[syzbot] Monthly usb report (Aug 2026)

Hello usb maintainers/developers,

This is a 31-day syzbot report for the usb subsystem.
All related reports/information can be found at:
https://syzkaller.appspot.com/upstream/s/usb

During the period, 34 new issues were detected and 1 were fixed.
In total, 87 issues are still open and 427 have already been fixed.
There are also 38 low-priority issues.

Some of the still happening issues:

Ref  Crashes Repro Title
<1>  2570    Yes   KASAN: slab-use-after-free Read in v4l2_open
                   https://syzkaller.appspot.com/bug?extid=1a7507a194fff09e5c44
<2>  1156    Yes   WARNING in as102_dvb_dmx_start_feed
                   https://syzkaller.appspot.com/bug?extid=3825a6102073c418fe41
<3>  963     No    INFO: task hung in hub_event (3)
                   https://syzkaller.appspot.com/bug?extid=a7edecbf389d11a369d4
<4>  440     Yes   INFO: task hung in get_bMaxPacketSize0
                   https://syzkaller.appspot.com/bug?extid=f7ac46d91cf13b4591a4
<5>  399     Yes   INFO: task hung in dvb_usb_i2c_exit
                   https://syzkaller.appspot.com/bug?extid=0dcc341ee61fc9e4032f
<6>  366     No    KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2)
                   https://syzkaller.appspot.com/bug?extid=7f5e98b052c766f47f68
<7>  256     Yes   WARNING in cm109_input_open/usb_submit_urb (3)
                   https://syzkaller.appspot.com/bug?extid=ac0f9c4cc1e034160492
<8>  130     Yes   INFO: task hung in usbdev_release (2)
                   https://syzkaller.appspot.com/bug?extid=bfa320b67fcbe2583c6f
<9>  105     Yes   KASAN: stack-out-of-bounds Write in carl9170_handle_command_response
                   https://syzkaller.appspot.com/bug?extid=5c1ca6ccaa1215781cac
<10> 74      Yes   KASAN: slab-use-after-free Read in uea_upload_pre_firmware
                   https://syzkaller.appspot.com/bug?extid=3d45d763d18796f97412

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at [email protected].

To disable reminders for individual bugs, reply with the following command:
#syz set <Ref> no-reminders

To change bug's subsystems, reply with:
#syz set <Ref> subsystems: new-subsystem

You may send multiple commands in a single email message.