Applied filters: Manager=ci2-upstream-usb (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: slab-use-after-free Read in hidraw_report_event prio:high input usb 19 syz, C error 4 139d 140d 5/29 never HID: core: quiesce input in hid_hw_stop() to prevent use-after-free HID: synchronize input before cleaning up a failed probe hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
WARNING in drm_property_add_enum usb dri -1 syz, C error 271 6d15h 28d 20/29 never 500cb24cd61b drm/gud: NUL-terminate TV mode names read from the device
possible deadlock in zd_chip_disable_rxtx usb wireless 4 syz, C 44 45d 2103d 25/29 never 0e4532ec6586 wifi: zd1211rw: reject secondary interfaces to prevent conflicts
WARNING in asus_remove prio:low input usb -1 syz, C 295 14d 227d 2/29 never HID: asus: Add check for cancelling fn_lock_sync_work
BUG: unable to handle kernel NULL pointer dereference in usb_stor_invoke_transport (2) usb-storage prio:high 10 syz, C error 7 3d10h 5d06h 1/29 never usb: storage: ene_ub6250: set transport_reset to avoid NULL deref
WARNING in drm_plane_create_rotation_property dri usb prio:high -1 syz, C error 12 5d00h 24d 20/29 never cb732d027aa1 drm/gud: validate GUD_ROTATION_0 is present in supported rotations
UBSAN: array-index-out-of-bounds in uea_bind prio:high usb 15 syz, C 87 27d 44d 25/29 never 37a5e120118a usb: atm: ueagle-atm: fix array-index-out-of-bounds in uea_bind()
WARNING in cxacru_cm/usb_submit_urb (3) prio:high usb -1 syz, C 86 31d 44d 14/29 never usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
KASAN: slab-out-of-bounds Read in drm_property_add_enum prio:high usb dri 17 syz, C error 111 6d20h 26d 20/29 never da1ea35fea67 drm/gud: validate TV mode names before creating enum property
KASAN: use-after-free Read in em28xx_init_extension (2) prio:high usb media 19 syz, C done 1464 27d 1628d 25/29 never 826915b6b65e media: em28xx: fix use-after-free of dev_next->devlist on disconnect
KASAN: use-after-free Read in em28xx_close_extension (2) prio:high usb media 19 syz, C error 34 21h55m 724d 25/29 never 95f76f51937f media: em28xx: defer audio-only extension registration
KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect prio:high usb 17 syz, C 19 54d 58d 29/29 27d 9dfd800b374c usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
general protection fault in dummy_timer (2) prio:high usb 19 syz, C 97 27d 658d 29/29 27d d5e5cd3654d2 usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
KASAN: slab-out-of-bounds Read in usbtmc_interrupt prio:high usb 17 syz, C 5 119d 394d 29/29 60d 52f2ad3f7e5e usb: usbtmc: check URB actual_length for interrupt-IN notifications
BUG: corrupted list in dev_deactivate_many (2) prio:high net 8 syz 8 96d 97d 29/29 60d 8eed5519e496 net: watchdog: fix refcount tracking races net: watchdog: fix refcount tracking races
KASAN: slab-use-after-free Read in rtl8150_start_xmit usb net 19 146 125d 146d 29/29 115d 23f0e34c64ac net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
KASAN: slab-use-after-free Write in rsi_91x_deinit actionable wireless prio:high 22 1 152d 146d 29/29 115d db57a1aa54ff wifi: rsi: fix kthread lifetime race between self-exit and external-stop
INFO: task hung in lbs_remove_card usb libertas prio:high 1 syz, C 14933 117d 395d 29/29 115d 4a142520d166 wifi: libertas: notify firmware load wait on disconnect
KASAN: slab-use-after-free Write in as102_release (2) media 22 156 149d 499d 29/29 115d 8bd29dbe03fc media: as102: fix to not free memory after the device is registered in as102_usb_probe()
BUG: sleeping function called from invalid context in usb_tx_block usb libertas prio:high 5 syz, C 780 146d 201d 29/29 115d 7c5c2b661bdb wifi: libertas: don't kill URBs in interrupt context
KASAN: use-after-free Read in v4l2_fh_init usb media 19 syz, C error inconclusive 7824 147d 2704d 29/29 115d a66485a934c7 media: em28xx: fix use-after-free in em28xx_v4l2_open()
INFO: task hung in rpm_resume (2) usb pm 1 syz, C 17 210d 335d 29/29 115d 069c8f5aebe4 net: usb: aqc111: Do not perform PM inside suspend callback
INFO: task hung in usb_audio_probe (5) sound 1 483 125d 151d 29/29 115d 3c318f97dcc5 ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
WARNING in pvr2_send_request_ex pvrusb2 usb -1 syz, C 2 273d 282d 29/29 130d a8333c8262ae media: pvrusb2: fix URB leak in pvr2_send_request_ex
WARNING in usb_tx_block usb libertas -1 syz, C 15 155d 273d 29/29 130d d66676e6ca96 wifi: libertas: fix WARNING in usb_tx_block
general protection fault in snd_scarlett2_init sound 2 syz, C 3 193d 190d 29/29 130d df1d8abf36ca ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
INFO: task hung in usb_bulk_msg (2) usb 1 syz, C 8 188d 217d 29/29 130d 7784caa413a8 USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
BUG: corrupted list in dev_deactivate_many net 19 syz, C 22 138d 377d 29/29 130d 83b67cc9be92 linkwatch: use __dev_put() in callers to prevent UAF
WARNING in mdiobus_get_phy net usb -1 syz 2 262d 272d 29/29 230d a1e077a3f76e net: usb: asix: validate PHY address before use
KASAN: slab-use-after-free Read in btusb_disconnect usb bluetooth 19 syz, C 5 351d 436d 29/29 249d 23d22f2f7176 Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
KASAN: slab-use-after-free Read in hdm_disconnect usb 19 syz, C error 18706 319d 776d 29/29 299d 4b1270902609 most: usb: Fix use-after-free in hdm_disconnect
WARNING in media_create_pad_link (2) usb media -1 syz, C error done 11 340d 543d 29/29 303d 0e2ee70291e6 media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
INFO: rcu detected stall in watchdog bpf 1 syz, C error done 14 365d 1487d 29/29 303d eecd203ada43 media: imon: make send_packet() more robust
INFO: rcu detected stall in dummy_timer (4) usb 1 syz, C inconclusive done 25 366d 1528d 29/29 303d eecd203ada43 media: imon: make send_packet() more robust
WARNING in rtl8150_start_xmit/usb_submit_urb net usb -1 syz, C 5 360d 380d 29/29 319d 958baf5eaee3 net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb 19 syz, C 1144 340d 646d 29/29 340d b56cc41a3ae7 hid: fix I2C read buffer overflow in raw_event() for mcp2221
WARNING in bdev_count_inflight_rw block -1 2 443d 443d 29/29 358d c007062188d8 block: fix false warning in bdev_count_inflight_rw()
WARNING in usbnet_status_start usb -1 syz, C 349 419d 432d 29/29 374d 4c4ca3c46167 usb: net: sierra: check for no status endpoint
UBSAN: shift-out-of-bounds in s32ton (2) input usb -1 syz, C 4 419d 426d 29/29 374d a6b87bfc2ab5 HID: core: Harden s32ton() against conversion to 0 bits
WARNING in ath6kl_bmi_get_target_info (2) usb wireless -1 syz, C error 10349 435d 773d 29/29 403d e7417421d893 wifi: ath6kl: remove WARN on bad firmware input
INFO: task hung in uevent_show (2) kernel 1 syz, C inconclusive 8325 435d 673d 29/29 423d dc1771f71854 Revert "drivers: core: synchronize really_probe() and dev_uevent()"
UBSAN: shift-out-of-bounds in __kfifo_alloc input usb -1 syz, C 33349 463d 532d 29/29 433d 6bf8ab7774a2 HID: wacom: fix shift OOB in kfifo allocation for zero pktlen
UBSAN: array-index-out-of-bounds in usbhid_parse usb 15 syz, C error 89 467d 1063d 29/29 433d fe7f7ac8e0c7 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
WARNING in ipmr_rules_exit (2) net -1 1 479d 467d 29/29 433d c46286fdd6aa mr: consolidate the ipmr_can_free_table() checks.
