syzbot


Applied filters: Manager=ci2-upstream-usb (drop)
Title Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
BUG: Bad page state (8) mm C 7166 1h25m 1151d 1/26 never mm-filemap-add-filemap_range_uptodate-fix
KASAN: slab-use-after-free Read in pvr2_context_set_notify (2) pvrusb2 C 730 3h06m 57d 23/26 never 0a0b79ea55de media: pvrusb2: fix uaf in pvr2_context_set_notify
usb-testing boot error: WARNING: refcount bug in __reset_page_owner mm 36 14h51m 2d02h 0/26 never mm,page_owner: Fix refcount imbalance
WARNING in bcm5974_start_traffic/usb_submit_urb input C error 41 6d06h 1601d 26/26 1d17h 2b9c3eb32a69 Input: bcm5974 - check endpoint type before starting traffic
KASAN: slab-use-after-free Read in pvr2_context_set_notify usb pvrusb2 C 3814 57d 263d 26/26 57d ded85b0c0edd media: pvrusb2: fix use after free on context disconnection
WARNING in dev_watchdog (2) net C inconclusive 6791 60d 1459d 26/26 57d e316dd1cf135 net: don't dump stack on queue timeout
WARNING in ieee80211_rfkill_poll wireless C 684 108d 140d 25/26 67d 8e2f6f236621 wifi: cfg80211: lock wiphy mutex for rfkill poll
KASAN: use-after-free Read in __media_entity_remove_links usb media C 7 1465d 1563d 25/26 84d 68035c80e129 media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
KASAN: use-after-free Read in powermate_config_complete (4) input syz done unreliable 14 202d 574d 25/26 98d 5c15c60e7be6 Input: powermate - fix use-after-free in powermate_config_complete
UBSAN: shift-out-of-bounds in set_flicker usb media syz 5 143d 223d 25/26 98d 099be1822d1f media: gspca: cpia1: shift-out-of-bounds in set_flicker
KASAN: slab-use-after-free Read in input_dev_uevent input C done 7 208d 219d 23/26 167d dd613a4e45f8 HID: uclogic: Correct devm device reference for hidinput input_dev name
WARNING in usbnet_start_xmit/usb_submit_urb usb C done 92 281d 864d 23/26 167d 5e1627cb43dd net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
INFO: trying to register non-static key in skb_queue_tail wireless C unreliable done 171 272d 1374d 23/26 181d 061b0cb9327b wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
WARNING in dlfb_submit_urb/usb_submit_urb (2) fbdev usb C 2 319d 315d 22/26 270d ed9de4ed3987 fbdev: udlfb: Fix endpoint check
WARNING in __usbnet_read_cmd/usb_submit_urb usb C error 5 416d 446d 22/26 289d 93fd565919cf net: USB: Fix wrong-direction WARNING in plusb.c net: USB: Fix wrong-direction WARNING in plusb.c
WARNING in sisusb_send_bulk_msg/usb_submit_urb usb C unreliable 418 345d 1730d 22/26 293d df05a9b05e46 USB: sisusbvga: Add endpoint checks
WARNING in c_start (2) kernel 616173 367d 384d 22/26 293d e7304080e0e5 cpumask: relax sanity checking constraints
WARNING in pegasus_open/usb_submit_urb input usb C 7 374d 1384d 22/26 293d b3d80fd27a3c Input: pegasus-notetaker - check pipe type when probing
WARNING in shark_write_reg/usb_submit_urb usb C error 63 343d 1717d 22/26 293d 76e31045ba03 media: radio-shark: Add endpoint checks
WARNING in remove_proc_entry (5) scsi C 158 376d 419d 22/26 293d 2172e84ea00b SUNRPC: Fix occasional warning when destroying gss_krb5_enctypes
general protection fault in pn533_out_complete nfc C error 15 424d 439d 22/26 293d 484b7059796e nfc: pn533: initialize struct pn533_out_arg properly
WARNING in ath6kl_htc_pipe_rx_complete usb wireless C error 2008 332d 1602d 22/26 293d 75c4a8154cb6 wifi: ath6kl: reduce WARN to dev_dbg() in callback
WARNING in shark_write_val/usb_submit_urb usb C error done 51 351d 1710d 22/26 293d 76e31045ba03 media: radio-shark: Add endpoint checks
INFO: task hung in addrconf_verify_work (6) C done 86 401d 638d 22/26 397d ff1fa2081d17 net: tun: avoid disabling NAPI twice
possible deadlock in display_open usb C inconclusive 48888 665d 1692d 22/26 397d db264d4c66c0 media: imon: reorganize serialization
WARNING in send_packet/usb_submit_urb usb C inconclusive 847 466d 632d 22/26 397d 813ceef062b5 media: imon: fix a race condition in send_packet()
KASAN: slab-out-of-bounds Read in thrustmaster_probe input usb C unreliable 92 742d 766d 22/26 397d fc3ef2e3297b HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
usb-testing boot error: BUG: unable to handle kernel paging request in dequeue_task_fair acpi 1 576d 576d 22/26 397d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in dev_uevent kernel syz 54 405d 1378d 22/26 397d 16b1941eac2b usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
usb-testing boot error: BUG: unable to handle kernel paging request in __handle_mm_fault mm 1 590d 590d 22/26 397d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
usb-testing boot error: general protection fault in rcu_core fs mm 23 571d 590d 22/26 397d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
usb-testing boot error: WARNING in anon_vma_clone mm 1 590d 590d 22/26 397d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
usb-testing boot error: INFO: task hung in add_early_randomness crypto 7 653d 660d 22/26 397d 228432551bd8 virtio-rng: make device ready before making request
