disconnect
KASAN: slab-out-of-bounds Read in hdpvr_probe usb media 17 syz, C 10 2606d 2681d 13/29 2569d 8b8900b729e4 media: hdpvr: add terminating 0 at end of string
KASAN: global-out-of-bounds Read in load_next_firmware_from_table usb libertas 17 syz, C 5 2618d 2668d 13/29 2569d 764f3f1ecffc libertas: Add missing sentinel at end of if_usb.c fw_table
divide error in usbnet_update_max_qlen usb 2 syz, C 17 2586d 2599d 13/29 2569d 280ceaed79f1 usbnet: sanity checking of packet sizes and device mtu
KASAN: slab-out-of-bounds Read in technisat_usb2_rc_query usb media 17 syz, C 2236 2615d 2753d 13/29 2569d 0c4df39e504b media: technisat-usb2: break out of loop at end of buffer
KASAN: global-out-of-bounds Read in dvb_pll_attach media usb 17 syz, C 2 2607d 2667d 13/29 2569d c268e7adea52 media: dvb-frontends: use ida for pll number
general protection fault in pk_probe input usb 2 syz, C 2 2616d 2612d 13/29 2569d 98375b86c791 HID: prodikeys: Fix general protection fault during probe
KASAN: global-out-of-bounds Read in hdpvr_probe usb media 17 syz, C 15 2622d 2736d 13/29 2569d d4a6a9537bc3 media: hdpvr: Add device num check and handling
WARNING: ODEBUG bug in usbhid_disconnect (2) usb input -1 syz, C 48 2590d 2612d 13/29 2569d 2bcdacb70327 HID: sony: Fix memory corruption issue on cleanup.
KASAN: slab-out-of-bounds Read in usb_reset_and_verify_device usb 17 syz 1 2620d 2612d 13/29 2569d 3dd550a2d365 USB: usbcore: Fix slab-out-of-bounds bug during device reset
KMSAN: uninit-value in i2c_w media usb 7 syz, C 2 2703d 2702d 13/29 2569d 4843a543fad3 media: gspca: zero usb_buf on error
possible deadlock in open_rio (3) usb 4 syz, C 169 2596d 2598d 13/29 2569d 9472aff16ca0 USB: rio500: Fix lockdep violation
WARNING in zd_mac_clear usb wireless -1 syz, C 13194 2596d 2756d 13/29 2569d 7a2eb7367fde zd1211rw: remove false assertion from zd_mac_clear()
KMSAN: uninit-value in sd_init usb media 7 syz, C 122 2570d 2702d 13/29 2569d 4843a543fad3 media: gspca: zero usb_buf on error
WARNING in iguanair_probe/usb_submit_urb media usb -1 syz, C 3 2600d 2651d 13/29 2569d ab1cbdf159be media: iguanair: add sanity checks
general protection fault in __pm_runtime_resume input usb 2 syz, C 197 2590d 2653d 13/29 2569d 5f9242775bb6 HID: logitech: Fix general protection fault caused by Logitech driver
divide error in cdc_ncm_update_rxtx_max usb 2 syz, C 5 2585d 2599d 13/29 2569d 3fe4b3351301 cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
possible deadlock in open_rio usb 4 1107 2608d 2645d 12/29 2608d 2ca359f4f8b9 Revert "USB: rio500: simplify locking"
possible deadlock in usb_deregister_dev usb 4 syz, C 82 2634d 2641d 12/29 2608d c468a8aa790e usb: iowarrior: fix deadlock on disconnect
WARNING in __iforce_usb_xmit/usb_submit_urb usb input -1 syz, C 3 2637d 2641d 12/29 2608d 849f5ae3a513 Input: iforce - add sanity checks
WARNING in kbtab_open/usb_submit_urb usb -1 syz, C 5 2636d 2654d 12/29 2608d c88090dfc842 Input: kbtab - sanity check for endpoint type
WARNING in usbtouch_open input usb -1 syz, C 768 2634d 2648d 12/29 2608d b55d996f057b Input: usbtouchscreen - initialize PM mutex before using it
KASAN: use-after-free Read in usb_free_coherent usb 19 310 2634d 2645d 12/29 2608d fc05481b2fca usb: yurex: Fix use-after-free in yurex_delete
KASAN: use-after-free Read in ld_usb_release usb 19 syz, C 14 2627d 2637d 12/29 2608d 303911cfc5b9 USB: core: Fix races in character device registration and deregistraion
KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind net usb 17 syz, C 2 2632d 2634d 12/29 2608d 54364278fb3c USB: CDC: fix sanity checks in CDC union parser
KASAN: use-after-free Read in device_release_driver_internal usb driver-core 19 syz, C 5 2630d 2654d 12/29 2608d c52873e5a1ef usb: cdc-acm: make sure a refcount is taken early enough