WARNING in usbnet_start_xmit/usb_submit_urb (2) usb -1 syz, C error 10 572d 910d 28/29 460d 1cf9631d836b usbnet: gl620a: fix endpoint checking in genelink_bind()
general protection fault in ir_raw_event_store_with_filter usb media 22 syz, C error 879 580d 2377d 28/29 460d f656cfbc7a29 media: streamzap: fix race between device disconnection and urb callback
WARNING in cxacru_cm/usb_submit_urb (2) usb -1 syz, C 8 574d 584d 28/29 460d c90aad369899 usb: atm: cxacru: fix a flaw in existing endpoint checks
KASAN: slab-use-after-free Read in steam_input_open input usb 19 syz, C done 5 555d 568d 28/29 460d e53fc232a65f HID: hid-steam: Fix use-after-free when detaching device
KASAN: stack-out-of-bounds Read in usb_check_int_endpoints usb 17 syz, C 61 531d 595d 28/29 460d 0b43d98ff29b HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
WARNING in iguanair_probe/usb_submit_urb (2) media -1 syz, C done 18 595d 717d 28/29 495d b98d5000c505 media: rc: iguanair: handle timeouts
WARNING in rtl8150_open/usb_submit_urb usb -1 syz, C 5 588d 741d 28/29 495d 90b7f2961798 net: usb: rtl8150: enable basic endpoint checking
WARNING in thrustmaster_probe/usb_submit_urb usb -1 syz, C 25 600d 701d 28/29 495d 50420d7c79c3 HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
possible deadlock in chaoskey_release usb 4 syz, C 90 699d 705d 28/29 495d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
WARNING in uvc_status_unregister usb media -1 syz, C done 61256 586d 693d 28/29 495d a67f75c2b5ec media: uvcvideo: Fix deadlock during uvc_probe
INFO: rcu detected stall in hub_event usb 1 syz, C done 1233 495d 2488d 28/29 495d 64f2657b5793 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
possible deadlock in chaoskey_open usb 4 syz, C 475 699d 705d 28/29 495d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
possible deadlock in usb_deregister_dev (3) usb 4 syz, C 103 699d 705d 28/29 495d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
WARNING in media_create_pad_link usb media -1 syz, C done done 104 661d 2313d 28/29 636d 3dd075fe8ebb media: uvcvideo: Require entities to have a non-zero unique ID
INFO: task hung in usb_port_suspend usb 1 syz, C 12 692d 702d 28/29 670d 5189df7b8088 USB: gadget: dummy-hcd: Fix "task hung" problem
KASAN: use-after-free Read in rtw_load_firmware_cb usb wireless 19 syz, C 848 717d 780d 28/29 691d 0e735a4c6137 wifi: rtw88: always wait for both firmware loading attempts
INFO: rcu detected stall in do_vmi_munmap (2) mm 1 40 739d 755d 28/29 691d f806de88d8f7 maple_tree: remove rcu_read_lock() from mt_validate()
INFO: task hung in uevent_show usb 1 syz, C done 9704 762d 823d 28/29 691d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
INFO: rcu detected stall in neigh_timer_handler (8) net 1 syz, C done done 72 763d 823d 28/29 692d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
INFO: rcu detected stall in __mod_timer (5) usb 1 syz, C error done 10 769d 833d 28/29 692d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
possible deadlock in touch_wq_lockdep_map usb 4 syz, C 1208 715d 911d 28/29 710d ccbde4b128ef char: xillybus: Don't destroy workqueue from work item running on it
WARNING in try_queue_bulk_in/usb_submit_urb kernel -1 1 766d 762d 28/29 710d 2374bf7558de char: xillybus: Check USB endpoints when probing device
KASAN: slab-out-of-bounds Read in cougar_report_fixup input usb 17 syz, C 31 741d 775d 28/29 710d a6e9c391d45b HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
WARNING in implement input usb -1 syz, C error done 960 824d 2554d 26/29 774d 4aa2dcfbad53 HID: core: remove unnecessary WARN_ON() in implement()
WARNING in kcov_remote_start (4) usb -1 107983 795d 826d 26/29 795d f85d39dd7ed8 kcov, usb: disable interrupts in kcov_remote_start_usb_softirq
INFO: task hung in linkwatch_event (3) net 1 1634 796d 1391d 26/29 796d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: rcu detected stall in raw_ioctl usb 1 syz, C 49 802d 1048d 26/29 796d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
BUG: soft lockup in tcp_write_timer (4) mm 1 4 800d 824d 26/29 796d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
KMSAN: uninit-value in asus_report_fixup input usb 17 syz, C done 35 818d 842d 26/29 796d 89e1ee118d6f hid: asus: asus_report_fixup: fix potential read out of bounds
INFO: task hung in rtnetlink_rcv_msg net 1 syz, C inconclusive inconclusive 1970 797d 2760d 26/29 796d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in addrconf_verify_work (8) net 1 syz, C error 1294 796d 1000d 26/29 796d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
WARNING in cxacru_cm/usb_submit_urb usb -1 syz, C error inconclusive 14 815d 2383d 26/29 796d 2eabb655a968 usb: atm: cxacru: fix endpoint checking in cxacru_bind()
WARNING in kcov_remote_start (3) usb -1 265513 830d 899d 25/29 830d 19e35f24750d nfc: nci: Fix kcov check in nci_rx_work()
WARNING in ar5523_cmd/usb_submit_urb usb wireless -1 syz, C error 39 863d 2419d 25/29 830d e120b6388d7d wifi: ar5523: enable proper endpoint verification
WARNING in carl9170_usb_send_rx_irq_urb/usb_submit_urb usb wireless -1 syz, C error inconclusive 18 875d 2018d 25/29 830d b6dd09b3dac8 wifi: carl9170: add a proper sanity check for endpoints
usb-testing boot error: WARNING: refcount bug in __reset_page_owner mm -1 126 873d 901d 25/29 844d f5c12105c15f mm,page_owner: fix refcount imbalance
KASAN: slab-use-after-free Read in pvr2_context_set_notify (2) pvrusb2 19 syz, C 1069 887d 957d 25/29 887d 0a0b79ea55de media: pvrusb2: fix uaf in pvr2_context_set_notify
WARNING in bcm5974_start_traffic/usb_submit_urb input -1 syz, C error 41 906d 2501d 25/29 901d 2b9c3eb32a69 Input: bcm5974 - check endpoint type before starting traffic
KASAN: slab-use-after-free Read in pvr2_context_set_notify usb pvrusb2 22 syz, C 3814 957d 1163d 25/29 957d ded85b0c0edd media: pvrusb2: fix use after free on context disconnection
WARNING in dev_watchdog (2) net -1 syz, C inconclusive 6791 959d 2358d 25/29 957d e316dd1cf135 net: don't dump stack on queue timeout
WARNING in ieee80211_rfkill_poll wireless -1 syz, C 684 1007d 1040d 25/29 967d 8e2f6f236621 wifi: cfg80211: lock wiphy mutex for rfkill poll