general protection fault in ath9k_hif_usb_rx_cb (2) wireless C error 1678 595d 1349d 22/26 397d 0ac4827f78c7 ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
KASAN: use-after-free Read in usb_udc_uevent usb syz error 30 608d 1394d 22/26 397d 2191c00855b0 USB: gadget: Fix use-after-free Read in usb_udc_uevent()
usb-testing boot error: BUG: unable to handle kernel paging request in insert_header fs 1 576d 576d 22/26 397d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
usb-testing boot error: general protection fault in __handle_irq_event_percpu kernel 1 576d 576d 22/26 397d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in ar5523_cmd_tx_cb usb wireless C inconclusive 372 493d 548d 22/26 397d b6702a942a06 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
WARNING in dlfb_submit_urb/usb_submit_urb usb fbdev C done 481 470d 1731d 22/26 397d aaf7dbe07385 video: fbdev: udlfb: properly check endpoint type
usb-testing boot error: BUG: unable to handle kernel paging request in enqueue_task_fair mm 1 575d 575d 22/26 397d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
usb-testing boot error: general protection fault in __register_sysctl_table (2) fs 1 575d 575d 22/26 397d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in si470x_int_in_callback (2) usb media C error 7303 465d 1622d 22/26 397d 7d21e0b1b41b media: si470x: Fix use-after-free in si470x_int_in_callback()
KASAN: use-after-free Read in jbd2_journal_wait_updates ext4 C error 143 734d 778d 22/26 397d cc16eecae687 jbd2: fix use-after-free of transaction_t race
usb-testing boot error: BUG: unable to handle kernel paging request in follow_page_mask mm 1 572d 568d 22/26 397d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
INFO: task hung in hci_dev_close_sync bluetooth C unreliable 2366 539d 694d 22/26 397d e36bea6e78ab Bluetooth: core: Fix deadlock on hci_power_on_sync.
INFO: task hung in scsi_remove_host scsi usb C done 328 549d 584d 22/26 397d 2b36209ca818 scsi: core: Revert "Call blk_mq_free_tag_set() earlier" d94b2d00f7bf scsi: core: Revert "Make sure that hosts outlive targets" f782201ebc2b scsi: core: Revert "Make sure that targets outlive devices" 70e8d057bef5 scsi: core: Revert "Simplify LLD module reference counting"
UBSAN: array-index-out-of-bounds in pvr2_i2c_core_init pvrusb2 usb C inconclusive 4 682d 713d 22/26 397d 471bec68457a media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
usb-testing boot error: BUG: unable to handle kernel paging request in copy_namespaces kernel 1 575d 575d 22/26 397d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb (2) C done 48810 594d 1227d 22/26 397d 0ac4827f78c7 ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
WARNING in mcba_usb_probe/usb_submit_urb usb can C error 537 727d 1722d 22/26 397d 136bed0bfd3b can: mcba_usb: properly check endpoint type
KASAN: use-after-free Read in remove_wait_queue (3) kernfs C inconclusive 123 437d 863d 22/26 397d a06247c6804f psi: Fix uaf issue when psi trigger is destroyed while being polled
WARNING: locking bug in hfa384x_usbctlx_completion_task usb staging C 2 644d 640d 22/26 397d ee6c6e734247 staging/wlan-ng: get the correct struct hfa384x in work callback
INFO: task hung in add_early_randomness (2) usb crypto C done 182 445d 664d 22/26 397d 228432551bd8 virtio-rng: make device ready before making request
usb-testing boot error: kernel BUG in putname fs 1 575d 575d 22/26 397d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
WARNING in hif_usb_send/usb_submit_urb wireless C unreliable done 374 478d 1270d 22/26 397d 16ef02bad239 wifi: ath9k: verify the expected usb_endpoints are present
usb-testing boot error: WARNING in __netif_set_xps_queue virtualization net 57 515d 528d 22/26 397d fc8695eb11f0 Revert "net: fix cpu_max_bits_warn() usage in netif_attrmask_next{,_and}"
KASAN: use-after-free Read in driver_register usb C 131 641d 692d 22/26 397d 5f0b5f4d50fa usb: gadget: fix race when gadget driver register via ioctl
WARNING in driver_unregister input usb C 1 675d 671d 22/26 397d f2d8c2606825 usb: gadget: Fix non-unique driver names in raw-gadget driver
INFO: task hung in ath6kl_usb_power_off wireless 7454 595d 1360d 22/26 397d 62ebaf2f9261 ath6kl: avoid flush_scheduled_work() usage
WARNING in aiptek_open/usb_submit_urb usb input C error 2380 734d 1756d 22/26 397d 5600f6986628 Input: aiptek - properly check endpoint type
INFO: task hung in __input_unregister_device (4) usb input C done 924 570d 635d 22/26 397d 98e01215708b Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
INFO: task hung in linkwatch_event (2) net C done done 1033 703d 1429d 20/26 684d 563fbefed46a cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
KASAN: out-of-bounds Read in ath9k_hif_usb_rx_cb (3) wireless usb C unreliable done 7 774d 1177d 20/26 742d 6ce708f54cc8 ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
KASAN: slab-out-of-bounds Write in betop_probe input usb C unreliable 9 951d 1507d 20/26 742d 689e453a9b9c HID: betop: fix slab-out-of-bounds Write in betop_probe HID: betop: fix slab-out-of-bounds Write in betop_probe
