usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 462
Parent subsystem(s): kernel (122)
Child subsystems: usb-storage (5)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
INFO: task hung in usbdev_ioctl (8) prio:high usb 1 syz error 4 19h57m 11h40m
INFO: task hung in usbatm_usb_disconnect (2) prio:high usb 1 syz, C 18 1d08h 11h41m
WARNING in ttusb_start_feed/usb_submit_urb media usb prio:high -1 syz, C error 4 2d15h 3d10h PATCH [3d07h]
KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req mmc usb prio:high 22 syz 73 1h11m 4d02h PATCH [2d17h]
general protection fault in ucsi_acpi_probe (2) usb prio:low 2 syz, C error 37 4d09h 7d06h PATCH [14h25m]
WARNING in service_outstanding_interrupt/usb_submit_urb (2) usb prio:high -1 1 14d 10d
WARNING in v4l2_ctrl_auto_cluster media usb prio:high -1 syz, C 3 5d22h 13d PATCH [3d01h]
INFO: task hung in pn533_usb_probe nfc usb prio:high 1 syz, C error 4 2d13h 14d PATCH [11d]
KASAN: use-after-free Read in pn533_acr122_is_rx_frame_valid usb nfc prio:high 19 syz, C error 31 1d11h 16d PATCH [1d03h]
INFO: task hung in usb_register_dev (3) prio:high usb 1 syz, C error 18 2d13h 17d PATCH [14d]
WARNING: suspicious RCU usage in phy_detach net usb prio:high 4 syz 13 3d03h 18d PATCH [15h19m]
KASAN: slab-use-after-free Read in roccat_disconnect prio:high input usb 19 syz, C 18 9h35m 19d PATCH [18d]
INFO: task hung in em28xx_i2c_unregister prio:high i2c usb 1 syz 31 4d15h 21d 💬 1 [20d]
BUG: unable to handle kernel paging request in gs_close prio:low usb 8 6 21d 21d
KASAN: slab-use-after-free Write in keyspan_close usb prio:high 22 syz, C 1 8d17h 22d PATCH [11d]
WARNING in cx231xx_send_vendor_cmd/usb_submit_urb usb prio:low -1 syz, C error 6 13d 22d PATCH [13d]
memory leak in nci_send_cmd usb nfc net prio:high 3 syz, C 4 15d 22d PATCH [13d]
KASAN: slab-use-after-free Read in k90_record_led_work usb input prio:high actionable 19 5 5d18h 23d PATCH [10d]
possible deadlock in fifo_open (2) usb prio:low 4 1 27d 23d
KASAN: slab-use-after-free Read in atkbd_event_work prio:high actionable usb 19 syz, C 7 7d00h 24d 💬 2 [6d15h]
KASAN: slab-use-after-free Read in k90_backlight_work input usb prio:high 19 11 21d 24d PATCH [7d21h]
KASAN: slab-use-after-free Read in sd_stopN media usb prio:high 19 syz 1 12d 25d PATCH [13d]
KASAN: slab-out-of-bounds Write in gb_operation_message_alloc greybus usb prio:high 21 syz, C error 56 20h13m 25d PATCH [17d]
WARNING in drm_mode_config_validate usb dri prio:high -1 syz, C error 36 16d 25d 💬 1 [24d]
KASAN: slab-use-after-free Read in roccat_open input usb prio:high 19 syz, C 2 3d11h 25d 💬 2 [5d19h]
UBSAN: shift-out-of-bounds in __vcc_connect prio:high net usb -1 syz 2 30d 26d
KASAN: stack-out-of-bounds Write in append_midi1_out_jack usb prio:normal 21 C 6 12d 26d PATCH [20d]
INFO: task hung in usb_set_configuration prio:high usb input 1 syz 2 32d 28d PATCH [26d]
INFO: task hung in unbind_store prio:high usb 1 syz, C error 11 3d17h 29d 💬 7 [25d]
KASAN: slab-use-after-free Write in usb_giveback_urb_bh prio:high actionable usb 22 2 32d 30d PATCH [29d]
possible deadlock in lookup_open prio:low usb 4 89 6d00h 30d
KASAN: slab-out-of-bounds Read in aqc_raw_event prio:high input usb hwmon 17 syz, C 11 14h02m 31d PATCH [30d]
KASAN: slab-use-after-free Read in dummy_timer prio:normal usb 19 33 2d09h 31d
WARNING in vb2_video_unregister_device prio:low media usb -1 syz, C 2 5d08h 31d
INFO: trying to register non-static key in edge_bulk_in_callback prio:high usb -1 1 35d 31d
INFO: trying to register non-static key in u_audio_get_playback_srate prio:high usb -1 1 35d 31d PATCH [10d]
KASAN: slab-out-of-bounds Read in gether_get_ifname prio:normal usb 17 syz, C 21 19d 31d PATCH [9d03h]
possible deadlock in mdc800_device_open prio:high usb 4 syz, C error 226 7d11h 31d PATCH [13d]
KASAN: slab-use-after-free Read in __vb2_queue_cancel (2) prio:high usb media 19 syz, C 307 2h04m 32d PATCH [11d]
general protection fault in bus_remove_device prio:high usb 2 syz, C 7 9d23h 33d PATCH [32d]