KASAN: use-after-free Read in __media_entity_remove_links usb media 19 syz, C 7 2365d 2463d 25/29 984d 68035c80e129 media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
KASAN: use-after-free Read in powermate_config_complete (4) input 19 syz done unreliable 14 1101d 1473d 25/29 998d 5c15c60e7be6 Input: powermate - fix use-after-free in powermate_config_complete
UBSAN: shift-out-of-bounds in set_flicker usb media -1 syz 5 1043d 1123d 25/29 998d 099be1822d1f media: gspca: cpia1: shift-out-of-bounds in set_flicker
KASAN: slab-use-after-free Read in input_dev_uevent input 19 syz, C done 7 1108d 1119d 23/29 1067d dd613a4e45f8 HID: uclogic: Correct devm device reference for hidinput input_dev name
WARNING in usbnet_start_xmit/usb_submit_urb usb -1 syz, C done 92 1181d 1763d 23/29 1067d 5e1627cb43dd net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
INFO: trying to register non-static key in skb_queue_tail wireless -1 syz, C unreliable done 171 1172d 2274d 23/29 1081d 061b0cb9327b wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
WARNING in dlfb_submit_urb/usb_submit_urb (2) fbdev usb -1 syz, C 2 1219d 1215d 22/29 1170d ed9de4ed3987 fbdev: udlfb: Fix endpoint check
WARNING in __usbnet_read_cmd/usb_submit_urb usb -1 syz, C error 5 1315d 1346d 22/29 1189d 93fd565919cf net: USB: Fix wrong-direction WARNING in plusb.c net: USB: Fix wrong-direction WARNING in plusb.c
WARNING in sisusb_send_bulk_msg/usb_submit_urb usb -1 syz, C unreliable 418 1244d 2630d 22/29 1193d df05a9b05e46 USB: sisusbvga: Add endpoint checks
WARNING in c_start (2) kernel -1 616173 1266d 1284d 22/29 1193d e7304080e0e5 cpumask: relax sanity checking constraints
WARNING in pegasus_open/usb_submit_urb input usb -1 syz, C 7 1274d 2284d 22/29 1193d b3d80fd27a3c Input: pegasus-notetaker - check pipe type when probing
WARNING in shark_write_reg/usb_submit_urb usb -1 syz, C error 63 1243d 2616d 22/29 1193d 76e31045ba03 media: radio-shark: Add endpoint checks
WARNING in remove_proc_entry (5) scsi -1 syz, C 158 1276d 1318d 22/29 1193d 2172e84ea00b SUNRPC: Fix occasional warning when destroying gss_krb5_enctypes
general protection fault in pn533_out_complete nfc 2 syz, C error 15 1324d 1338d 22/29 1193d 484b7059796e nfc: pn533: initialize struct pn533_out_arg properly
WARNING in ath6kl_htc_pipe_rx_complete usb wireless -1 syz, C error 2008 1232d 2502d 22/29 1193d 75c4a8154cb6 wifi: ath6kl: reduce WARN to dev_dbg() in callback
WARNING in shark_write_val/usb_submit_urb usb -1 syz, C error done 51 1250d 2610d 22/29 1193d 76e31045ba03 media: radio-shark: Add endpoint checks
INFO: task hung in addrconf_verify_work (6) 1 syz, C done 86 1301d 1538d 22/29 1297d ff1fa2081d17 net: tun: avoid disabling NAPI twice
possible deadlock in display_open usb 4 syz, C inconclusive 48888 1565d 2592d 22/29 1297d db264d4c66c0 media: imon: reorganize serialization
WARNING in send_packet/usb_submit_urb usb -1 syz, C inconclusive 847 1365d 1532d 22/29 1297d 813ceef062b5 media: imon: fix a race condition in send_packet()
KASAN: slab-out-of-bounds Read in thrustmaster_probe usb input 17 syz, C unreliable 92 1642d 1666d 22/29 1297d fc3ef2e3297b HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
usb-testing boot error: BUG: unable to handle kernel paging request in dequeue_task_fair acpi -1 1 1476d 1476d 22/29 1297d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in dev_uevent kernel 19 syz 54 1305d 2277d 22/29 1297d 16b1941eac2b usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
usb-testing boot error: BUG: unable to handle kernel paging request in __handle_mm_fault mm -1 1 1490d 1490d 22/29 1297d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
usb-testing boot error: general protection fault in rcu_core fs mm -1 23 1471d 1490d 22/29 1297d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
usb-testing boot error: WARNING in anon_vma_clone mm -1 1 1490d 1490d 22/29 1297d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
usb-testing boot error: INFO: task hung in add_early_randomness crypto -1 7 1553d 1559d 22/29 1297d 228432551bd8 virtio-rng: make device ready before making request
general protection fault in ath9k_hif_usb_rx_cb (2) wireless 2 syz, C error 1678 1495d 2249d 22/29 1297d 0ac4827f78c7 ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
KASAN: use-after-free Read in usb_udc_uevent usb 19 syz error 30 1508d 2294d 22/29 1297d 2191c00855b0 USB: gadget: Fix use-after-free Read in usb_udc_uevent()
usb-testing boot error: BUG: unable to handle kernel paging request in insert_header fs -1 1 1476d 1476d 22/29 1297d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
usb-testing boot error: general protection fault in __handle_irq_event_percpu kernel -1 1 1476d 1476d 22/29 1297d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in ar5523_cmd_tx_cb usb wireless 19 syz, C inconclusive 372 1393d 1448d 22/29 1297d b6702a942a06 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
WARNING in dlfb_submit_urb/usb_submit_urb usb fbdev -1 syz, C done 481 1370d 2631d 22/29 1297d aaf7dbe07385 video: fbdev: udlfb: properly check endpoint type
usb-testing boot error: BUG: unable to handle kernel paging request in enqueue_task_fair mm -1 1 1475d 1475d 22/29 1297d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
usb-testing boot error: general protection fault in __register_sysctl_table (2) fs -1 1 1475d 1475d 22/29 1297d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in si470x_int_in_callback (2) usb media 19 syz, C error 7303 1365d 2522d 22/29 1297d 7d21e0b1b41b media: si470x: Fix use-after-free in si470x_int_in_callback()
KASAN: use-after-free Read in jbd2_journal_wait_updates ext4 19 syz, C error 143 1634d 1678d 22/29 1297d cc16eecae687 jbd2: fix use-after-free of transaction_t race
usb-testing boot error: BUG: unable to handle kernel paging request in follow_page_mask mm -1 1 1472d 1468d 22/29 1297d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
INFO: task hung in hci_dev_close_sync bluetooth 1 syz, C unreliable 2366 1438d 1594d 22/29 1297d e36bea6e78ab Bluetooth: core: Fix deadlock on hci_power_on_sync.