divide error in usbnet_start_xmit usb C 760 874d 891d 20/26 750d 397430b50a36 usbnet: sanity check for maxpacket
INFO: trying to register non-static key in mxl111sf_ctrl_msg usb media C 73 1706d 1809d 20/26 750d 44870a9e7a3c media: mxl111sf: change mutex_init() location
WARNING in atp_close (3) input C 125 814d 907d 20/26 750d 9f3ccdc3f6ef Input: appletouch - initialize work before device registration
INFO: trying to register non-static key in ath9k_htc_rxep wireless C unreliable 9896 805d 1378d 20/26 750d b0ec7e55fce6 ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()
KASAN: use-after-free Read in rtl8712_dl_fw usb staging C 6961 867d 890d 20/26 750d c052cc1a069c staging: rtl8712: fix use-after-free in rtl8712_dl_fw
WARNING in rtl92cu_hw_init wireless 1 850d 846d 20/26 750d 8b144dedb928 rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled
INFO: trying to register non-static key in ath9k_wmi_event_tasklet wireless usb C unreliable 7 841d 1017d 20/26 750d 8b3046abc99e ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
INFO: rcu detected stall in dummy_timer (3) usb C error 132 764d 1352d 20/26 750d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
BUG: corrupted list in em28xx_init_extension usb media C error 18 981d 1525d 20/26 750d 2c98b8a3458d media: em28xx: add missing em28xx_close_extension
WARNING: held lock freed in spi_unregister_controller spi usb C inconclusive 251 850d 890d 20/26 750d 6c53b45c71b4 spi: fix use-after-free of the add_lock mutex
WARNING in rtl28xxu_ctrl_msg/usb_submit_urb usb C 50 991d 1039d 20/26 868d 76f22c93b209 media: rtl28xxu: fix zero-length control request media: rtl28xxu: fix zero-length control request
WARNING in hso_free_net_device usb C error 528 987d 1667d 20/26 868d 788e67f18d79 usb: hso: fix error handling code of hso_create_net_device usb: hso: fix error handling code of hso_create_net_device
KASAN: null-ptr-deref Read in phy_disconnect net usb C 255 936d 940d 20/26 869d 1406e8cb4b05 net: usb: asix: do not call phy_disconnect() for ax88178
WARNING in dtv5100_probe/usb_submit_urb usb C 51 990d 1036d 20/26 869d 8c8b9a9be2af media: dtv5100: fix control-request directions
WARNING in e2i_init/usb_submit_urb usb 4 1010d 1039d 20/26 869d 41e81022a04a Input: usbtouchscreen - fix control-request directions
usb-testing boot error: WARNING in kvm_wait kvm 3 1112d 1115d 20/26 869d f4e61f0c9add  x86/kvm: Fix broken irq restoration in kvm_wait
WARNING in hid_submit_ctrl/usb_submit_urb usb input C done 38 935d 983d 20/26 869d 0a824efdb724 HID: usbhid: Fix warning caused by 0-length input reports
WARNING in kvm_wait kvm C error 119882 1098d 1115d 20/26 869d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
usb-testing boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0) kernel 27 990d 995d 20/26 869d c43ddbf97f46 scsi: virtio_scsi: Do not overwrite SCSI status
general protection fault in magicmouse_remove input usb C 47 1019d 1046d 20/26 869d 4b4f6cecca44 HID: magicmouse: fix NULL-deref on disconnect
WARNING in osif_probe/usb_submit_urb usb C 45 994d 1039d 20/26 869d 4ca070ef0dd8 i2c: robotfuzz-osif: fix control-request directions
general protection fault in cdev_del (2) fs C error 45 1003d 1281d 20/26 869d 8a12f8836145 net: hso: fix null-ptr-deref during tty device unregistration 0a360e8b65d6 tty: n_gsm: check error while registering tty devices
WARNING in qt2_attach/usb_submit_urb usb C 171 1018d 1039d 20/26 869d eb8dbe80326c USB: serial: quatech2: fix control-request directions
BUG: sleeping function called from invalid context in stack_depot_save mm C unreliable 8490 968d 998d 20/26 869d 187ad460b841 mm/page_alloc: avoid page allocator recursion with pagesets.lock held
WARNING in usb_new_device/usb_submit_urb usb C 2 1033d 1029d 20/26 869d 60dfe484cef4 USB: core: Avoid WARNings for 0-length descriptor requests
WARNING in rtl8152_probe usb C 23 1027d 1051d 20/26 869d 1a44fb38cc65 r8152: check the informaton of the device
KASAN: use-after-free Read in r871xu_dev_remove usb staging C unreliable 152 962d 989d 20/26 869d e9e6aa51b273 staging: rtl8712: error handling refactoring
KASAN: slab-out-of-bounds Read in snd_usbmidi_get_ms_info usb alsa C 10 1048d 1052d 20/26 869d e84749a78dc8 ALSA: usb-audio: Validate MS endpoint descriptors
WARNING in input_register_device input usb C error done 11 1086d 1237d 20/26 869d b4104180a2ef kobject_uevent: remove warning in init_uevent_argv()
INFO: task hung in usb_remote_wakeup (2) usb syz inconclusive done 9 950d 1149d 20/26 869d 363eaa3a450a usbip: synchronize event handler with sysfs code paths
WARNING in pvr2_i2c_core_done usb fs C error 5780 990d 1645d 20/26 869d f8194e5e63fd media: pvrusb2: fix warning in pvr2_i2c_core_done
WARNING: zero-size vmalloc in dvb_dmx_init media usb C 62 991d 1055d 20/26 869d c680ed46e418 media: dvb-usb: fix wrong definition
WARNING in __vmalloc_node_range usb media C 7 1055d 1057d 20/26 869d c680ed46e418 media: dvb-usb: fix wrong definition
