usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 492
Parent subsystem(s): kernel (87)
Child subsystems: usb-storage (5)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
memory leak in ndisc_send_rs (4) net usb prio:high 3 syz 1 1d11h 11h51m
KASAN: slab-out-of-bounds Read in gb_operation_work prio:high greybus usb 17 syz, C 5 5d21h 1d23h PATCH [42m]
general protection fault in mct_u232_open prio:high usb 2 syz, C error 5 1d05h 7d22h PATCH [7d21h]
KASAN: slab-out-of-bounds Read in gb_svc_request_handler prio:high greybus usb 17 syz, C 2 9d15h 8d18h PATCH [4d15h]
KASAN: slab-use-after-free Read in dev_dbg_obj media usb prio:high 19 syz 1 12d 12d PATCH [17h46m]
WARNING in corrupted (4) mm usb -1 syz 1 19d 17d 💬 3 [2d23h]
WARNING: ODEBUG bug in gb_operation_put prio:high usb greybus -1 syz, C 157 3h02m 24d PATCH [22d]
WARNING in ec168_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C 5 14h45m 26d PATCH [17d]
WARNING: ODEBUG bug in gb_operation_sync_timeout prio:high usb greybus -1 syz, C error 43 4d00h 28d PATCH [22d]
general protection fault in saitek_event prio:high input usb 2 syz, C error 28 14d 29d PATCH [29d]
INFO: task hung in usb_device_read prio:normal usb 1 syz, C error 22 5d17h 33d PATCH [23d]
KASAN: slab-use-after-free Read in printer_func_unbind prio:normal actionable usb 19 2 39d 36d PATCH [20d]
KASAN: slab-use-after-free Write in ffs_data_clear prio:normal actionable usb 22 1 43d 39d PATCH [33d]
WARNING in smsusb_term_device (2) prio:high media usb -1 syz, C error error 1 40d 40d PATCH [37d]
KASAN: slab-use-after-free Write in usb_giveback_urb_bh (2) prio:high actionable usb 22 1 50d 46d PATCH [14d]
INFO: task hung in usb_deregister_dev (4) prio:high usb 1 60 21h05m 48d
general protection fault in mxl111sf_ep6_streaming_ctrl prio:high usb media 2 syz, C error 5 (+2) 12d 48d PATCH [40d]
INFO: task hung in usbdev_ioctl (8) prio:high usb 1 syz, C error 9 1d05h 53d PATCH [51d]
WARNING in ttusb_start_feed/usb_submit_urb prio:high usb media -1 syz, C error 35 2d17h 56d PATCH [56d]
KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req prio:high usb mmc 22 syz, C error 675 20d 57d PATCH [44d]
general protection fault in ucsi_acpi_probe (2) prio:low usb 2 syz, C error 50 8d23h 60d PATCH [53d]
WARNING in service_outstanding_interrupt/usb_submit_urb (2) prio:high usb -1 1 67d 63d
INFO: task hung in pn533_usb_probe prio:high usb nfc 1 syz, C error 7 11d 67d PATCH [64d]
INFO: task hung in usb_register_dev (3) prio:high usb 1 syz, C error 40 13d 70d PATCH [67d]
WARNING: suspicious RCU usage in phy_detach prio:high usb net 4 syz 41 17d 71d PATCH [42d]
memory leak in nci_send_cmd prio:high usb 3 syz, C 6 12d 75d PATCH [50d]
KASAN: slab-use-after-free Read in k90_record_led_work prio:high actionable input usb 19 6 51d 76d PATCH [63d]
possible deadlock in fifo_open (2) prio:low usb 4 2 35d 76d
KASAN: slab-use-after-free Read in atkbd_event_work prio:high actionable usb 19 syz, C error 8 11d 77d 💬 2 [59d]
KASAN: slab-use-after-free Read in k90_backlight_work prio:high input usb 19 12 27d 77d PATCH [60d]
KASAN: slab-use-after-free Read in sd_stopN prio:high usb media 19 syz 1 66d 78d PATCH [66d]
KASAN: slab-out-of-bounds Write in gb_operation_message_alloc prio:high usb greybus 21 syz, C error 283 1h06m 78d PATCH [70d]
WARNING in drm_mode_config_validate prio:high usb dri -1 syz, C error error 36 69d 78d 💬 1 [77d]
UBSAN: shift-out-of-bounds in __vcc_connect prio:high atm usb -1 syz error error 2 83d 79d PATCH [44d]
INFO: task hung in unbind_store prio:high usb driver-core 1 syz, C error 11 26d 82d 💬 7 [18d]
possible deadlock in lookup_open prio:low usb 4 syz, C 142 20h59m 83d
KASAN: slab-out-of-bounds Read in aqc_raw_event prio:high input usb hwmon 17 syz, C error error 12 37d 84d PATCH [83d]
KASAN: slab-use-after-free Read in dummy_timer prio:normal usb 19 43 3d04h 84d
INFO: trying to register non-static key in u_audio_get_playback_srate prio:high usb -1 1 88d 84d PATCH [26d]
KASAN: slab-out-of-bounds Read in gether_get_ifname prio:normal usb 17 syz, C 21 73d 84d PATCH [62d]
possible deadlock in mdc800_device_open prio:high usb 4 syz, C error 355 2h58m 84d PATCH [66d]
memory leak in __usbhid_submit_report (2) prio:high input usb 3 syz, C 3 5d08h 86d PATCH [86d]
general protection fault in drm_object_attach_property prio:high usb dri 8 syz, C error 68 8d10h 89d PATCH [88d]
INFO: trying to register non-static key in gadget_dev_open prio:normal usb -1 2 13d 89d
general protection fault in adsl_state_store prio:low usb atm 2 C 20 43d 89d PATCH [49d]
WARNING: ODEBUG bug in hid_device_remove prio:high input usb -1 syz, C error 56 3d21h 90d PATCH [7d11h]