INFO: task hung in scsi_remove_host scsi usb 1 syz, C done 328 1448d 1484d 22/29 1297d 2b36209ca818 scsi: core: Revert "Call blk_mq_free_tag_set() earlier" d94b2d00f7bf scsi: core: Revert "Make sure that hosts outlive targets" f782201ebc2b scsi: core: Revert "Make sure that targets outlive devices" 70e8d057bef5 scsi: core: Revert "Simplify LLD module reference counting"
UBSAN: array-index-out-of-bounds in pvr2_i2c_core_init pvrusb2 usb 15 syz, C inconclusive 4 1581d 1613d 22/29 1297d 471bec68457a media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
usb-testing boot error: BUG: unable to handle kernel paging request in copy_namespaces kernel -1 1 1474d 1474d 22/29 1297d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb (2) 19 syz, C done 48810 1494d 2127d 22/29 1297d 0ac4827f78c7 ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
WARNING in mcba_usb_probe/usb_submit_urb usb can -1 syz, C error 537 1627d 2622d 22/29 1297d 136bed0bfd3b can: mcba_usb: properly check endpoint type
KASAN: use-after-free Read in remove_wait_queue (3) kernfs 19 syz, C inconclusive 123 1336d 1762d 22/29 1297d a06247c6804f psi: Fix uaf issue when psi trigger is destroyed while being polled
WARNING: locking bug in hfa384x_usbctlx_completion_task staging usb 4 syz, C 2 1544d 1540d 22/29 1297d ee6c6e734247 staging/wlan-ng: get the correct struct hfa384x in work callback
INFO: task hung in add_early_randomness (2) usb crypto 1 syz, C done 182 1345d 1563d 22/29 1297d 228432551bd8 virtio-rng: make device ready before making request
usb-testing boot error: kernel BUG in putname fs -1 1 1475d 1475d 22/29 1297d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
WARNING in hif_usb_send/usb_submit_urb wireless -1 syz, C unreliable done 374 1378d 2169d 22/29 1297d 16ef02bad239 wifi: ath9k: verify the expected usb_endpoints are present
usb-testing boot error: WARNING in __netif_set_xps_queue virt net -1 57 1415d 1427d 22/29 1297d fc8695eb11f0 Revert "net: fix cpu_max_bits_warn() usage in netif_attrmask_next{,_and}"
KASAN: use-after-free Read in driver_register usb 19 syz, C 131 1540d 1591d 22/29 1297d 5f0b5f4d50fa usb: gadget: fix race when gadget driver register via ioctl
WARNING in driver_unregister input usb -1 syz, C 1 1574d 1570d 22/29 1297d f2d8c2606825 usb: gadget: Fix non-unique driver names in raw-gadget driver
INFO: task hung in ath6kl_usb_power_off wireless 1 7454 1494d 2260d 22/29 1297d 62ebaf2f9261 ath6kl: avoid flush_scheduled_work() usage
WARNING in aiptek_open/usb_submit_urb usb input -1 syz, C error 2380 1633d 2655d 22/29 1297d 5600f6986628 Input: aiptek - properly check endpoint type
INFO: task hung in __input_unregister_device (4) usb input 1 syz, C done 924 1469d 1534d 22/29 1297d 98e01215708b Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
INFO: task hung in linkwatch_event (2) net 1 syz, C done done 1033 1603d 2328d 20/29 1584d 563fbefed46a cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
KASAN: out-of-bounds Read in ath9k_hif_usb_rx_cb (3) wireless usb 17 syz, C unreliable done 7 1674d 2077d 20/29 1642d 6ce708f54cc8 ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
KASAN: slab-out-of-bounds Write in betop_probe input usb 21 syz, C unreliable 9 1851d 2407d 20/29 1642d 689e453a9b9c HID: betop: fix slab-out-of-bounds Write in betop_probe HID: betop: fix slab-out-of-bounds Write in betop_probe
divide error in usbnet_start_xmit usb 2 syz, C 760 1774d 1791d 20/29 1650d 397430b50a36 usbnet: sanity check for maxpacket
INFO: trying to register non-static key in mxl111sf_ctrl_msg usb media -1 syz, C 73 2605d 2709d 20/29 1650d 44870a9e7a3c media: mxl111sf: change mutex_init() location
WARNING in atp_close (3) input -1 syz, C 125 1714d 1807d 20/29 1650d 9f3ccdc3f6ef Input: appletouch - initialize work before device registration
INFO: trying to register non-static key in ath9k_htc_rxep wireless -1 syz, C unreliable 9896 1704d 2278d 20/29 1650d b0ec7e55fce6 ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()
KASAN: use-after-free Read in rtl8712_dl_fw usb staging 19 syz, C 6961 1766d 1790d 20/29 1650d c052cc1a069c staging: rtl8712: fix use-after-free in rtl8712_dl_fw
WARNING in rtl92cu_hw_init wireless -1 1 1750d 1746d 20/29 1650d 8b144dedb928 rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled
INFO: trying to register non-static key in ath9k_wmi_event_tasklet wireless usb -1 syz, C unreliable 7 1740d 1917d 20/29 1650d 8b3046abc99e ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
INFO: rcu detected stall in dummy_timer (3) usb 1 syz, C error 132 1664d 2252d 20/29 1650d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
BUG: corrupted list in em28xx_init_extension usb media 8 syz, C error 18 1881d 2425d 20/29 1650d 2c98b8a3458d media: em28xx: add missing em28xx_close_extension
WARNING: held lock freed in spi_unregister_controller spi usb 4 syz, C inconclusive 251 1750d 1790d 20/29 1650d 6c53b45c71b4 spi: fix use-after-free of the add_lock mutex
WARNING in rtl28xxu_ctrl_msg/usb_submit_urb usb -1 syz, C 50 1890d 1938d 20/29 1768d 76f22c93b209 media: rtl28xxu: fix zero-length control request media: rtl28xxu: fix zero-length control request
WARNING in hso_free_net_device usb -1 syz, C error 528 1886d 2567d 20/29 1768d 788e67f18d79 usb: hso: fix error handling code of hso_create_net_device usb: hso: fix error handling code of hso_create_net_device
KASAN: null-ptr-deref Read in phy_disconnect net usb 11 syz, C 255 1835d 1839d 20/29 1769d 1406e8cb4b05 net: usb: asix: do not call phy_disconnect() for ax88178
WARNING in dtv5100_probe/usb_submit_urb usb -1 syz, C 51 1890d 1936d 20/29 1769d 8c8b9a9be2af media: dtv5100: fix control-request directions
WARNING in e2i_init/usb_submit_urb usb -1 4 1909d 1938d 20/29 1769d 41e81022a04a Input: usbtouchscreen - fix control-request directions
usb-testing boot error: WARNING in kvm_wait kvm -1 3 2012d 2015d 20/29 1769d f4e61f0c9add  x86/kvm: Fix broken irq restoration in kvm_wait
WARNING in hid_submit_ctrl/usb_submit_urb input usb -1 syz, C done 38 1834d 1883d 20/29 1769d 0a824efdb724 HID: usbhid: Fix warning caused by 0-length input reports
WARNING in kvm_wait kvm -1 syz, C error 119882 1997d 2015d 20/29 1769d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
usb-testing boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0) fs -1 27 1889d 1894d 20/29 1769d c43ddbf97f46 scsi: virtio_scsi: Do not overwrite SCSI status
general protection fault in magicmouse_remove usb input 2 syz, C 47 1919d 1945d 20/29 1769d 4b4f6cecca44 HID: magicmouse: fix NULL-deref on disconnect
WARNING in osif_probe/usb_submit_urb usb -1 syz, C 45 1894d 1938d 20/29 1769d 4ca070ef0dd8 i2c: robotfuzz-osif: fix control-request directions