general protection fault in drm_client_buffer_vunmap usb dri C unreliable done 247 1112d 1213d 20/26 1079d 874a52f9b693 drm/fb-helper: only unmap if buffer not null
UBSAN: shift-out-of-bounds in mceusb_dev_printdata media usb C error 331 1130d 1197d 20/26 1083d 9dec0f48a75e media: mceusb: sanity check for prescaler value
UBSAN: shift-out-of-bounds in snto32 input usb C error 58 1127d 1200d 20/26 1083d a0312af1f94d HID: core: detect and skip invalid inputs to snto32()
UBSAN: shift-out-of-bounds in mceusb_dev_recv media usb C 13 1130d 1194d 20/26 1083d 1b43bad31fb0 media: mceusb: Fix potential out-of-bounds shift
unexpected kernel reboot (3) input usb C error error 21132 1083d 2084d 20/26 1083d c8e2fe13d1d1 x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected (2) C done 640 1178d 1296d 19/26 1114d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
WARNING: suspicious RCU usage in get_wiphy_regdom wireless C done 5031 1165d 1197d 19/26 1114d 51d62f2f2c50 cfg80211: Save the regulatory domain with a lock
WARNING in spi_register_controller usb spi C 1848 1198d 1811d 19/26 1114d 9c60cc797cf7 media: msi2500: assign SPI bus number dynamically
KASAN: use-after-free Write in rtl_fw_do_work (2) wireless 4 1199d 1204d 19/26 1114d 4dfde294b979 rtlwifi: rise completion at the last step of firmware callback
kernel BUG at net/core/skbuff.c:LINE! (3) C done 4399 1129d 2246d 19/26 1114d afbc293add64 af_key: relax availability checks for skb size calculation
WARNING in yurex_write/usb_submit_urb usb C error 78 1173d 1201d 19/26 1114d 372c93131998 USB: yurex: fix control-URB timeout handling
UBSAN: shift-out-of-bounds in snd_usbmidi_get_ms_info alsa usb C error 9 1172d 1191d 19/26 1114d c06ccf3ebb75 ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
general protection fault in tower_disconnect usb C 53 1197d 1205d 19/26 1114d b175d273d4e4 USB: legotower: fix logical error in recent commit
KASAN: use-after-free Read in service_outstanding_interrupt usb C 28 1173d 1328d 19/26 1114d 5e5ff0b4b6bc USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
INFO: task hung in wdm_flush usb C 38294 1305d 1689d 15/26 1227d 37d2a36394d9 USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb wireless C 2849 1227d 1462d 15/26 1227d 03fb92a432ea ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs()
WARNING in ati_remote_sendpacket/usb_submit_urb usb media C 22 1398d 1709d 15/26 1227d a8be80053ea7 media: ati_remote: sanity check for both endpoints
general protection fault in vmk80xx_write_packet usb staging C 82 1268d 1723d 15/26 1227d e1f13c879a7c staging: comedi: check validity of wMaxPacketSize of usb endpoints found
INFO: trying to register non-static key in del_timer_sync (2) wireless usb C 1206 1759d 1811d 15/26 1227d 621a3a8b1c0e mwifiex: don't call del_timer_sync() on uninitialized timer
KASAN: slab-out-of-bounds Read in prism2sta_probe_usb staging usb C 8 1305d 1336d 15/26 1265d fea22e159d51 staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
KASAN: slab-out-of-bounds Write in hiddev_ioctl_usage input usb C 279 1307d 1650d 15/26 1280d 25a097f52046 HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
WARNING in slab_pre_alloc_hook usb C 210 1305d 1325d 15/26 1280d f176ede3a3bd USB: yurex: Fix bad gfp argument
KASAN: use-after-free Read in rc_dev_uevent media 1 1329d 1329d 15/26 1280d 4f0835d6677d media: rc: uevent sysfs file races with rc_unregister_device()
WARNING in r871xu_dev_remove usb staging C 47375 1328d 1679d 15/26 1288d b4383c971bc5 staging: rtl8712: handle firmware load failure
KASAN: use-after-free Read in line6_submit_audio_in_all_urbs sound 2 1356d 1370d 15/26 1288d 68359a1ad844 ALSA: line6: Sync the pending work cancel at disconnection
general protection fault in cdev_del usb fs C 315 1298d 1766d 15/26 1288d e911e99a0770 usb: hso: check for return value in hso_serial_common_create()
WARNING in submit_rx_urb/usb_submit_urb usb staging C 397 1340d 1764d 15/26 1288d faaff9765664 staging: wlan-ng: properly check endpoint types
KASAN: use-after-free Read in ax88172a_unbind usb C done 2723 1340d 1580d 15/26 1288d c28d9a285668 ax88172a: fix ax88172a_unbind() failures
WARNING in submit_audio_out_urb/usb_submit_urb sound usb syz 2 1358d 1357d 15/26 1288d 6e8a914ad619 ALSA: line6: Perform sanity check for each URB creation
INFO: task hung in __do_sys_reboot kernel 1554 1305d 1360d 15/26 1288d b292b50b0efc driver core: Fix probe_count imbalance in really_probe()
general protection fault in go7007_usb_probe usb media C 2103 1328d 1436d 15/26 1288d 137641287eb4 go7007: add sanity checking for endpoints
KASAN: use-after-free Write in ath9k_htc_rx_msg wireless C 93 1385d 1462d 15/26 1349d e4ff08a4d727 ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id usb sound C done 39 1368d 1373d 15/26 1349d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
INFO: task hung in locks_remove_posix fs input usb syz 2231 1384d 1407d 15/26 1349d 187b96db5ca7 x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