WARNING: ODEBUG bug in corsair_remove prio:high input usb -1 syz, C done 1012 1h44m 90d PATCH [63d]
KASAN: slab-use-after-free Read in attach_store prio:normal usb 19 C 2 7d14h 91d PATCH [51d]
memory leak in gadget_bind (2) prio:low usb 3 syz, C 1 80d 92d PATCH [44d]
possible deadlock in uvcg_extension_ba_source_id_show prio:low usb 4 9 4h28m 93d
BUG: spinlock bad magic in gadget_dev_open prio:normal usb 4 15 4d18h 93d
possible deadlock in uvcg_default_output_i_terminal_show prio:low usb 4 1 99d 94d
possible deadlock in uvcg_extension_b_num_controls_store prio:low usb 4 1 99d 95d
general protection fault in uvcg_video_enable prio:high usb 2 C 8 67d 95d PATCH [91d]
WARNING in ttusb_dec_start_feed prio:high media usb -1 syz, C 2 76d 96d PATCH [11d]
memory leak in hidg_bind prio:low usb 3 syz, C 2 9d12h 96d PATCH [84d]
memory leak in usb_copy_descriptors prio:low usb 3 syz, C 1 11d 98d PATCH [59d]
INFO: trying to register non-static key in usbg_make_tpg prio:low usb -1 4 86d 99d
INFO: trying to register non-static key in as102_stream_ctrl prio:high usb media -1 syz, C error 173 1h31m 100d PATCH [65d]
KASAN: slab-use-after-free Read in sur40_open prio:high usb input 19 syz, C error error 44 93d 100d PATCH [26d]
KASAN: slab-use-after-free Read in rc_dev_uevent prio:high usb media 19 syz, C error 198 16d 100d PATCH [99d]
WARNING in port100_send_cmd_async/usb_submit_urb (3) prio:high usb nfc -1 syz, C error 347 15d 100d PATCH [48d]
possible deadlock in mnt_want_write (9) prio:low fs usb 4 syz, C unreliable 218 2d02h 100d
memory leak in f_uac1_opts_c_srate_store prio:normal usb 3 syz, C 1 87d 101d PATCH [99d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C error 5 70d 102d PATCH [26d]
WARNING in as102_stream_ctrl prio:low usb media -1 syz, C error 380 2h52m 102d PATCH [51d]
possible deadlock in tcm_alloc prio:low usb 4 syz, C error 551 2d10h 102d PATCH [22d]
memory leak in f_uac2_opts_p_srate_store prio:normal usb 3 syz, C 1 89d 103d PATCH [99d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 6 77d 104d PATCH [101d]
KASAN: slab-use-after-free Read in uvcg_extension_drop prio:normal actionable usb 19 C 9 6d10h 104d PATCH [101d]
general protection fault in emi26_probe prio:low usb 17 syz, C error error 35 4d17h 104d PATCH [36d]
WARNING in ttusb_dec_send_command prio:high usb media -1 syz, C 520 1h53m 105d PATCH [102d]
general protection fault in rebind_store prio:low usb 8 syz, C 66 4d17h 105d PATCH [48d]
KASAN: slab-use-after-free Write in pn_bind prio:normal usb 22 syz, C done 59 19d 105d PATCH [30d]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error error 70 7d04h 105d PATCH [100d]
KASAN: slab-use-after-free Read in vhci_shutdown_connection prio:normal usb 19 syz, C error error 221 79d 105d PATCH [66d]
KASAN: slab-use-after-free Write in put_dev prio:normal usb 22 syz 9 12d 105d PATCH [102d]
KASAN: slab-use-after-free Write in gadgetfs_bind prio:normal usb 22 syz, C error 209 22d 105d PATCH [100d]
memory leak in uvcg_extension_ba_source_id_store prio:low usb 3 syz, C 1 18d 105d PATCH [101d]
WARNING in usb_ep_enable prio:high usb -1 syz, C done 4027 34m 105d PATCH [103d]
WARNING: locking bug in gadget_dev_open prio:normal usb 4 4 84d 105d
KASAN: slab-use-after-free Read in find_endpoint prio:normal usb 19 184 3d07h 105d
KASAN: slab-use-after-free Read in gadget_dev_open prio:normal usb 19 syz, C unreliable 274 11d 105d PATCH [26d]
KASAN: slab-use-after-free Read in ep_open prio:normal usb 19 syz, C done 289 7h04m 106d PATCH [105d]
WARNING in usbg_make_tpg prio:low usb -1 3 95d 106d
memory leak in f_uac2_opts_c_srate_store prio:low usb 3 syz, C 1 93d 106d PATCH [104d]
kernel BUG in register_netdevice prio:low usb -1 syz, C done 210 4d11h 107d PATCH [30d]
KASAN: invalid-free in f_uac2_opts_p_srate_store prio:normal usb 24 syz, C error done 156 77d 107d PATCH [101d]
KASAN: invalid-free in f_uac2_opts_c_srate_store prio:normal usb 24 syz, C error done 117 77d 108d PATCH [101d]
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 17 6d00h 108d PATCH [3d06h]
possible deadlock in uvc_func_allow_link prio:low usb fs 4 C 19 10d 108d
KASAN: slab-use-after-free Read in stub_rx_loop prio:high usb 19 C 10 65d 108d PATCH [51d]
general protection fault in dummy_set_selfpowered prio:low usb 10 syz, C error 1486 22d 108d
general protection fault in f_midi2_free_ep_reqs prio:high usb 10 syz, C 935 67d 108d PATCH [107d]
general protection fault in dummy_queue prio:low usb 19 643 61d 108d
possible deadlock in configfs_depend_item_unlocked prio:low usb fs 4 syz, C error 6965 1h04m 108d