general protection fault in cdev_del (2) fs 11 syz, C error 45 1902d 2180d 20/29 1769d 8a12f8836145 net: hso: fix null-ptr-deref during tty device unregistration 0a360e8b65d6 tty: n_gsm: check error while registering tty devices
WARNING in qt2_attach/usb_submit_urb usb -1 syz, C 171 1918d 1938d 20/29 1769d eb8dbe80326c USB: serial: quatech2: fix control-request directions
BUG: sleeping function called from invalid context in stack_depot_save mm 5 syz, C unreliable 8490 1868d 1897d 20/29 1769d 187ad460b841 mm/page_alloc: avoid page allocator recursion with pagesets.lock held
WARNING in usb_new_device/usb_submit_urb usb -1 syz, C 2 1933d 1929d 20/29 1769d 60dfe484cef4 USB: core: Avoid WARNings for 0-length descriptor requests
WARNING in rtl8152_probe usb -1 syz, C 23 1927d 1950d 20/29 1769d 1a44fb38cc65 r8152: check the informaton of the device
KASAN: use-after-free Read in r871xu_dev_remove usb staging 19 syz, C unreliable 152 1862d 1889d 20/29 1769d e9e6aa51b273 staging: rtl8712: error handling refactoring
KASAN: slab-out-of-bounds Read in snd_usbmidi_get_ms_info sound usb 17 syz, C 10 1948d 1952d 20/29 1769d e84749a78dc8 ALSA: usb-audio: Validate MS endpoint descriptors
WARNING in input_register_device input usb -1 syz, C error done 11 1986d 2137d 20/29 1769d b4104180a2ef kobject_uevent: remove warning in init_uevent_argv()
INFO: task hung in usb_remote_wakeup (2) usb 1 syz inconclusive done 9 1850d 2049d 20/29 1769d 363eaa3a450a usbip: synchronize event handler with sysfs code paths
WARNING in pvr2_i2c_core_done usb fs -1 syz, C error 5780 1890d 2545d 20/29 1769d f8194e5e63fd media: pvrusb2: fix warning in pvr2_i2c_core_done
WARNING: zero-size vmalloc in dvb_dmx_init media usb -1 syz, C 62 1891d 1955d 20/29 1769d c680ed46e418 media: dvb-usb: fix wrong definition
WARNING in __vmalloc_node_range media usb -1 syz, C 7 1955d 1956d 20/29 1769d c680ed46e418 media: dvb-usb: fix wrong definition
general protection fault in drm_client_buffer_vunmap usb dri 2 syz, C unreliable done 247 2012d 2113d 20/29 1979d 874a52f9b693 drm/fb-helper: only unmap if buffer not null
UBSAN: shift-out-of-bounds in mceusb_dev_printdata usb media -1 syz, C error 331 2030d 2097d 20/29 1983d 9dec0f48a75e media: mceusb: sanity check for prescaler value
UBSAN: shift-out-of-bounds in snto32 input usb -1 syz, C error 58 2027d 2100d 20/29 1983d a0312af1f94d HID: core: detect and skip invalid inputs to snto32()
UBSAN: shift-out-of-bounds in mceusb_dev_recv media usb -1 syz, C 13 2030d 2094d 20/29 1983d 1b43bad31fb0 media: mceusb: Fix potential out-of-bounds shift
unexpected kernel reboot (3) input usb -1 syz, C error error 21132 1983d 2984d 20/29 1983d c8e2fe13d1d1 x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected (2) -1 syz, C done 640 2078d 2195d 19/29 2014d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
WARNING: suspicious RCU usage in get_wiphy_regdom wireless 4 syz, C done 5031 2065d 2097d 19/29 2014d 51d62f2f2c50 cfg80211: Save the regulatory domain with a lock
WARNING in spi_register_controller usb spi -1 syz, C 1848 2097d 2711d 19/29 2014d 9c60cc797cf7 media: msi2500: assign SPI bus number dynamically
KASAN: use-after-free Write in rtl_fw_do_work (2) wireless 22 4 2098d 2104d 19/29 2014d 4dfde294b979 rtlwifi: rise completion at the last step of firmware callback
kernel BUG at net/core/skbuff.c:LINE! (3) -1 syz, C done 4399 2029d 3146d 19/29 2014d afbc293add64 af_key: relax availability checks for skb size calculation
WARNING in yurex_write/usb_submit_urb usb -1 syz, C error 78 2073d 2101d 19/29 2014d 372c93131998 USB: yurex: fix control-URB timeout handling
UBSAN: shift-out-of-bounds in snd_usbmidi_get_ms_info sound usb -1 syz, C error 9 2071d 2091d 19/29 2014d c06ccf3ebb75 ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
general protection fault in tower_disconnect usb 2 syz, C 53 2097d 2105d 19/29 2014d b175d273d4e4 USB: legotower: fix logical error in recent commit
KASAN: use-after-free Read in service_outstanding_interrupt usb 19 syz, C 28 2073d 2228d 19/29 2014d 5e5ff0b4b6bc USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
INFO: task hung in wdm_flush usb 1 syz, C 38294 2204d 2589d 15/29 2127d 37d2a36394d9 USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb wireless 19 syz, C 2849 2127d 2362d 15/29 2127d 03fb92a432ea ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs()
WARNING in ati_remote_sendpacket/usb_submit_urb usb media -1 syz, C 22 2298d 2609d 15/29 2127d a8be80053ea7 media: ati_remote: sanity check for both endpoints
general protection fault in vmk80xx_write_packet usb staging 2 syz, C 82 2167d 2623d 15/29 2127d e1f13c879a7c staging: comedi: check validity of wMaxPacketSize of usb endpoints found
INFO: trying to register non-static key in del_timer_sync (2) wireless usb -1 syz, C 1206 2659d 2711d 15/29 2127d 621a3a8b1c0e mwifiex: don't call del_timer_sync() on uninitialized timer
KASAN: slab-out-of-bounds Read in prism2sta_probe_usb usb staging 17 syz, C 8 2205d 2236d 15/29 2165d fea22e159d51 staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
KASAN: slab-out-of-bounds Write in hiddev_ioctl_usage input usb 21 syz, C 279 2207d 2550d 15/29 2180d 25a097f52046 HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
WARNING in slab_pre_alloc_hook usb -1 syz, C 210 2204d 2225d 15/29 2180d f176ede3a3bd USB: yurex: Fix bad gfp argument
KASAN: use-after-free Read in rc_dev_uevent media 19 1 2228d 2228d 15/29 2180d 4f0835d6677d media: rc: uevent sysfs file races with rc_unregister_device()
WARNING in r871xu_dev_remove usb staging -1 syz, C 47375 2227d 2579d 15/29 2188d b4383c971bc5 staging: rtl8712: handle firmware load failure
KASAN: use-after-free Read in line6_submit_audio_in_all_urbs sound 19 2 2256d 2270d 15/29 2188d 68359a1ad844 ALSA: line6: Sync the pending work cancel at disconnection
general protection fault in cdev_del usb fs 2 syz, C 315 2197d 2665d 15/29 2188d e911e99a0770 usb: hso: check for return value in hso_serial_common_create()
WARNING in submit_rx_urb/usb_submit_urb usb staging -1 syz, C 397 2240d 2664d 15/29 2188d faaff9765664 staging: wlan-ng: properly check endpoint types
KASAN: use-after-free Read in ax88172a_unbind usb 19 syz, C done 2723 2239d 2480d 15/29 2188d c28d9a285668 ax88172a: fix ax88172a_unbind() failures
WARNING in submit_audio_out_urb/usb_submit_urb sound usb -1 syz 2 2257d 2257d 15/29 2188d 6e8a914ad619 ALSA: line6: Perform sanity check for each URB creation
INFO: task hung in __do_sys_reboot kernel 1 1554 2204d 2260d 15/29 2188d b292b50b0efc driver core: Fix probe_count imbalance in really_probe()