KASAN: stack-out-of-bounds Write in ath9k_hif_usb_rx_cb wireless C 57 1385d 1458d 15/26 1349d 19d6c375d671 ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
KASAN: use-after-free Read in usblp_bulk_read usb 7 1359d 1436d 15/26 1349d 296a193b0612 usblp: poison URBs upon disconnect
KASAN: use-after-free Read in htc_connect_service wireless C 41041 1384d 1462d 15/26 1349d ced21a4c726b ath9k: Fix use-after-free Read in htc_connect_service
WARNING in usbhid_raw_request/usb_submit_urb (3) usb syz 18 1428d 1534d 15/26 1349d ac854131d984 USB: core: Fix misleading driver bug report
KASAN: slab-out-of-bounds Read in garmin_read_process usb C 1 1467d 1467d 15/26 1349d e9b3c610a05c USB: serial: garmin_gps: add sanity checking for data length
KASAN: use-after-free Read in usbhid_close (3) input usb C 6 1423d 1450d 15/26 1349d 0ed08faded1d HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
KASAN: use-after-free Read in ath9k_wmi_ctrl_rx wireless C 1 1462d 1461d 15/26 1349d abeaa85054ff ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
general protection fault in ath9k_hif_usb_rx_cb wireless C 913 1349d 1462d 15/26 1349d 2bbcaaee1fcb ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
WARNING in wa_nep_create/usb_submit_urb usb staging C 114 1438d 1722d 15/26 1368d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
WARNING in hwarc_neep_init/usb_submit_urb staging usb C 1 1473d 1472d 15/26 1368d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
BUG: corrupted list in __uwb_rc_neh_rm staging usb C 9 1444d 1479d 15/26 1368d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
KASAN: use-after-free Read in chaoskey_disconnect crypto usb C 44 1582d 1610d 15/26 1378d 93ddb1f56ae1 USB: chaoskey: fix use-after-free on release
general protection fault in fbcon_switch fbdev 1 1462d 1461d 15/26 1418d b139f8b00db4 fbcon: fix null-ptr-deref in fbcon_switch
WARNING: ODEBUG bug in prism2sta_disconnect_usb staging 1 1467d 1465d 15/26 1418d a1f165a6b738 staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb
KASAN: slab-out-of-bounds Read in edge_interrupt_callback usb C 1 1466d 1465d 15/26 1418d 57aa9f294b09 USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback
KASAN: slab-out-of-bounds Read in hfa384x_usbin_callback usb staging C 1 1468d 1468d 15/26 1418d 1165dd73e811 staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback
BUG: soft lockup in sys_exit_group usb C 6 1467d 1490d 15/26 1442d d683469b3c93 ALSA: line6: Fix endless MIDI read loop
KASAN: use-after-free Write in hiddev_disconnect input usb 20 1470d 1534d 15/26 1442d 5c02c447eaed HID: hiddev: Fix race in in hiddev_disconnect()
WARNING in _chaoskey_fill/usb_submit_urb usb C 15 1595d 1647d 15/26 1477d 92aa5986f4f7 USB: chaoskey: fix error case of a timeout
WARNING in flexcop_usb_probe/usb_submit_urb usb media C 4 1643d 1680d 15/26 1477d 1b976fc6d684 media: b2c2-flexcop-usb: add sanity checking
KASAN: use-after-free Read in rsi_rx_done_handler wireless 8 1538d 1667d 15/26 1499d e93cd35101b6 rsi: fix use-after-free on failed probe and unbind
general protection fault in timer_is_static_object input C 2 1583d 1581d 15/26 1499d cb222aed03d7 Input: add safety guards to input_set_keycode()
BUG: spinlock already unlocked in input_set_keycode input C 2 1593d 1591d 15/26 1499d cb222aed03d7 Input: add safety guards to input_set_keycode()
WARNING: refcount bug in cdev_get C done 105 1541d 1681d 15/26 1499d 68faa679b8be chardev: Avoid potential use-after-free in 'chrdev_open()'
WARNING in dln2_start_rx_urbs/usb_submit_urb usb C 44 1515d 1603d 15/26 1499d 2b8bd606b1e6 mfd: dln2: More sanity checking for endpoints
KASAN: slab-out-of-bounds Read in hid_field_extract input usb C 6 1540d 1573d 15/26 1499d 8ec321e96e05 HID: Fix slab-out-of-bounds read in hid_field_extract
WARNING: ODEBUG bug in rsi_probe usb wireless C 10487 1513d 1809d 15/26 1499d 92aafe77123a rsi: fix use-after-free on probe errors
WARNING in uvc_scan_chain_forward usb media C 6 1539d 1563d 15/26 1499d 68035c80e129 media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
general protection fault in gigaset_probe staging usb C 6 1588d 1707d 15/26 1504d 53f35a39c386 staging: gigaset: fix general protection fault on probe
KASAN: slab-out-of-bounds Read in build_audio_procunit (2) sound usb C 1 1603d 1602d 15/26 1525d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
KASAN: global-out-of-bounds Write in kbd_event usb serial input C 6 1581d 1603d 15/26 1567d b2b2dd71e085 tty: vt: keyboard: reject invalid keycodes
general protection fault in flexcop_usb_probe usb media C 403 1581d 1811d 15/26 1567d 1b976fc6d684 media: b2c2-flexcop-usb: add sanity checking
kernel BUG at kernel/time/timer.c:LINE! (4) media usb syz 1 1637d 1633d 15/26 1567d f3f5ba42c58d media: imon: invalid dereference in imon_touch_event
KASAN: use-after-free Read in appledisplay_bl_get_brightness usb C 1 1650d 1647d 15/26 1567d 91feb01596e5 appledisplay: fix error handling in the scheduled work