memory leak in __usbhid_submit_report (2) prio:high input usb 3 syz, C 1 21d 33d PATCH [33d]
general protection fault in drm_object_attach_property usb dri prio:high 8 syz, C error 49 1d16h 35d PATCH [35d]
INFO: trying to register non-static key in gadget_dev_open prio:normal usb -1 1 40d 36d
general protection fault in adsl_state_store prio:low usb 2 C 12 1d15h 36d PATCH [now]
WARNING: ODEBUG bug in hid_device_remove prio:high input usb -1 syz, C error 51 9d15h 37d 💬 2 [21d]
WARNING: ODEBUG bug in corsair_remove prio:high input usb -1 syz, C done 660 7h43m 37d PATCH [10d]
KASAN: slab-use-after-free Read in attach_store prio:normal usb 19 C 2 38d 38d PATCH [18d]
memory leak in gadget_bind (2) prio:low usb 3 syz, C 1 27d 39d PATCH [31d]
possible deadlock in uvcg_extension_ba_source_id_show prio:low usb 4 6 44d 40d
BUG: spinlock bad magic in gadget_dev_open prio:normal usb 4 11 8d19h 40d
possible deadlock in uvcg_default_output_i_terminal_show prio:low usb 4 1 46d 41d
possible deadlock in uvcg_extension_b_num_controls_store prio:low usb 4 1 46d 42d
general protection fault in uvcg_video_enable prio:high usb 2 C 8 14d 42d PATCH [38d]
WARNING in ttusb_dec_start_feed prio:high media usb -1 syz, C 2 23d 43d
memory leak in hidg_bind prio:low usb 3 syz, C 2 29d 43d PATCH [31d]
WARNING: refcount bug in trace_suspend_resume (2) prio:normal usb 13 syz, C 5 21d 43d PATCH [41d]
WARNING in i2c_unregister_device prio:low usb -1 syz, C error 28 6h03m 43d
KASAN: slab-use-after-free Read in input_dev_uevent (2) prio:high usb input 19 syz, C error 20 5d22h 43d
KASAN: slab-out-of-bounds Read in hid_dump_input prio:high input usb 19 syz, C error error 22 39d 44d PATCH [10d]
memory leak in usb_copy_descriptors prio:low usb 3 syz, C 1 30d 45d PATCH [6d18h]
INFO: trying to register non-static key in usbg_make_tpg prio:low usb -1 4 33d 46d
WARNING in trace_suspend_resume/usb_submit_urb (2) prio:high nfc usb -1 3 48d 46d
INFO: trying to register non-static key in as102_stream_ctrl prio:high usb media -1 syz, C error 54 2d06h 47d PATCH [12d]
KASAN: slab-use-after-free Read in sur40_open prio:high usb input 19 syz, C error error 44 40d 47d PATCH [32d]
KASAN: slab-use-after-free Read in rc_dev_uevent prio:high usb media 19 syz, C error 186 1h06m 47d PATCH [46d]
WARNING in port100_send_cmd_async/usb_submit_urb (3) prio:high usb nfc -1 syz, C error 325 10d 47d
possible deadlock in mnt_want_write (9) prio:low usb 4 syz, C 75 11d 47d
memory leak in f_uac1_opts_c_srate_store prio:normal usb 3 syz, C 1 34d 48d PATCH [46d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 5 17d 49d PATCH [17d]
WARNING in as102_stream_ctrl prio:low usb media -1 syz, C 107 1d00h 49d
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) prio:high actionable usb 19 1 53d 49d PATCH [11d]
possible deadlock in tcm_alloc prio:low usb 4 syz, C error 397 19h05m 49d
possible deadlock in uvcg_extension_allow_link prio:low usb 4 syz, C 13 25d 49d
memory leak in f_uac2_opts_p_srate_store prio:normal usb 3 syz, C 1 36d 50d PATCH [46d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 6 24d 50d PATCH [48d]
KASAN: slab-use-after-free Read in uvcg_extension_drop prio:normal actionable usb 19 5 16d 51d PATCH [48d]
general protection fault in dummy_udc_stop prio:low usb 8 24 26d 51d
general protection fault in emi26_probe prio:low usb 17 syz, C error 17 27d 51d 💬 1 [19d]
WARNING in ttusb_dec_send_command prio:high usb media -1 syz, C 245 16h02m 52d PATCH [49d]
general protection fault in rebind_store prio:low usb 8 syz, C 59 8h20m 52d PATCH [21d]
KASAN: slab-use-after-free Write in pn_bind prio:normal usb 22 syz 51 now 52d PATCH [11d]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 58 9d12h 52d PATCH [47d]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 3 21d 52d PATCH [11d]
KASAN: slab-use-after-free Read in vhci_shutdown_connection prio:normal usb 19 syz, C 221 26d 52d PATCH [13d]
KASAN: slab-use-after-free Write in put_dev prio:normal usb 22 syz 5 16d 52d PATCH [49d]