WARNING in wdm_write/usb_submit_urb usb -1 syz, C 15 2612d 2627d 12/29 2608d 1426bd2c9f7e USB: cdc-wdm: fix race between write and disconnect due to flag abuse
KMSAN: kernel-usb-infoleak in pcan_usb_pro_send_req usb 9 syz, C 16 2621d 2647d 12/29 2619d 30a8beeb3042 can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
KASAN: use-after-free Read in hiddev_release input usb 19 syz, C 11 2629d 2645d 12/29 2619d 9c09b214f30e HID: hiddev: avoid opening a disconnected device 6d4472d7bec3 HID: hiddev: do cleanup in failure of opening a device
KMSAN: kernel-usb-infoleak in pcan_usb_pro_init usb 9 syz, C 13 2623d 2647d 12/29 2619d ead16e53c2f0 can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
WARNING in gpio_to_desc usb gpio -1 syz, C 3 2636d 2667d 12/29 2619d c3953a3c2d31 NFC: nfcmrvl: fix gpio-handling regression
KMSAN: uninit-value in read_eprom_word usb 7 syz, C 31 2621d 2647d 12/29 2619d 224c04973db1 net: usb: pegasus: fix improper read if get_registers() fail
general protection fault in snd_usb_pipe_sanity_check usb sound 2 syz, C 72 2634d 2648d 12/29 2632d 5d78e1c2b7f4 ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
KASAN: stack-out-of-bounds Read in hfcsusb_probe usb 17 syz, C 634 2648d 2753d 12/29 2632d f384e62a82ba ISDN: hfcsusb: checking idx of ep configuration
kernel BUG at drivers/usb/wusbcore/wusbhc.c:LINE! usb -1 syz, C 1 2654d 2654d 12/29 2632d f90bf1ece48a usb: wusbcore: fix unbalanced get/put cluster_id
WARNING: Support for this device (Terratec Grabster AV400) is experimental. usb -1 syz, C 371 2648d 2738d 12/29 2641d 1753c7c4367a media: pvrusb2: use a different format for warnings
KMSAN: uninit-value in ax88772_bind usb 7 syz, C 80 2643d 2704d 12/29 2641d 78226f6eaac8 net: usb: asix: init MAC address buffers
KASAN: use-after-free Read in cpia2_usb_disconnect usb media 19 syz, C 3 2667d 2752d 12/29 2641d eff73de2b160 media: cpia2_usb: first wake up, then free in disconnect
WARNING in __flush_work (3) usb -1 syz, C 1251 2643d 2753d 12/29 2641d 11a087f484bf media: uvcvideo: Fix access to uninitialized fields on probe error
KASAN: use-after-free Read in dvb_usb_device_exit usb 19 syz, C 825 2641d 2756d 12/29 2641d 6cf97230cd5f media: dvb: usb: fix use after free in dvb_usb_device_exit
INFO: trying to register non-static key in rtl_c2hcmd_launcher usb wireless -1 syz, C 48950 2648d 2756d 12/29 2641d 6c0ed66f1a5b rtlwifi: rtl8192cu: fix error handle when usb probe failed
KASAN: null-ptr-deref Read in zr364xx_vidioc_querycap usb media 11 syz, C 76 2648d 2739d 12/29 2641d 5d2e73a5f80a media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
WARNING: ath10k USB support is incomplete, don't expect anything to work! usb -1 syz, C 347 2649d 2729d 12/29 2641d 265df32eae58 ath10k: Change the warning message string
KASAN: use-after-free Read in v4l2_release usb media 19 syz, C 275 2649d 2753d 12/29 2641d c666355e60dd media: radio-raremono: change devm_k*alloc to k*alloc
WARNING: Detected a wedged cx25840 chip; the device will not work. usb -1 syz, C 62 2649d 2738d 12/29 2641d 1753c7c4367a media: pvrusb2: use a different format for warnings
WARNING in snd_usb_motu_microbookii_communicate/usb_submit_urb usb -1 syz, C 3 2658d 2696d 12/29 2641d 801ebf1043ae ALSA: usb-audio: Sanity checks for each pipe and EP types
KASAN: use-after-free Read in p54u_load_firmware_cb usb wireless 19 syz 40 2648d 2732d 12/29 2641d 6e41e2257f10 p54usb: Fix race between disconnect and firmware loading
KASAN: global-out-of-bounds Read in qmi_wwan_probe usb 17 syz, C 2 2671d 2683d 12/29 2648d 904d88d743b0 qmi_wwan: Fix out-of-bounds read
KASAN: null-ptr-deref Write in submit_audio_out_urb (2) usb 12 syz, C 3423 2648d 2680d 12/29 2648d 3450121997ce ALSA: line6: Fix write on zero-sized buffer