general protection fault in go7007_usb_probe usb media 2 syz, C 2103 2227d 2336d 15/29 2188d 137641287eb4 go7007: add sanity checking for endpoints
KASAN: use-after-free Write in ath9k_htc_rx_msg wireless 22 syz, C 93 2285d 2362d 15/29 2249d e4ff08a4d727 ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id usb sound 21 syz, C done 39 2268d 2273d 15/29 2249d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
INFO: task hung in locks_remove_posix fs input usb 1 syz 2231 2284d 2307d 15/29 2249d 187b96db5ca7 x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
KASAN: stack-out-of-bounds Write in ath9k_hif_usb_rx_cb wireless 21 syz, C 57 2285d 2358d 15/29 2249d 19d6c375d671 ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
KASAN: use-after-free Read in usblp_bulk_read usb 19 7 2258d 2336d 15/29 2249d 296a193b0612 usblp: poison URBs upon disconnect
KASAN: use-after-free Read in htc_connect_service wireless 19 syz, C 41041 2284d 2362d 15/29 2249d ced21a4c726b ath9k: Fix use-after-free Read in htc_connect_service
WARNING in usbhid_raw_request/usb_submit_urb (3) usb -1 syz 18 2328d 2434d 15/29 2249d ac854131d984 USB: core: Fix misleading driver bug report
KASAN: slab-out-of-bounds Read in garmin_read_process usb 17 syz, C 1 2367d 2367d 15/29 2249d e9b3c610a05c USB: serial: garmin_gps: add sanity checking for data length
KASAN: use-after-free Read in usbhid_close (3) input usb 19 syz, C 6 2323d 2350d 15/29 2249d 0ed08faded1d HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
KASAN: use-after-free Read in ath9k_wmi_ctrl_rx wireless 19 syz, C 1 2362d 2361d 15/29 2249d abeaa85054ff ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
general protection fault in ath9k_hif_usb_rx_cb wireless 2 syz, C 913 2249d 2362d 15/29 2249d 2bbcaaee1fcb ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
WARNING in wa_nep_create/usb_submit_urb usb staging -1 syz, C 114 2338d 2622d 15/29 2268d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
WARNING in hwarc_neep_init/usb_submit_urb staging usb -1 syz, C 1 2372d 2372d 15/29 2268d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
BUG: corrupted list in __uwb_rc_neh_rm staging usb 8 syz, C 9 2344d 2379d 15/29 2268d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
KASAN: use-after-free Read in chaoskey_disconnect crypto usb 19 syz, C 44 2482d 2510d 15/29 2278d 93ddb1f56ae1 USB: chaoskey: fix use-after-free on release
general protection fault in fbcon_switch fbdev 2 1 2362d 2361d 15/29 2317d b139f8b00db4 fbcon: fix null-ptr-deref in fbcon_switch
WARNING: ODEBUG bug in prism2sta_disconnect_usb staging -1 1 2367d 2365d 15/29 2317d a1f165a6b738 staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb
KASAN: slab-out-of-bounds Read in edge_interrupt_callback usb 17 syz, C 1 2366d 2365d 15/29 2317d 57aa9f294b09 USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback
KASAN: slab-out-of-bounds Read in hfa384x_usbin_callback staging usb 17 syz, C 1 2368d 2368d 15/29 2317d 1165dd73e811 staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback
BUG: soft lockup in sys_exit_group usb 1 syz, C 6 2367d 2390d 15/29 2342d d683469b3c93 ALSA: line6: Fix endless MIDI read loop
KASAN: use-after-free Write in hiddev_disconnect input usb 22 20 2370d 2434d 15/29 2342d 5c02c447eaed HID: hiddev: Fix race in in hiddev_disconnect()
WARNING in _chaoskey_fill/usb_submit_urb usb -1 syz, C 15 2494d 2547d 15/29 2377d 92aa5986f4f7 USB: chaoskey: fix error case of a timeout
WARNING in flexcop_usb_probe/usb_submit_urb usb media -1 syz, C 4 2543d 2580d 15/29 2377d 1b976fc6d684 media: b2c2-flexcop-usb: add sanity checking
KASAN: use-after-free Read in rsi_rx_done_handler wireless 19 8 2438d 2567d 15/29 2399d e93cd35101b6 rsi: fix use-after-free on failed probe and unbind
general protection fault in timer_is_static_object input 2 syz, C 2 2483d 2480d 15/29 2399d cb222aed03d7 Input: add safety guards to input_set_keycode()
BUG: spinlock already unlocked in input_set_keycode input 4 syz, C 2 2493d 2491d 15/29 2399d cb222aed03d7 Input: add safety guards to input_set_keycode()
WARNING: refcount bug in cdev_get 13 syz, C done 105 2441d 2581d 15/29 2399d 68faa679b8be chardev: Avoid potential use-after-free in 'chrdev_open()'
WARNING in dln2_start_rx_urbs/usb_submit_urb usb -1 syz, C 44 2414d 2503d 15/29 2399d 2b8bd606b1e6 mfd: dln2: More sanity checking for endpoints
KASAN: slab-out-of-bounds Read in hid_field_extract input usb 17 syz, C 6 2440d 2473d 15/29 2399d 8ec321e96e05 HID: Fix slab-out-of-bounds read in hid_field_extract
WARNING: ODEBUG bug in rsi_probe usb wireless -1 syz, C 10487 2413d 2709d 15/29 2399d 92aafe77123a rsi: fix use-after-free on probe errors
WARNING in uvc_scan_chain_forward usb media -1 syz, C 6 2439d 2463d 15/29 2399d 68035c80e129 media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
general protection fault in gigaset_probe staging usb 2 syz, C 6 2488d 2607d 15/29 2404d 53f35a39c386 staging: gigaset: fix general protection fault on probe
KASAN: slab-out-of-bounds Read in build_audio_procunit (2) sound usb 17 syz, C 1 2503d 2502d 15/29 2425d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
KASAN: global-out-of-bounds Write in kbd_event usb serial input 21 syz, C 6 2481d 2503d 15/29 2467d b2b2dd71e085 tty: vt: keyboard: reject invalid keycodes
general protection fault in flexcop_usb_probe usb media 2 syz, C 403 2481d 2711d 15/29 2467d 1b976fc6d684 media: b2c2-flexcop-usb: add sanity checking
kernel BUG at kernel/time/timer.c:LINE! (4) media usb -1 syz 1 2537d 2533d 15/29 2467d f3f5ba42c58d media: imon: invalid dereference in imon_touch_event
KASAN: use-after-free Read in appledisplay_bl_get_brightness usb 19 syz, C 1 2550d 2547d 15/29 2467d 91feb01596e5 appledisplay: fix error handling in the scheduled work
INFO: trying to register non-static key in ida_destroy usb media -1 syz, C 4272 2480d 2603d 15/29 2467d 8c279e9394ca media: uvcvideo: Fix error path in control parsing failure
general protection fault in snd_usb_create_mixer usb sound 2 syz, C 1 2490d 2488d 15/29 2467d 9435f2bb6687 ALSA: usb-audio: Fix NULL dereference at parsing BADD
general protection fault in usb_set_interface usb 2 syz, C 3 2551d 2554d 15/29 2467d c7a191464078 media: usbvision: Fix invalid accesses after device disconnect
WARNING in port100_send_cmd_async/usb_submit_urb usb nfc -1 syz, C 83 2481d 2622d 15/29 2469d 5f9f0b11f081 nfc: port100: handle command failure cleanly
WARNING: ODEBUG bug in input_ff_destroy input usb -1 syz, C 6 2488d 2496d 14/29 2480d fa3a5a1880c9 Input: ff-memless - kill timer in destroy()