KASAN: slab-use-after-free Write in gadgetfs_bind prio:normal usb 22 syz, C error 197 2d21h 52d PATCH [47d]
memory leak in uvcg_extension_ba_source_id_store prio:low usb 3 syz, C 1 53d 52d PATCH [48d]
WARNING in usb_ep_enable prio:high usb -1 syz, C done 1324 19m 52d PATCH [50d]
WARNING: locking bug in gadget_dev_open prio:normal usb 4 4 31d 52d
KASAN: slab-use-after-free Read in find_endpoint prio:normal usb 19 128 8h55m 52d
KASAN: slab-use-after-free Read in gadget_dev_open prio:normal usb 19 syz, C 184 4d13h 52d
KASAN: slab-use-after-free Read in ep_open prio:normal usb 19 syz, C done 170 30m 53d PATCH [52d]
WARNING in usbg_make_tpg prio:low usb -1 3 41d 53d
memory leak in f_uac2_opts_c_srate_store prio:low usb 3 syz, C 1 40d 53d PATCH [51d]
kernel BUG in register_netdevice prio:low usb -1 syz, C done 108 1d19h 54d 💬 2 [26d]
KASAN: invalid-free in f_uac2_opts_p_srate_store prio:normal usb 24 syz, C error 156 24d 54d PATCH [48d]
KASAN: invalid-free in f_uac2_opts_c_srate_store prio:normal usb 24 syz, C error 117 24d 54d PATCH [48d]
KASAN: slab-out-of-bounds Read in dummy_free_request prio:normal usb 17 162 25d 55d
general protection fault in start_dirop prio:low usb fs 2 syz, C 20 23d 55d PATCH [51d]
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 15 4d17h 55d
possible deadlock in uvc_func_allow_link prio:low usb fs 4 17 24d 55d
KASAN: slab-use-after-free Read in stub_rx_loop prio:high usb 19 C 10 12d 55d PATCH [26d]
general protection fault in dummy_udc_start prio:low usb 10 syz, C error 12268 11d 55d PATCH [54d]
general protection fault in dummy_set_selfpowered prio:low usb 10 syz, C error 1486 11d 55d
general protection fault in f_midi2_free_ep_reqs prio:high usb 10 syz, C 935 14d 55d PATCH [54d]
general protection fault in dummy_queue prio:low usb 19 643 8d01h 55d
KASAN: global-out-of-bounds Read in usb_copy_descriptors prio:high usb 17 523 1d20h 55d PATCH [51d]
KASAN: invalid-free in dev_free (4) prio:normal usb 24 1 61d 57d
WARNING in cm109_input_ev/usb_submit_urb (2) prio:low usb input -1 syz 1 62d 58d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C 3697 13m 69d 💬 3 [17d]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 29d 79d PATCH [68d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm input usb 1 syz, C error error 1 86d 84d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 76 43d 84d PATCH [72d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 25 6d18h 137d PATCH [86d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 40 3d10h 156d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 104 1d18h 179d PATCH [111d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1281 9m 179d PATCH [111d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 30 1d20h 182d PATCH [114d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2713 27d 186d PATCH [186d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error error 2364 75d 186d PATCH [140d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 63d 218d PATCH [82d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 364 12d 244d PATCH [115d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb i2c 1 syz, C error error 12 11h52m 253d 💬 10 [251d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 178d 259d 💬 1 [178d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 33 24d 274d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error error 19 34d 291d PATCH [128d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 282d 295d PATCH [274d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 36 2d13h 326d PATCH [74d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1350 49m 343d PATCH [85d]
general protection fault in count_matching_names (2) usb 2 syz 6 112d 346d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 29 18d 367d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 272 15d 396d PATCH [206d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 599 1d09h 397d PATCH [91d]