WARNING: proc registration bug in snd_info_card_register usb sound -1 syz, C 453 2712d 2756d 12/29 2682d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
general protection fault in sisusb_probe driver-core usb 2 syz, C 3 2726d 2729d 12/29 2687d 9a5729f68d3a USB: sisusbvga: fix oops in error path of sisusb_probe
KASAN: slab-out-of-bounds Write in usb_get_bos_descriptor usb 21 syz 3 2715d 2727d 12/29 2687d a03ff5446081 USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
KASAN: invalid-free in disconnect_rio usb 24 syz, C 180 2711d 2756d 12/29 2687d 3864d33943b4 USB: rio500: refuse more than one device at a time
general protection fault in smsusb_init_device media usb 2 syz, C 23 2711d 2750d 12/29 2687d 31e0456de5be media: usb: siano: Fix general protection fault in smsusb
KASAN: null-ptr-deref Write in submit_audio_out_urb sound usb 12 syz, C 185 2695d 2711d 12/29 2689d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
INFO: task hung in usb_kill_urb usb 1 syz, C 1515 2751d 2756d 12/29 2693d 50896c410354 USB: dummy-hcd: Fix failure to give back unlinked URBs USB: dummy-hcd: Fix failure to give back unlinked URBs
general protection fault in __dev_printk usb driver-core 2 syz, C 300 2738d 2751d 12/29 2711d ef61eb43ada6 USB: yurex: Fix protection fault after device removal
INFO: trying to register non-static key in vmk80xx_detach staging usb -1 syz, C 1528 2711d 2756d 12/29 2711d 08b7c2f9208f staging: comedi: vmk80xx: Fix use of uninitialized semaphore
INFO: trying to register non-static key in ni6501_detach staging usb -1 syz, C 127 2711d 2753d 12/29 2711d 660cf4ce9d0f staging: comedi: ni_usb6501: Fix use of uninitialized mutex
KASAN: use-after-free Read in snd_info_free_entry usb sound 19 syz, C 47 2723d 2753d 12/29 2711d 2a3f7221acdd ALSA: core: Fix card races between register and disconnect 8c2f870890fd ALSA: info: Fix racy addition/deletion of nodes
KASAN: slab-out-of-bounds Read in ds_probe usb 17 syz, C 5 2713d 2751d 12/29 2711d c114944d7d67 USB: w1 ds2490: Fix bug caused by improper use of altsetting array
KASAN: stack-out-of-bounds Read in string usb driver-core 17 syz, C 46 2744d 2756d 12/29 2722d c01c348ecdc6 USB: core: Fix unterminated string returned by usb_string()
WARNING in usb_submit_urb (4) usb -1 syz done 46 2724d 2912d 12/29 2722d c2b71462d294 USB: core: Fix bug caused by duplicate interface PM usage counter
KASAN: invalid-free in hub_event usb 24 1 2893d 2893d 11/29 2871d d81bb019d7bb USB: Fix invalid-free bug in port_over_current_notify()
WARNING in usb_submit_urb (3) usb -1 syz, C 58 2922d 2937d 11/29 2920d 665c365a77fb USB: fix the usbfs flag sanitization for control transfers
KASAN: slab-out-of-bounds Read in vhci_hub_control usb 17 syz, C 43 2931d 2976d 11/29 2920d 81f7567c51ad usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
general protection fault in usb_find_alt_setting (2) usb 2 syz, C 53 2955d 2977d 11/29 2939d c9a4cb204e9e USB: handle NULL config in usb_find_alt_setting()
KASAN: use-after-free Read in destroy_async_on_interface usb 19 syz, C 134 2955d 2977d 11/29 2939d bd729f9d67aa USB: fix error handling in usb_driver_claim_interface()
WARNING in usb_submit_urb (2) usb -1 syz, C 259 2939d 2977d 11/29 2939d 7a68d9fb8510 USB: usbdevfs: sanitize flags more
KASAN: use-after-free Read in mon_bin_vma_fault usb 19 7 3214d 3225d 4/29 3188d 46eb14a6e158 USB: fix usbmon BUG trigger
BUG: Bad page state (3) usb -1 syz, C 3 3215d 3222d 4/29 3190d 46eb14a6e158 USB: fix usbmon BUG trigger
WARNING in usb_submit_urb usb -1 syz, C 2 3285d 3277d 4/29 3190d 446f666da9f0 USB: usbfs: Filter flags passed in from user space
kernel BUG at ./include/linux/mm.h:LINE! (3) usb -1 syz, C 621 3209d 3226d 3/29 3204d 46eb14a6e158 USB: fix usbmon BUG trigger