INFO: trying to register non-static key in ida_destroy usb media C 4272 1580d 1703d 15/26 1567d 8c279e9394ca media: uvcvideo: Fix error path in control parsing failure
general protection fault in snd_usb_create_mixer sound usb C 1 1590d 1588d 15/26 1567d 9435f2bb6687 ALSA: usb-audio: Fix NULL dereference at parsing BADD
general protection fault in usb_set_interface usb C 3 1652d 1654d 15/26 1567d c7a191464078 media: usbvision: Fix invalid accesses after device disconnect
WARNING in port100_send_cmd_async/usb_submit_urb usb nfc C 83 1582d 1722d 15/26 1569d 5f9f0b11f081 nfc: port100: handle command failure cleanly
WARNING: ODEBUG bug in input_ff_destroy input usb C 6 1589d 1596d 14/26 1580d fa3a5a1880c9 Input: ff-memless - kill timer in destroy()
KASAN: use-after-free Read in mcba_usb_disconnect can usb C 2 1607d 1640d 14/26 1580d 4d6636498c41 can: mcba_usb: fix use-after-free on disconnect
KASAN: invalid-free in rsi_91x_deinit usb wireless C 109 1653d 1800d 13/26 1581d 8b51dc729147 rsi: fix a double free bug in rsi_91x_deinit()
divide error in dummy_timer usb C 3 1611d 1616d 13/26 1587d 54f83b8c8ea9 USB: gadget: Reject endpoints with 0 maxpacket value
INFO: task hung in ld_usb_write usb C 831 1606d 1618d 13/26 1587d 52403cfbc635 USB: ldusb: fix control-message timeout
KASAN: use-after-free Read in iowarrior_disconnect usb C 3056 1627d 1682d 13/26 1589d edc4746f253d USB: iowarrior: fix use-after-free on disconnect
divide error in usbtmc_generic_read usb C 2 1688d 1687d 13/26 1589d de7b9aa633b6 usbtmc: more sanity checking for packet size
KASAN: slab-out-of-bounds Read in ld_usb_read (3) usb C 74 1613d 1624d 13/26 1603d 7a6f22d7479b USB: ldusb: fix read info leaks
KASAN: slab-out-of-bounds Read in build_audio_procunit usb sound C 6 1609d 1618d 13/26 1603d ba8bf0967a15 ALSA: usb-audio: Fix copy&paste error in the validator
KASAN: slab-out-of-bounds Write in ga_probe input C 5 1633d 1654d 13/26 1603d d9d4b1e46d95 HID: Fix assumption that devices have inputs
KASAN: use-after-free Read in usb_autopm_put_interface usb C 2373 1612d 1625d 13/26 1603d 7a7591979748 USB: usblp: fix use-after-free on disconnect
KASAN: use-after-free Read in pn533_send_complete nfc usb C 4 1613d 1633d 13/26 1605d 6af3aa57a098 NFC: pn533: fix use-after-free and memleaks
possible deadlock in usb_deregister_dev (2) usb C 956 1626d 1654d 13/26 1613d 33a7813219f2 USB: legousbtower: fix deadlock on disconnect
WARNING in mark_lock (2) fs 14 1620d 1647d 13/26 1613d 8e00c4e9dd85 writeback: fix use-after-free in finish_writeback_work()
BUG: bad usercopy in read_rio hardening mm 2 1628d 1631d 13/26 1613d 015664d15270 USB: rio500: Remove Rio 500 kernel driver
general protection fault in open_rio kernel 2 1645d 1646d 13/26 1613d 015664d15270 USB: rio500: Remove Rio 500 kernel driver
KASAN: use-after-free Read in adu_disconnect usb C 5304 1626d 1696d 13/26 1613d 44efc269db79 USB: adutux: fix use-after-free on disconnect
INFO: rcu detected stall in dummy_timer usb C 16 1628d 1692d 13/26 1613d 32a0721c6620 USB: yurex: Don't retry on unexpected errors
KASAN: invalid-free in disconnect_rio (2) usb C 51 1630d 1651d 13/26 1613d 015664d15270 USB: rio500: Remove Rio 500 kernel driver
WARNING in em28xx_usb_disconnect usb media C 8 1660d 1692d 13/26 1625d 46e4a26615cc media: em28xx: modules workqueue not inited for 2nd device
KASAN: use-after-free Read in si470x_int_in_callback usb media C 25 1634d 1723d 13/26 1625d 0d616f2a3fdb media: radio/si470x: kill urb on error
general protection fault in ath6kl_usb_alloc_urb_from_pipe usb wireless C 1160 1651d 1811d 13/26 1625d 39d170b3cb62 ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
KASAN: use-after-free Read in atusb_disconnect usb wpan C 112 1626d 1667d 13/26 1625d 7fd25e6fc035 ieee802154: atusb: fix use-after-free at disconnect
KASAN: slab-out-of-bounds Read in hdpvr_probe usb media C 10 1662d 1737d 13/26 1625d 8b8900b729e4 media: hdpvr: add terminating 0 at end of string
KASAN: global-out-of-bounds Read in load_next_firmware_from_table usb libertas C 5 1674d 1723d 13/26 1625d 764f3f1ecffc libertas: Add missing sentinel at end of if_usb.c fw_table
divide error in usbnet_update_max_qlen usb C 17 1642d 1654d 13/26 1625d 280ceaed79f1 usbnet: sanity checking of packet sizes and device mtu
KASAN: slab-out-of-bounds Read in technisat_usb2_rc_query usb media C 2236 1671d 1809d 13/26 1625d 0c4df39e504b media: technisat-usb2: break out of loop at end of buffer
KASAN: global-out-of-bounds Read in dvb_pll_attach media usb C 2 1663d 1722d 13/26 1625d c268e7adea52 media: dvb-frontends: use ida for pll number
general protection fault in pk_probe input usb C 2 1671d 1667d 13/26 1625d 98375b86c791 HID: prodikeys: Fix general protection fault during probe
KASAN: global-out-of-bounds Read in hdpvr_probe usb media C 15 1678d 1791d 13/26 1625d d4a6a9537bc3 media: hdpvr: Add device num check and handling
WARNING: ODEBUG bug in usbhid_disconnect (2) usb input C 48 1645d 1667d 13/26 1625d 2bcdacb70327 HID: sony: Fix memory corruption issue on cleanup.