INFO: task hung in dvb_usbv2_exit prio:low i2c usb 1 syz, C error 111 18d 407d
INFO: task hung in console_callback (6) prio:high usb input 1 syz, C error error 57 27d 433d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 160 14h57m 459d PATCH [60d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 527 2d07h 478d PATCH [130d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz 197 3d08h 485d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 847 1d15h 487d PATCH [301d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 97d 507d PATCH [504d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 445 36m 515d PATCH [469d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 2d15h 519d PATCH [308d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 20d 540d PATCH [342d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 789 12h23m 546d PATCH [469d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 438d 571d
general protection fault in status_show prio:high usb 2 syz, C 16 91d 612d PATCH [460d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz, C error 3349 19h41m 631d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 418d 706d
INFO: rcu detected stall in do_syscall_64 prio:high usb input 1 syz 25 26d 709d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 385 1h44m 738d PATCH [318d]
WARNING in enable_work prio:high usb media -1 syz, C error 1834 8d07h 761d 💬 2 [17d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7549 13h34m 842d PATCH [16d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 104 33d 846d
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error error 270 33d 908d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 377 5d06h 913d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 29d 952d 💬 2 [878d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 26 31d 1099d 💬 1 [28d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 447 16h26m 1127d 💬 1 [48d]
INFO: rcu detected stall in console_callback usb input serial 1 syz, C error error 18 246d 1129d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 136 13d 1139d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 780 5h56m 1199d 💬 4 [928d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 27d 1207d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1174 22h58m 1273d 💬 16 [142d]
INFO: task hung in hub_event (3) prio:high usb 1 C 1051 4h37m 1346d 💬 12 [17d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 863 28d 1369d 💬 14 [675d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 248d 1386d 💬 5 [329d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 237 4d09h 1451d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 12d 1841d PATCH [49d]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 159d 2044d PATCH [1834d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 4035 16h12m 2091d PATCH [1828d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3428 5h18m 2092d 💬 1 [142d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in usb_ep_alloc_request usb prio:low 2 2 9d03h 5d12h
BUG: soft lockup in dummy_timer (2) usb prio:normal 1 1 12d 8d21h
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] (2) usb prio:high -1 1 20d 16d
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add (2) usb race:benign prio:low 6 1 18d 18d
KASAN: stack-out-of-bounds Write in f_midi2_create_usb_configs prio:normal usb 21 3 35d 31d
KCSAN: data-race in kick_pool_pick / wq_worker_running race:benign prio:low usb 6 45 3h15m 32d
general protection fault in usbg_submit_command prio:high usb 2 1 48d 43d
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small prio:high usb 10 4 50d 47d
KCSAN: data-race in event_handler / usbip_stop_eh prio:high race:benign usb 6 1 47d 47d
BUG: unable to handle kernel paging request in dummy_enable prio:low usb 8 3 46d 48d
KASAN: slab-out-of-bounds Read in free_netdev prio:normal usb 19 2 44d 52d
general protection fault in dummy_wakeup prio:low usb 2 2 40d 54d
general protection fault in mon_text_release prio:normal usb 10 3 65d 164d