usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 435
Parent subsystem(s): kernel (96)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
memory leak in f_uac2_opts_p_srate_store usb prio:normal 3 syz, C 1 4d04h 3h58m
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 4 1d09h 19h45m PATCH [7h03m]
KASAN: slab-use-after-free Read in uvcg_extension_drop usb prio:normal actionable 19 3 3d12h 22h22m
general protection fault in dummy_udc_stop usb prio:low 8 5 1d15h 23h30m
general protection fault in emi26_probe usb prio:low 2 12 4d04h 23h31m
WARNING in ttusb_dec_send_command media usb prio:high -1 syz, C 15 10h33m 1d22h
general protection fault in mon_notify usb prio:high 2 syz, C 4 5d12h 1d22h PATCH [1d13h]
UBSAN: array-index-out-of-bounds in uea_bind usb prio:high 15 syz, C 82 1d18h 1d22h PATCH [17h02m]
general protection fault in rebind_store usb prio:low 2 11 5h59m 1d22h
KASAN: slab-use-after-free Read in vhci_cleanup_unlink_list usb prio:normal 19 syz 114 32m 1d23h
KASAN: slab-use-after-free Write in pn_bind usb prio:normal 22 12 11h58m 1d23h
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 43 6h34m 1d23h
BUG: using smp_processor_id() in preemptible code in tx_complete net usb prio:high 4 1 3d12h 1d23h
WARNING in f_midi_free usb prio:low -1 2 3h48m 1d23h
KASAN: slab-use-after-free Read in vhci_shutdown_connection usb prio:normal 19 syz 96 6h41m 1d23h
KASAN: slab-use-after-free Write in put_dev usb prio:normal 22 syz 1 3d05h 1d23h
KASAN: slab-use-after-free Write in gadgetfs_bind usb prio:normal 22 syz 2 3d03h 2d06h
KASAN: slab-use-after-free Read in cxacru_poll_status usb prio:high 19 syz 17 14h59m 2d06h
memory leak in uvcg_extension_ba_source_id_store usb prio:low 3 syz, C 1 3d05h 2d06h PATCH [16h43m]
possible deadlock in digi_set_modem_signals usb prio:high 4 syz, C error 5 3d05h 2d06h PATCH [1d10h]
WARNING in cxacru_cm/usb_submit_urb (3) usb prio:high -1 syz, C 27 3h38m 2d06h PATCH [2d13h]
WARNING in usb_ep_enable usb prio:high -1 syz, C done 97 6h27m 2d06h PATCH [5h19m]
WARNING: locking bug in gadget_dev_open usb 4 1 6d16h 2d16h
KASAN: slab-use-after-free Read in find_endpoint usb prio:normal 19 14 1d23h 2d16h
KASAN: slab-use-after-free Read in gadget_dev_open usb prio:normal 19 syz, C 7 2d00h 2d17h
KASAN: slab-use-after-free Read in ep_open usb prio:normal 19 syz, C 17 4h05m 2d22h PATCH [2d00h]
WARNING in usbg_make_tpg usb prio:low -1 2 3d09h 2d23h
memory leak in f_uac2_opts_c_srate_store usb prio:low 3 syz, C 1 7d07h 2d23h PATCH [20h02m]
memory leak in try_get_usb_function_instance usb prio:low 3 syz, C 1 7d11h 3d11h PATCH [3d09h]
kernel BUG in register_netdevice usb prio:low -1 5 1h38m 3d23h
KASAN: invalid-free in f_uac2_opts_p_srate_store usb prio:normal 24 syz, C error 44 1h08m 3d23h PATCH [4d07h]
KASAN: invalid-free in f_uac2_opts_c_srate_store usb prio:normal 24 syz, C 23 2h16m 4d18h PATCH [4d12h]
KASAN: slab-out-of-bounds Read in dummy_free_request usb prio:normal 17 95 9h07m 4d23h
general protection fault in usbtest_probe usb prio:low 8 syz, C 16 20h51m 4d23h PATCH [4d14h]
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C 6 4h54m 4d23h
possible deadlock in uvc_func_allow_link usb prio:low 4 5 8d20h 4d23h
KASAN: slab-use-after-free Read in lockref_get (2) fs usb prio:high 19 syz, C error 4 2d20h 4d23h
KASAN: slab-use-after-free Read in stub_rx_loop usb prio:high 19 9 9d09h 5d09h
general protection fault in dummy_udc_start usb prio:low 10 syz, C error 2430 20m 5d09h PATCH [4d09h]
general protection fault in dummy_set_selfpowered usb prio:low 10 syz, C error 468 23m 5d09h
KASAN: slab-use-after-free Read in raw_process_ep0_io prio:normal usb 19 syz, C 9 1d13h 5d09h
general protection fault in f_midi2_free_ep_reqs usb prio:high 10 syz, C 262 1h17m 5d09h PATCH [4d03h]
general protection fault in dummy_queue usb prio:low 10 178 1h16m 5d09h
KASAN: global-out-of-bounds Read in usb_copy_descriptors usb prio:high 17 245 39m 5d09h PATCH [1d02h]
general protection fault in f_midi2_stop_eps usb prio:high 2 syz, C error 303 1h05m 5d09h PATCH [4d03h]
possible deadlock in uvcg_streaming_header_allow_link usb prio:low 4 syz, C error 206 53m 5d09h
general protection fault in uvcg_video_init usb prio:low 2 53 21m 5d10h PATCH [3d10h]
KASAN: invalid-free in dev_free (4) usb prio:normal 24 1 11d 7d07h
WARNING in cm109_input_ev/usb_submit_urb (2) input usb prio:low -1 syz 1 12d 8d03h
WARNING in __carl9170_tx_process_status wireless usb prio:high -1 syz, C 6 7d06h 29d PATCH [17d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm usb input 1 syz, C error error 1 36d 34d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 72 5d04h 34d PATCH [22d]
KMSAN: uninit-value in steam_register prio:high input usb 7 3 56d 54d PATCH [35d]
WARNING in igorplugusb_cmd/usb_submit_urb prio:low media usb -1 syz, C 1 68d 65d PATCH [46d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 20 13h25m 86d PATCH [35d]
KASAN: stack-out-of-bounds Write in carl9170_handle_command_response prio:high usb wireless 21 syz, C 105 6d18h 100d PATCH [20d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 36 13d 106d
KASAN: slab-use-after-free Read in hiddev_disconnect (4) actionable prio:high usb input 19 2 86d 123d PATCH [34d]