KASAN: slab-out-of-bounds Read in usb_reset_and_verify_device usb syz 1 1676d 1667d 13/26 1625d 3dd550a2d365 USB: usbcore: Fix slab-out-of-bounds bug during device reset
BUG: MAX_STACK_TRACE_ENTRIES too low! (2) C done 5045 1657d 1826d 13/26 1625d 12593b7467f9 locking/lockdep: Reduce space occupied by stack traces
possible deadlock in open_rio (3) usb C 169 1651d 1653d 13/26 1625d 9472aff16ca0 USB: rio500: Fix lockdep violation
WARNING in zd_mac_clear usb wireless C 13194 1651d 1811d 13/26 1625d 7a2eb7367fde zd1211rw: remove false assertion from zd_mac_clear()
WARNING in iguanair_probe/usb_submit_urb media usb C 3 1656d 1706d 13/26 1625d ab1cbdf159be media: iguanair: add sanity checks
general protection fault in __pm_runtime_resume input usb pm C 197 1645d 1708d 13/26 1625d 5f9242775bb6 HID: logitech: Fix general protection fault caused by Logitech driver
divide error in cdc_ncm_update_rxtx_max usb C 5 1641d 1654d 13/26 1625d 3fe4b3351301 cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
KASAN: slab-out-of-bounds Read in hidraw_ioctl input C 104 1652d 1702d 13/26 1625d 416dacb819f5 HID: hidraw: Fix invalid read in hidraw_ioctl
possible deadlock in open_rio usb 1107 1664d 1700d 12/26 1664d 2ca359f4f8b9 Revert "USB: rio500: simplify locking"
possible deadlock in usb_deregister_dev usb C 82 1689d 1696d 12/26 1664d c468a8aa790e usb: iowarrior: fix deadlock on disconnect
WARNING in __iforce_usb_xmit/usb_submit_urb input usb C 3 1692d 1696d 12/26 1664d 849f5ae3a513 Input: iforce - add sanity checks
WARNING in kbtab_open/usb_submit_urb usb C 5 1691d 1709d 12/26 1664d c88090dfc842 Input: kbtab - sanity check for endpoint type
WARNING in usbtouch_open input usb C 768 1689d 1703d 12/26 1664d b55d996f057b Input: usbtouchscreen - initialize PM mutex before using it
KASAN: use-after-free Read in usb_free_coherent usb 310 1689d 1701d 12/26 1664d fc05481b2fca usb: yurex: Fix use-after-free in yurex_delete
KASAN: use-after-free Read in ld_usb_release usb C 14 1683d 1692d 12/26 1664d 303911cfc5b9 USB: core: Fix races in character device registration and deregistraion
KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind usb net C 2 1688d 1689d 12/26 1664d 54364278fb3c USB: CDC: fix sanity checks in CDC union parser
KASAN: use-after-free Read in device_release_driver_internal usb C 5 1686d 1709d 12/26 1664d c52873e5a1ef usb: cdc-acm: make sure a refcount is taken early enough
WARNING in wdm_write/usb_submit_urb usb C 15 1668d 1682d 12/26 1664d 1426bd2c9f7e USB: cdc-wdm: fix race between write and disconnect due to flag abuse
WARNING in mark_lock kernel syz done 2 1683d 1738d 12/26 1674d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in holtek_kbd_input_event input C 67 1695d 1707d 12/26 1674d 01ec0a5f19c8 HID: holtek: test for sanity of intfdata
KASAN: use-after-free Read in hiddev_release input usb C 11 1685d 1700d 12/26 1674d 9c09b214f30e HID: hiddev: avoid opening a disconnected device 6d4472d7bec3 HID: hiddev: do cleanup in failure of opening a device
WARNING in gpio_to_desc usb gpio C 3 1692d 1722d 12/26 1674d c3953a3c2d31 NFC: nfcmrvl: fix gpio-handling regression
usb-fuzzer boot error: general protection fault in dma_direct_max_mapping_size iommu 21 1706d 1709d 12/26 1688d 1b5d9a6e9835 scsi: core: fix the dma_max_mapping_size call
general protection fault in snd_usb_pipe_sanity_check usb sound C 72 1689d 1703d 12/26 1688d 5d78e1c2b7f4 ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
KASAN: stack-out-of-bounds Read in hfcsusb_probe usb isdn4linux C 634 1703d 1809d 12/26 1688d f384e62a82ba ISDN: hfcsusb: checking idx of ep configuration
kernel BUG at drivers/usb/wusbcore/wusbhc.c:LINE! usb C 1 1710d 1709d 12/26 1688d f90bf1ece48a usb: wusbcore: fix unbalanced get/put cluster_id
WARNING: Support for this device (Terratec Grabster AV400) is experimental. usb C 371 1704d 1793d 12/26 1696d 1753c7c4367a media: pvrusb2: use a different format for warnings
KASAN: use-after-free Read in cpia2_usb_disconnect usb media C 3 1723d 1807d 12/26 1696d eff73de2b160 media: cpia2_usb: first wake up, then free in disconnect
WARNING in __flush_work (3) usb C 1251 1699d 1809d 12/26 1696d 11a087f484bf media: uvcvideo: Fix access to uninitialized fields on probe error
