usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 435
Parent subsystem(s): kernel (96)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING in __fsg_is_set usb prio:low -1 1 4d00h 27m
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) usb prio:high actionable 19 1 4d11h 41m
possible deadlock in tcm_alloc usb prio:low 4 4 4d14h 14h33m
general protection fault in usb_put_function_instance usb prio:low 2 11 4d05h 15h29m
possible deadlock in uvcg_extension_allow_link usb prio:low 4 syz, C 8 4d08h 15h39m
memory leak in f_uac2_opts_p_srate_store usb prio:normal 3 syz, C 1 5d05h 1d05h
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 4 2d11h 1d21h PATCH [1d08h]
KASAN: slab-use-after-free Read in uvcg_extension_drop usb prio:normal actionable 19 3 4d14h 2d00h
general protection fault in dummy_udc_stop usb prio:low 8 6 59m 2d01h
general protection fault in emi26_probe prio:low usb 2 syz, C error 14 22h11m 2d01h
WARNING in ttusb_dec_send_command media usb prio:high -1 syz, C 17 11h50m 3d00h PATCH [8h00m]
general protection fault in mon_notify usb prio:high 2 syz, C 4 6d14h 3d00h PATCH [2d15h]
UBSAN: array-index-out-of-bounds in uea_bind usb prio:high 15 syz, C 82 2d19h 3d00h PATCH [1d18h]
general protection fault in rebind_store usb prio:low 2 13 13h57m 3d00h
KASAN: slab-use-after-free Read in vhci_cleanup_unlink_list usb prio:normal 19 syz 136 4h24m 3d00h PATCH [10h15m]
KASAN: slab-use-after-free Write in pn_bind usb prio:normal 22 12 1d13h 3d01h
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 51 7h45m 3d01h
BUG: using smp_processor_id() in preemptible code in tx_complete net usb prio:high 4 1 4d14h 3d01h
WARNING in f_midi_free usb prio:low -1 2 1d05h 3d01h
KASAN: slab-use-after-free Read in vhci_shutdown_connection usb prio:normal 19 syz 106 3h09m 3d01h
KASAN: slab-use-after-free Write in put_dev usb prio:normal 22 syz 1 4d07h 3d01h PATCH [11h15m]
KASAN: slab-use-after-free Write in gadgetfs_bind usb prio:normal 22 syz 2 4d05h 3d08h
KASAN: slab-use-after-free Read in cxacru_poll_status usb prio:high 19 syz 17 1d16h 3d08h PATCH [15h04m]
memory leak in uvcg_extension_ba_source_id_store usb prio:low 3 syz, C 1 4d07h 3d08h PATCH [1d18h]
possible deadlock in digi_set_modem_signals usb prio:high 4 syz, C error 5 4d07h 3d08h PATCH [2d12h]
WARNING in cxacru_cm/usb_submit_urb (3) usb prio:high -1 syz, C 31 13h41m 3d08h PATCH [3d15h]
WARNING in usb_ep_enable usb prio:high -1 syz, C done 106 3h23m 3d08h PATCH [1d07h]
WARNING: locking bug in gadget_dev_open usb 4 1 7d18h 3d18h
KASAN: slab-use-after-free Read in find_endpoint usb prio:normal 19 14 3d00h 3d18h
KASAN: slab-use-after-free Read in gadget_dev_open usb prio:normal 19 syz, C 7 3d02h 3d19h
KASAN: slab-use-after-free Read in ep_open usb prio:normal 19 syz, C 19 4h34m 3d23h PATCH [3d02h]
WARNING in usbg_make_tpg usb prio:low -1 2 4d11h 4d01h
memory leak in f_uac2_opts_c_srate_store usb prio:low 3 syz, C 1 8d08h 4d01h PATCH [1d21h]
memory leak in try_get_usb_function_instance usb prio:low 3 syz, C 1 8d13h 4d12h PATCH [18h04m]
kernel BUG in register_netdevice usb prio:low -1 7 6h00m 5d01h
KASAN: invalid-free in f_uac2_opts_p_srate_store usb prio:normal 24 syz, C error 49 5h01m 5d01h PATCH [5d09h]
KASAN: invalid-free in f_uac2_opts_c_srate_store usb prio:normal 24 syz, C 26 4h26m 5d19h PATCH [5d14h]
KASAN: slab-out-of-bounds Read in dummy_free_request usb prio:normal 17 99 5h54m 6d01h
general protection fault in usbtest_probe usb prio:low 8 syz, C 16 1d22h 6d01h PATCH [10h06m]
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C 6 1d06h 6d01h
possible deadlock in uvc_func_allow_link usb prio:low 4 5 9d22h 6d01h
KASAN: slab-use-after-free Read in lockref_get (2) fs usb prio:high 19 syz, C error 5 1d01h 6d01h
KASAN: slab-use-after-free Read in stub_rx_loop usb prio:high 19 9 10d 6d10h
general protection fault in dummy_udc_start usb prio:low 10 syz, C error 2691 now 6d11h PATCH [5d11h]
general protection fault in dummy_set_selfpowered usb prio:low 10 syz, C error 493 42m 6d11h
KASAN: slab-use-after-free Read in raw_process_ep0_io prio:normal usb 19 syz, C 9 2d14h 6d11h
general protection fault in f_midi2_free_ep_reqs usb prio:high 10 syz, C 267 5h05m 6d11h PATCH [5d05h]
general protection fault in dummy_queue usb prio:low 10 190 4h49m 6d11h
KASAN: global-out-of-bounds Read in usb_copy_descriptors usb prio:high 17 267 1h34m 6d11h PATCH [2d04h]
general protection fault in f_midi2_stop_eps usb prio:high 2 syz, C error 311 1h37m 6d11h PATCH [5d05h]
possible deadlock in uvcg_streaming_header_allow_link usb prio:low 4 syz, C error 227 1h50m 6d11h
general protection fault in uvcg_video_init usb prio:low 2 60 2h08m 6d11h PATCH [19h32m]
KASAN: invalid-free in dev_free (4) usb prio:normal 24 1 12d 8d09h
WARNING in cm109_input_ev/usb_submit_urb (2) input usb prio:low -1 syz 1 13d 9d05h
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 8d07h 30d PATCH [18d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm usb input 1 syz, C error error 1 37d 35d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 73 12h56m 35d PATCH [23d]
KMSAN: uninit-value in steam_register prio:high input usb 7 3 57d 55d PATCH [15m]
WARNING in igorplugusb_cmd/usb_submit_urb prio:low media usb -1 syz, C 1 69d 66d PATCH [47d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 20 1d15h 88d PATCH [37d]
KASAN: stack-out-of-bounds Write in carl9170_handle_command_response prio:high usb wireless 21 syz, C 105 7d20h 102d PATCH [21d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 36 14d 107d