KASAN: global-out-of-bounds Read in usb_copy_descriptors prio:high usb 17 syz, C error 641 5d00h 108d PATCH [35d]
KASAN: invalid-free in dev_free (4) prio:normal usb 24 2 25d 110d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C done 3885 16d 122d 💬 3 [5d11h]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 40d 132d PATCH [121d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 29 12d 190d PATCH [139d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 42 33d 209d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 162 1d13h 233d PATCH [164d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 2772 2h01m 233d PATCH [164d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 35 4d15h 235d PATCH [167d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error error 2715 6d16h 239d PATCH [14h49m]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error error 2364 128d 239d PATCH [193d]
memory leak in dvb_register_device prio:high usb media 3 syz, C 5 3d04h 271d PATCH [135d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error error 364 48d 297d PATCH [168d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb i2c 1 syz, C error error 12 3d06h 306d 💬 10 [304d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 37 15d 327d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error error 22 4d08h 344d PATCH [181d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 335d 348d PATCH [327d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 49 4d12h 379d PATCH [34d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1516 20d 397d PATCH [138d]
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 29 21d 420d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 286 10d 449d PATCH [259d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 605 6d13h 450d PATCH [144d]
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 57 80d 486d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 180 3h49m 512d PATCH [113d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 578 14h13m 531d PATCH [183d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz, C error 283 13m 538d PATCH [34d]
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 885 1d11h 540d PATCH [354d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 150d 560d PATCH [557d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 560 2d20h 568d PATCH [522d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 55d 572d PATCH [361d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 1d12h 593d PATCH [395d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 902 6h15m 599d PATCH [522d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 491d 625d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 471d 759d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 25 79d 762d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 808 11h50m 791d PATCH [17h20m]
WARNING in enable_work prio:high usb media -1 syz, C error error 1840 40d 814d 💬 2 [39d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7726 1d06h 895d PATCH [69d]
INFO: task hung in kernfs_add_one usb kernfs prio:high 1 syz, C error done 105 18d 899d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 384 3d09h 966d PATCH [11d]
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable error 127 83d 1005d 💬 2 [931d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 28 23d 1152d PATCH [45d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 452 12d 1180d 💬 1 [8d01h]
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 140 18h32m 1192d PATCH [24d]
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 305 (+577) 3d16h 1252d 💬 4 [981d]
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1213 8h59m 1326d PATCH [24d]
INFO: task hung in hub_event (3) prio:high usb 1 C 1102 13m 1399d PATCH [24d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 863 81d 1422d 💬 14 [728d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 301d 1439d 💬 5 [382d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 257 3d15h 1504d PATCH [11d]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 212d 2097d PATCH [1887d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 4144 3h53m 2145d PATCH [1881d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3574 1d06h 2145d 💬 1 [195d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb (6) race:benign prio:low usb 6 1 47d 47d
general protection fault in usb_ep_alloc_request prio:low usb 2 2 62d 58d PATCH [2d23h]
BUG: soft lockup in dummy_timer (2) prio:normal usb 1 2 6d05h 61d
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] (2) prio:high usb -1 1 73d 69d
KASAN: stack-out-of-bounds Write in f_midi2_create_usb_configs prio:normal usb 21 3 88d 84d