USB plug‑in spam is a classic annoyance on modern Linux boxes. Every time you drop a keyboard, a mouse, or even a USB‑SD card in, the kernel goes into a burst‑mode and writes a wall of messages to journalctl. On a busy server or a home‑lab machine that logs everything, those lines can quickly fill the journal, slow down log‑rotation, and make it hard to spot real problems.
Below is a hands‑on guide to quiet those messages without losing the useful diagnostics you need. The techniques work on recent systemd‑based distributions (Debian 12, Ubuntu 24.04, Arch 2026, etc.) and are safe for a security‑aware setup because they only suppress noise, not real alerts.
What the spam looks like
A typical burst looks like this:
Jun 12 14:32:01 host kernel: usb 1-2: new high-speed USB device number 12 using xhci_hcd
Jun 12 14:32:01 host kernel: usb 1-2: New USB device found, idVendor=046d, idProduct=c534
Jun 12 14:32:01 host kernel: usb 1-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3
Jun 12 14:32:01 host kernel: usb 1-2: Product: USB Keyboard
Jun 12 14:32:01 host kernel: usb 1-2: Manufacturer: Logitech
Jun 12 14:32:01 host kernel: usb 1-2: SerialNumber: 0001
Jun 12 14:32:01 host kernel: usb 1-2: device descriptor contains wMaxPacketSize 0x40
Jun 12 14:32:01 host kernel: usb 1-2: device descriptor contains bNumConfigurations 1
Jun 12 14:32
See also
- Running My Home NAS Backups with `nice` and `ionice` So My Desktop Never Freezes
- Docker builds on a 32 GB Raspberry Pi: How I recovered from a full disk
- Using a systemd path unit to clean my home server’s cache when disk space hits 90%
- What a half‑open TCP connection in “ss” really means (and how to close it)
- How I Stopped /var/log from Flooding the Root Filesystem with Systemd Journal Rotations