KASAN: slab-use-after-free Read in hiddev_disconnect (4) actionable prio:high usb input 19 2 87d 124d PATCH [35d]
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error 91 22d 130d PATCH [62d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1156 4d15h 130d PATCH [62d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 9 99d 133d PATCH [64d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2565 45m 137d PATCH [137d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error 2364 26d 137d PATCH [91d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 14d 169d PATCH [33d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 153 26m 195d PATCH [66d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 syz, C error error 8 100d 204d 💬 10 [202d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 129d 210d 💬 1 [129d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 29 16d 224d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 19 16d 242d PATCH [79d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 233d 246d PATCH [225d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 24 1d09h 277d PATCH [25d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1058 1h12m 294d PATCH [36d]
general protection fault in count_matching_names (2) usb 2 syz 6 63d 297d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 25 59d 318d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 266 4d16h 347d PATCH [157d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 575 18h02m 347d PATCH [42d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 syz, C error 108 1d05h 357d
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 34 1d16h 384d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 154 20d 409d PATCH [11d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 472 2d15h 429d PATCH [81d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 154 8h57m 436d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 738 15h13m 438d PATCH [252d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 syz, C error 399 4h37m 457d PATCH [447d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 48d 458d PATCH [455d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 352 4h25m 466d PATCH [420d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 19h02m 469d PATCH [259d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 9d10h 491d PATCH [293d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 751 1d02h 497d PATCH [420d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 389d 522d
general protection fault in status_show prio:high usb 2 syz, C 16 42d 563d PATCH [411d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz error 31 5d21h 582d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 369d 657d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 23 316d 660d
KASAN: use-after-free Read in em28xx_close_extension (2) prio:high usb media 19 syz, C error 17 16h14m 683d PATCH [11d]
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 362 2h59m 689d PATCH [269d]
WARNING in enable_work prio:high usb -1 syz, C error 1825 17d 712d 💬 2 [30d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7284 7h54m 792d PATCH [95d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 102 16d 797d
INFO: rcu detected stall in schedule (7) usb 1 syz, C done error 72 21d 798d
WARNING in kernfs_get (5) prio:high usb kernfs -1 syz inconclusive 753 22d 817d 💬 3 [33d]
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error 255 2d23h 859d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 365 2d22h 864d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 2d03h 903d 💬 2 [829d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 24 6d19h 1050d 💬 1 [10d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 440 10d 1078d 💬 1 [30d]
INFO: rcu detected stall in console_callback usb input serial 1 syz, C error error 18 197d 1080d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 130 6d11h 1090d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 675 8h56m 1150d 💬 4 [879d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 56d 1158d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1151 4d01h 1224d 💬 16 [93d]
INFO: task hung in hub_event (3) prio:high usb 1 963 2d09h 1297d 💬 12 [30d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 862 499d 1320d 💬 14 [626d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 199d 1337d 💬 5 [280d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 217 4d01h 1402d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 11d 1792d PATCH [14h41m]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 110d 1995d PATCH [1785d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 3863 3d05h 2042d PATCH [1779d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3279 4d14h 2043d 💬 1 [93d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 syz, C 44 4d02h 2062d PATCH [3d05h]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Write in gadgetfs_kill_sb usb prio:normal 22 1 4d15h 14h56m
general protection fault in adsl_state_store usb prio:low 2 2 4d15h 15h29m
KASAN: slab-out-of-bounds Read in free_netdev usb prio:normal 17 1 7d01h 3d00h
BUG: spinlock bad magic in gadget_dev_open usb 4 3 7d18h 3d19h
general protection fault in dummy_wakeup usb prio:low 2 1 9d07h 5d01h
KCSAN: data-race in mon_reader_add / usb_hcd_submit_urb (3) usb race:benign prio:low 6 1 15d 15d
general protection fault in mon_text_release prio:normal usb 10 3 16d 115d