KASAN: use-after-free Read in mcba_usb_disconnect usb can 19 syz, C 2 2507d 2540d 14/29 2480d 4d6636498c41 can: mcba_usb: fix use-after-free on disconnect
KASAN: invalid-free in rsi_91x_deinit usb wireless 24 syz, C 109 2553d 2700d 13/29 2481d 8b51dc729147 rsi: fix a double free bug in rsi_91x_deinit()
divide error in dummy_timer usb 2 syz, C 3 2511d 2516d 13/29 2487d 54f83b8c8ea9 USB: gadget: Reject endpoints with 0 maxpacket value
INFO: task hung in ld_usb_write usb 1 syz, C 831 2505d 2518d 13/29 2487d 52403cfbc635 USB: ldusb: fix control-message timeout
KASAN: use-after-free Read in iowarrior_disconnect usb 19 syz, C 3056 2526d 2582d 13/29 2489d bc0e4f16c44e USB: iowarrior: fix use-after-free on disconnect
divide error in usbtmc_generic_read usb 2 syz, C 2 2588d 2587d 13/29 2489d de7b9aa633b6 usbtmc: more sanity checking for packet size
KASAN: slab-out-of-bounds Read in ld_usb_read (3) usb 17 syz, C 74 2513d 2524d 13/29 2503d 7a6f22d7479b USB: ldusb: fix read info leaks
KASAN: slab-out-of-bounds Read in build_audio_procunit usb sound 17 syz, C 6 2509d 2518d 13/29 2503d ba8bf0967a15 ALSA: usb-audio: Fix copy&paste error in the validator
KASAN: slab-out-of-bounds Write in ga_probe input 21 syz, C 5 2532d 2554d 13/29 2503d d9d4b1e46d95 HID: Fix assumption that devices have inputs
KASAN: use-after-free Read in usb_autopm_put_interface usb 19 syz, C 2373 2512d 2525d 13/29 2503d 7a7591979748 USB: usblp: fix use-after-free on disconnect
KASAN: use-after-free Read in pn533_send_complete nfc usb 19 syz, C 4 2513d 2533d 13/29 2505d 6af3aa57a098 NFC: pn533: fix use-after-free and memleaks
possible deadlock in usb_deregister_dev (2) usb 4 syz, C 956 2526d 2554d 13/29 2513d 33a7813219f2 USB: legousbtower: fix deadlock on disconnect
WARNING in mark_lock (2) fs -1 14 2519d 2546d 13/29 2513d 8e00c4e9dd85 writeback: fix use-after-free in finish_writeback_work()
BUG: bad usercopy in read_rio hardening mm -1 2 2528d 2531d 13/29 2513d 015664d15270 USB: rio500: Remove Rio 500 kernel driver
general protection fault in open_rio kernel 2 2 2545d 2546d 13/29 2513d 015664d15270 USB: rio500: Remove Rio 500 kernel driver
KASAN: use-after-free Read in adu_disconnect usb 19 syz, C 5304 2526d 2596d 13/29 2513d 44efc269db79 USB: adutux: fix use-after-free on disconnect
INFO: rcu detected stall in dummy_timer usb 1 syz, C 16 2527d 2592d 13/29 2513d 32a0721c6620 USB: yurex: Don't retry on unexpected errors
KASAN: invalid-free in disconnect_rio (2) usb 24 syz, C 51 2530d 2551d 13/29 2513d 015664d15270 USB: rio500: Remove Rio 500 kernel driver
WARNING in em28xx_usb_disconnect usb media -1 syz, C 8 2559d 2592d 13/29 2525d 46e4a26615cc media: em28xx: modules workqueue not inited for 2nd device
KASAN: use-after-free Read in si470x_int_in_callback usb media 19 syz, C 25 2534d 2623d 13/29 2525d 0d616f2a3fdb media: radio/si470x: kill urb on error
general protection fault in ath6kl_usb_alloc_urb_from_pipe usb wireless 2 syz, C 1160 2551d 2711d 13/29 2525d 39d170b3cb62 ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
KASAN: use-after-free Read in atusb_disconnect usb wpan 19 syz, C 112 2526d 2567d 13/29 2525d 7fd25e6fc035 ieee802154: atusb: fix use-after-free at disconnect
KASAN: slab-out-of-bounds Read in hdpvr_probe usb media 17 syz, C 10 2561d 2637d 13/29 2525d 8b8900b729e4 media: hdpvr: add terminating 0 at end of string
KASAN: global-out-of-bounds Read in load_next_firmware_from_table usb libertas 17 syz, C 5 2573d 2623d 13/29 2525d 764f3f1ecffc libertas: Add missing sentinel at end of if_usb.c fw_table
divide error in usbnet_update_max_qlen usb 2 syz, C 17 2542d 2554d 13/29 2525d 280ceaed79f1 usbnet: sanity checking of packet sizes and device mtu
KASAN: slab-out-of-bounds Read in technisat_usb2_rc_query usb media 17 syz, C 2236 2571d 2709d 13/29 2525d 0c4df39e504b media: technisat-usb2: break out of loop at end of buffer
KASAN: global-out-of-bounds Read in dvb_pll_attach media usb 17 syz, C 2 2562d 2622d 13/29 2525d c268e7adea52 media: dvb-frontends: use ida for pll number
general protection fault in pk_probe input usb 2 syz, C 2 2571d 2567d 13/29 2525d 98375b86c791 HID: prodikeys: Fix general protection fault during probe
KASAN: global-out-of-bounds Read in hdpvr_probe usb media 17 syz, C 15 2578d 2691d 13/29 2525d d4a6a9537bc3 media: hdpvr: Add device num check and handling
WARNING: ODEBUG bug in usbhid_disconnect (2) input usb -1 syz, C 48 2545d 2567d 13/29 2525d 2bcdacb70327 HID: sony: Fix memory corruption issue on cleanup.
KASAN: slab-out-of-bounds Read in usb_reset_and_verify_device usb 17 syz 1 2575d 2567d 13/29 2525d 3dd550a2d365 USB: usbcore: Fix slab-out-of-bounds bug during device reset
BUG: MAX_STACK_TRACE_ENTRIES too low! (2) -1 syz, C done 5045 2557d 2725d 13/29 2525d 12593b7467f9 locking/lockdep: Reduce space occupied by stack traces
possible deadlock in open_rio (3) usb 4 syz, C 169 2551d 2553d 13/29 2525d 9472aff16ca0 USB: rio500: Fix lockdep violation
WARNING in zd_mac_clear usb wireless -1 syz, C 13194 2551d 2711d 13/29 2525d 7a2eb7367fde zd1211rw: remove false assertion from zd_mac_clear()
WARNING in iguanair_probe/usb_submit_urb usb media -1 syz, C 3 2556d 2606d 13/29 2525d ab1cbdf159be media: iguanair: add sanity checks
general protection fault in __pm_runtime_resume input usb pm 2 syz, C 197 2545d 2608d 13/29 2525d 5f9242775bb6 HID: logitech: Fix general protection fault caused by Logitech driver
divide error in cdc_ncm_update_rxtx_max usb 2 syz, C 5 2540d 2554d 13/29 2525d 3fe4b3351301 cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
KASAN: slab-out-of-bounds Read in hidraw_ioctl input 17 syz, C 104 2552d 2602d 13/29 2525d 416dacb819f5 HID: hidraw: Fix invalid read in hidraw_ioctl
possible deadlock in open_rio usb 4 1107 2564d 2600d 12/29 2564d 2ca359f4f8b9 Revert "USB: rio500: simplify locking"
possible deadlock in usb_deregister_dev usb 4 syz, C 82 2589d 2596d 12/29 2564d c468a8aa790e usb: iowarrior: fix deadlock on disconnect
WARNING in __iforce_usb_xmit/usb_submit_urb input usb -1 syz, C 3 2592d 2596d 12/29 2564d 849f5ae3a513 Input: iforce - add sanity checks
WARNING in kbtab_open/usb_submit_urb usb -1 syz, C 5 2591d 2609d 12/29 2564d c88090dfc842 Input: kbtab - sanity check for endpoint type
WARNING in usbtouch_open input usb -1 syz, C 768 2589d 2603d 12/29 2564d b55d996f057b Input: usbtouchscreen - initialize PM mutex before using it
KASAN: use-after-free Read in usb_free_coherent usb 19 310 2589d 2600d 12/29 2564d fc05481b2fca usb: yurex: Fix use-after-free in yurex_delete
KASAN: use-after-free Read in ld_usb_release usb 19 syz, C 14 2583d 2592d 12/29 2564d 303911cfc5b9 USB: core: Fix races in character device registration and deregistraion
KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind net usb 17 syz, C 2 2587d 2589d 12/29 2564d 54364278fb3c USB: CDC: fix sanity checks in CDC union parser
KASAN: use-after-free Read in device_release_driver_internal usb 19 syz, C 5 2585d 2609d 12/29 2564d c52873e5a1ef usb: cdc-acm: make sure a refcount is taken early enough
WARNING in wdm_write/usb_submit_urb usb -1 syz, C 15 2568d 2582d 12/29 2564d 1426bd2c9f7e USB: cdc-wdm: fix race between write and disconnect due to flag abuse
WARNING in mark_lock kernel -1 syz done 2 2583d 2638d 12/29 2574d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in holtek_kbd_input_event input 2 syz, C 67 2595d 2607d 12/29 2574d 01ec0a5f19c8 HID: holtek: test for sanity of intfdata
KASAN: use-after-free Read in hiddev_release input usb 19 syz, C 11 2585d 2600d 12/29 2574d 9c09b214f30e HID: hiddev: avoid opening a disconnected device 6d4472d7bec3 HID: hiddev: do cleanup in failure of opening a device
WARNING in gpio_to_desc usb gpio -1 syz, C 3 2592d 2622d 12/29 2574d c3953a3c2d31 NFC: nfcmrvl: fix gpio-handling regression
usb-fuzzer boot error: general protection fault in dma_direct_max_mapping_size iommu -1 21 2606d 2609d 12/29 2588d 1b5d9a6e9835 scsi: core: fix the dma_max_mapping_size call
general protection fault in snd_usb_pipe_sanity_check usb sound 2 syz, C 72 2589d 2603d 12/29 2588d 5d78e1c2b7f4 ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
KASAN: stack-out-of-bounds Read in hfcsusb_probe usb net 17 syz, C 634 2603d 2709d 12/29 2588d f384e62a82ba ISDN: hfcsusb: checking idx of ep configuration
kernel BUG at drivers/usb/wusbcore/wusbhc.c:LINE! usb -1 syz, C 1 2609d 2609d 12/29 2588d f90bf1ece48a usb: wusbcore: fix unbalanced get/put cluster_id
WARNING: Support for this device (Terratec Grabster AV400) is experimental. usb -1 syz, C 371 2603d 2693d 12/29 2596d 1753c7c4367a media: pvrusb2: use a different format for warnings
KASAN: use-after-free Read in cpia2_usb_disconnect usb media 19 syz, C 3 2623d 2707d 12/29 2596d eff73de2b160 media: cpia2_usb: first wake up, then free in disconnect
WARNING in __flush_work (3) usb -1 syz, C 1251 2599d 2709d 12/29 2596d 11a087f484bf media: uvcvideo: Fix access to uninitialized fields on probe error
KASAN: use-after-free Read in dvb_usb_device_exit usb 19 syz, C 825 2597d 2711d 12/29 2596d 6cf97230cd5f media: dvb: usb: fix use after free in dvb_usb_device_exit
KASAN: slab-out-of-bounds Read in au0828_rc_unregister (2) media 17 11 2667d 2678d 12/29 2596d 6d0d1ff9ff21 media: au0828: fix null dereference in error path
INFO: trying to register non-static key in rtl_c2hcmd_launcher usb wireless -1 syz, C 48950 2603d 2711d 12/29 2596d 6c0ed66f1a5b rtlwifi: rtl8192cu: fix error handle when usb probe failed
KASAN: null-ptr-deref Read in zr364xx_vidioc_querycap usb media 11 syz, C 76 2603d 2694d 12/29 2596d 5d2e73a5f80a media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
WARNING: ath10k USB support is incomplete, don't expect anything to work! usb -1 syz, C 347 2604d 2684d 12/29 2596d 265df32eae58 ath10k: Change the warning message string
KASAN: use-after-free Read in v4l2_release usb media 19 syz, C 275 2604d 2708d 12/29 2596d c666355e60dd media: radio-raremono: change devm_k*alloc to k*alloc
WARNING: Detected a wedged cx25840 chip; the device will not work. usb -1 syz, C 62 2604d 2693d 12/29 2596d 1753c7c4367a media: pvrusb2: use a different format for warnings
WARNING in snd_usb_motu_microbookii_communicate/usb_submit_urb usb -1 syz, C 3 2613d 2651d 12/29 2596d 801ebf1043ae ALSA: usb-audio: Sanity checks for each pipe and EP types
KASAN: use-after-free Read in p54u_load_firmware_cb wireless usb 19 syz 40 2604d 2687d 12/29 2596d 6e41e2257f10 p54usb: Fix race between disconnect and firmware loading
KASAN: global-out-of-bounds Read in qmi_wwan_probe usb 17 syz, C 2 2626d 2638d 12/29 2603d 904d88d743b0 qmi_wwan: Fix out-of-bounds read
KASAN: null-ptr-deref Write in submit_audio_out_urb (2) usb 12 syz, C 3423 2603d 2635d 12/29 2603d 3450121997ce ALSA: line6: Fix write on zero-sized buffer
WARNING: proc registration bug in snd_info_card_register usb sound -1 syz, C 453 2667d 2711d 12/29 2638d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
general protection fault in sisusb_probe usb 2 syz, C 3 2681d 2684d 12/29 2642d 9a5729f68d3a USB: sisusbvga: fix oops in error path of sisusb_probe
KASAN: slab-out-of-bounds Write in usb_get_bos_descriptor usb 21 syz 3 2670d 2683d 12/29 2642d a03ff5446081 USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
KASAN: invalid-free in disconnect_rio usb 24 syz, C 180 2666d 2711d 12/29 2642d 3864d33943b4 USB: rio500: refuse more than one device at a time
general protection fault in smsusb_init_device media usb 2 syz, C 23 2666d 2705d 12/29 2642d 31e0456de5be media: usb: siano: Fix general protection fault in smsusb
KASAN: null-ptr-deref Write in submit_audio_out_urb sound usb 12 syz, C 185 2651d 2666d 12/29 2644d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
INFO: task hung in usb_kill_urb usb 1 syz, C 1515 2706d 2711d 12/29 2648d 50896c410354 USB: dummy-hcd: Fix failure to give back unlinked URBs USB: dummy-hcd: Fix failure to give back unlinked URBs
BUG: sleeping function called from invalid context in line6_pcm_acquire sound 5 119 2666d 2685d 12/29 2648d 7f84ff68be05 ALSA: line6: toneport: Fix broken usage of timer for delayed execution
general protection fault in __dev_printk usb 2 syz, C 300 2693d 2706d 12/29 2666d ef61eb43ada6 USB: yurex: Fix protection fault after device removal
INFO: trying to register non-static key in vmk80xx_detach staging usb -1 syz, C 1528 2666d 2711d 12/29 2666d 08b7c2f9208f staging: comedi: vmk80xx: Fix use of uninitialized semaphore
INFO: trying to register non-static key in ni6501_detach staging usb -1 syz, C 127 2667d 2709d 12/29 2666d 660cf4ce9d0f staging: comedi: ni_usb6501: Fix use of uninitialized mutex
KASAN: use-after-free Read in snd_info_free_entry usb sound 19 syz, C 47 2678d 2709d 12/29 2666d 2a3f7221acdd ALSA: core: Fix card races between register and disconnect 8c2f870890fd ALSA: info: Fix racy addition/deletion of nodes
KASAN: slab-out-of-bounds Read in ds_probe usb 17 syz, C 5 2668d 2706d 12/29 2666d c114944d7d67 USB: w1 ds2490: Fix bug caused by improper use of altsetting array
KASAN: stack-out-of-bounds Read in string usb 17 syz, C 46 2700d 2711d 12/29 2678d c01c348ecdc6 USB: core: Fix unterminated string returned by usb_string()
WARNING in usb_submit_urb (4) usb -1 syz done 46 2679d 2868d 12/29 2678d c2b71462d294 USB: core: Fix bug caused by duplicate interface PM usage counter