KASAN: use-after-free Read in dvb_usb_device_exit usb C 825 1697d 1811d 12/26 1696d 6cf97230cd5f media: dvb: usb: fix use after free in dvb_usb_device_exit
KASAN: slab-out-of-bounds Read in au0828_rc_unregister (2) media 11 1768d 1778d 12/26 1696d 6d0d1ff9ff21 media: au0828: fix null dereference in error path
INFO: trying to register non-static key in rtl_c2hcmd_launcher usb wireless C 48950 1703d 1811d 12/26 1696d 6c0ed66f1a5b rtlwifi: rtl8192cu: fix error handle when usb probe failed
KASAN: null-ptr-deref Read in zr364xx_vidioc_querycap usb media C 76 1704d 1794d 12/26 1696d 5d2e73a5f80a media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
WARNING: ath10k USB support is incomplete, don't expect anything to work! usb C 347 1704d 1784d 12/26 1696d 265df32eae58 ath10k: Change the warning message string
KASAN: use-after-free Read in v4l2_release usb media C 275 1704d 1808d 12/26 1696d c666355e60dd media: radio-raremono: change devm_k*alloc to k*alloc
WARNING: Detected a wedged cx25840 chip; the device will not work. usb C 62 1704d 1793d 12/26 1696d 1753c7c4367a media: pvrusb2: use a different format for warnings
WARNING in snd_usb_motu_microbookii_communicate/usb_submit_urb usb C 3 1713d 1751d 12/26 1696d 801ebf1043ae ALSA: usb-audio: Sanity checks for each pipe and EP types
KASAN: use-after-free Read in p54u_load_firmware_cb wireless usb syz 40 1704d 1787d 12/26 1696d 6e41e2257f10 p54usb: Fix race between disconnect and firmware loading
KASAN: global-out-of-bounds Read in qmi_wwan_probe usb C 2 1727d 1738d 12/26 1703d 904d88d743b0 qmi_wwan: Fix out-of-bounds read
KASAN: null-ptr-deref Write in submit_audio_out_urb (2) usb C 3423 1703d 1735d 12/26 1703d 3450121997ce ALSA: line6: Fix write on zero-sized buffer
WARNING: proc registration bug in snd_info_card_register usb sound C 453 1767d 1811d 12/26 1738d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
general protection fault in sisusb_probe usb C 3 1782d 1785d 12/26 1743d 9a5729f68d3a USB: sisusbvga: fix oops in error path of sisusb_probe
KASAN: slab-out-of-bounds Write in usb_get_bos_descriptor usb syz 3 1770d 1783d 12/26 1743d a03ff5446081 USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
KASAN: invalid-free in disconnect_rio usb C 180 1766d 1811d 12/26 1743d 3864d33943b4 USB: rio500: refuse more than one device at a time
general protection fault in smsusb_init_device media usb C 23 1767d 1805d 12/26 1743d 31e0456de5be media: usb: siano: Fix general protection fault in smsusb
KASAN: null-ptr-deref Write in submit_audio_out_urb sound usb C 185 1751d 1766d 12/26 1744d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
INFO: task hung in usb_kill_urb usb C 1515 1806d 1811d 12/26 1748d 50896c410354 USB: dummy-hcd: Fix failure to give back unlinked URBs USB: dummy-hcd: Fix failure to give back unlinked URBs
BUG: sleeping function called from invalid context in line6_pcm_acquire sound 119 1767d 1785d 12/26 1748d 7f84ff68be05 ALSA: line6: toneport: Fix broken usage of timer for delayed execution
general protection fault in __dev_printk usb C 300 1793d 1806d 12/26 1766d ef61eb43ada6 USB: yurex: Fix protection fault after device removal
INFO: trying to register non-static key in vmk80xx_detach staging usb C 1528 1766d 1811d 12/26 1766d 08b7c2f9208f staging: comedi: vmk80xx: Fix use of uninitialized semaphore
INFO: trying to register non-static key in ni6501_detach staging usb C 127 1767d 1809d 12/26 1766d 660cf4ce9d0f staging: comedi: ni_usb6501: Fix use of uninitialized mutex
KASAN: use-after-free Read in snd_info_free_entry usb sound C 47 1779d 1809d 12/26 1766d 2a3f7221acdd ALSA: core: Fix card races between register and disconnect 8c2f870890fd ALSA: info: Fix racy addition/deletion of nodes
KASAN: slab-out-of-bounds Read in ds_probe usb C 5 1768d 1806d 12/26 1766d c114944d7d67 USB: w1 ds2490: Fix bug caused by improper use of altsetting array
KASAN: stack-out-of-bounds Read in string usb C 46 1800d 1811d 12/26 1778d c01c348ecdc6 USB: core: Fix unterminated string returned by usb_string()
WARNING in usb_submit_urb (4) usb syz done 46 1780d 1968d 12/26 1778d c2b71462d294 USB: core: Fix bug caused by duplicate interface PM usage counter