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error 91 21d 129d PATCH [61d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1156 3d13h 129d PATCH [61d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 9 98d 132d PATCH [63d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2543 4h35m 136d PATCH [136d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error 2364 25d 136d PATCH [90d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 13d 168d PATCH [32d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 130 13m 194d PATCH [65d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 syz, C error error 8 98d 203d 💬 10 [201d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 128d 209d 💬 1 [128d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 29 14d 223d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 19 15d 240d PATCH [78d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 232d 245d PATCH [224d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 24 7h54m 276d PATCH [24d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1049 21h40m 293d PATCH [35d]
general protection fault in count_matching_names (2) usb 2 syz 6 62d 296d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 25 58d 317d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 266 3d14h 345d PATCH [156d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 574 7m 346d PATCH [40d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 syz, C error 108 3h19m 356d
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 34 14h11m 383d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 154 19d 408d PATCH [10d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 472 1d13h 428d PATCH [79d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 152 1d17h 435d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 737 2d02h 437d PATCH [251d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 syz, C error 397 2d07h 456d PATCH [446d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 47d 457d PATCH [453d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 350 6h56m 465d PATCH [419d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 100d 468d PATCH [258d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 8d08h 490d PATCH [292d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 751 1h04m 496d PATCH [419d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 388d 521d
general protection fault in status_show prio:high usb 2 syz, C 16 41d 562d PATCH [410d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz error 31 4d19h 581d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 368d 656d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 23 315d 659d
KASAN: use-after-free Read in em28xx_close_extension (2) prio:high usb media 19 syz, C error 17 19d 682d PATCH [10d]
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 361 2d17h 688d PATCH [268d]
WARNING in enable_work prio:high usb -1 syz, C error 1825 15d 711d 💬 2 [29d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7283 25m 791d PATCH [94d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 102 15d 796d
INFO: rcu detected stall in schedule (7) usb 1 syz, C done error 72 20d 797d
WARNING in kernfs_get (5) prio:high usb kernfs -1 syz inconclusive 753 21d 816d 💬 3 [32d]
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error 255 1d21h 858d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 365 1d20h 863d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 1d01h 902d 💬 2 [828d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 24 5d17h 1049d 💬 1 [9d18h]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 440 9d15h 1077d 💬 1 [29d]
INFO: rcu detected stall in console_callback usb input serial 1 syz, C error error 18 196d 1079d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 130 5d09h 1089d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 673 3h07m 1149d 💬 4 [878d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 55d 1157d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1151 2d23h 1223d 💬 16 [92d]
INFO: task hung in hub_event (3) prio:high usb 1 963 1d07h 1296d 💬 12 [29d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 862 498d 1319d 💬 14 [625d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 198d 1336d 💬 5 [279d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 217 2d23h 1401d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 10d 1791d
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 109d 1994d PATCH [1784d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 3863 2d03h 2041d PATCH [1778d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3279 3d12h 2042d 💬 1 [92d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 syz, C 44 3d00h 2061d PATCH [2d03h]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-out-of-bounds Read in free_netdev usb prio:normal 17 1 5d23h 1d23h
BUG: spinlock bad magic in gadget_dev_open usb 4 3 6d17h 2d17h
general protection fault in dummy_wakeup usb prio:low 2 1 8d05h 3d23h
KCSAN: data-race in mon_reader_add / usb_hcd_submit_urb (3) usb race:benign prio:low 6 1 14d 14d
general protection fault in mon_text_release prio:normal usb 10 3 15d 114d