usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 462
Parent subsystem(s): kernel (122)
Child subsystems: usb-storage (5)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING in ttusb_start_feed/usb_submit_urb media usb prio:high -1 syz, C error 4 2d02h 2d21h PATCH [2d18h]
KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req mmc usb prio:high 22 syz 65 now 3d13h PATCH [2d04h]
general protection fault in ucsi_acpi_probe (2) usb prio:low 2 syz, C error 37 3d20h 6d17h PATCH [1h27m]
WARNING in service_outstanding_interrupt/usb_submit_urb (2) usb prio:high -1 1 13d 9d18h
WARNING in v4l2_ctrl_auto_cluster media usb prio:high -1 syz, C 3 5d09h 12d PATCH [2d12h]
INFO: task hung in pn533_usb_probe nfc usb prio:high 1 syz, C error 4 2d00h 13d PATCH [10d]
KASAN: use-after-free Read in pn533_acr122_is_rx_frame_valid usb nfc prio:high 19 syz, C error 31 22h48m 16d PATCH [14h14m]
INFO: task hung in usb_register_dev (3) prio:high usb 1 syz, C error 18 2d00h 17d PATCH [14d]
WARNING: suspicious RCU usage in phy_detach net usb prio:high 4 syz 13 2d14h 17d PATCH [2h21m]
KASAN: slab-use-after-free Read in roccat_disconnect prio:high input usb 19 syz, C 17 12h30m 18d PATCH [18d]
INFO: task hung in em28xx_i2c_unregister prio:high i2c usb 1 syz 31 4d02h 20d 💬 1 [20d]
BUG: unable to handle kernel paging request in gs_close prio:low usb 8 6 21d 21d
KASAN: slab-use-after-free Write in keyspan_close usb prio:high 22 syz, C 1 8d04h 21d PATCH [11d]
WARNING in cx231xx_send_vendor_cmd/usb_submit_urb usb prio:low -1 syz, C error 6 12d 21d PATCH [13d]
memory leak in nci_send_cmd usb nfc net prio:high 3 syz, C 4 14d 22d PATCH [12d]
KASAN: slab-use-after-free Read in k90_record_led_work usb input prio:high actionable 19 5 5d05h 22d PATCH [9d22h]
possible deadlock in fifo_open (2) usb prio:low 4 1 26d 22d
KASAN: slab-use-after-free Read in atkbd_event_work prio:high actionable usb 19 syz, C 7 6d11h 23d 💬 2 [6d02h]
KASAN: slab-use-after-free Read in k90_backlight_work input usb prio:high 19 11 21d 23d PATCH [7d08h]
KASAN: slab-use-after-free Read in sd_stopN media usb prio:high 19 syz 1 12d 24d PATCH [13d]
KASAN: slab-out-of-bounds Write in gb_operation_message_alloc greybus usb prio:high 21 syz, C error 56 7h15m 24d PATCH [17d]
WARNING in drm_mode_config_validate usb dri prio:high -1 syz, C error 36 15d 24d 💬 1 [24d]
KASAN: slab-use-after-free Read in roccat_open input usb prio:high 19 syz, C 2 2d22h 25d 💬 2 [5d06h]
UBSAN: shift-out-of-bounds in __vcc_connect net usb prio:high -1 syz 2 29d 26d
KASAN: stack-out-of-bounds Write in append_midi1_out_jack usb prio:normal 21 C 6 11d 26d PATCH [19d]
INFO: task hung in usb_set_configuration prio:high usb input 1 syz 2 32d 28d PATCH [26d]
INFO: task hung in unbind_store prio:high usb 1 syz, C error 11 3d04h 29d 💬 7 [25d]
KASAN: slab-use-after-free Write in usb_giveback_urb_bh prio:high actionable usb 22 2 32d 29d PATCH [28d]
possible deadlock in lookup_open prio:low usb 4 89 5d11h 30d
KASAN: slab-out-of-bounds Read in aqc_raw_event prio:high input usb hwmon 17 syz, C 11 1h04m 30d PATCH [30d]
KASAN: slab-use-after-free Read in dummy_timer prio:normal usb 19 33 1d20h 30d
WARNING in vb2_video_unregister_device prio:low media usb -1 syz, C 2 4d19h 30d
INFO: trying to register non-static key in edge_bulk_in_callback prio:high usb -1 1 35d 31d
INFO: trying to register non-static key in u_audio_get_playback_srate prio:high usb -1 1 35d 31d PATCH [9d13h]
KASAN: slab-out-of-bounds Read in gether_get_ifname prio:normal usb 17 syz, C 21 19d 31d PATCH [8d14h]
possible deadlock in mdc800_device_open prio:high usb 4 syz, C error 226 6d22h 31d PATCH [12d]
KASAN: slab-use-after-free Read in __vb2_queue_cancel (2) prio:high usb media 19 syz, C 300 4h59m 31d PATCH [10d]
general protection fault in bus_remove_device prio:high usb 2 syz, C 7 9d10h 32d PATCH [31d]
memory leak in __usbhid_submit_report (2) prio:high input usb 3 syz, C 1 21d 33d PATCH [33d]
general protection fault in drm_object_attach_property usb dri prio:high 8 syz, C error 49 1d03h 35d PATCH [34d]
INFO: trying to register non-static key in gadget_dev_open prio:normal usb -1 1 39d 35d
general protection fault in adsl_state_store prio:low usb 2 C 12 1d02h 35d PATCH [11d]
WARNING: ODEBUG bug in hid_device_remove prio:high input usb -1 syz, C error 51 9d02h 37d 💬 2 [21d]
WARNING: ODEBUG bug in corsair_remove prio:high input usb -1 syz, C done 656 9h16m 37d PATCH [9d22h]
KASAN: slab-use-after-free Read in attach_store prio:normal usb 19 C 2 38d 38d PATCH [18d]
memory leak in gadget_bind (2) prio:low usb 3 syz, C 1 26d 38d PATCH [30d]
possible deadlock in uvcg_extension_ba_source_id_show prio:low usb 4 6 43d 39d
BUG: spinlock bad magic in gadget_dev_open prio:normal usb 4 11 8d06h 39d
possible deadlock in uvcg_default_output_i_terminal_show prio:low usb 4 1 46d 40d
possible deadlock in uvcg_extension_b_num_controls_store prio:low usb 4 1 46d 41d
general protection fault in uvcg_video_enable prio:high usb 2 C 8 13d 41d PATCH [38d]
WARNING in ttusb_dec_start_feed prio:high media usb -1 syz, C 2 23d 42d
memory leak in hidg_bind prio:low usb 3 syz, C 2 29d 42d PATCH [30d]
WARNING: refcount bug in trace_suspend_resume (2) prio:normal usb 13 syz, C 5 21d 42d PATCH [41d]
WARNING in i2c_unregister_device prio:low usb -1 syz, C error 27 10h27m 42d
KASAN: slab-use-after-free Read in input_dev_uevent (2) prio:high usb input 19 syz, C error 20 5d09h 43d
KASAN: slab-out-of-bounds Read in hid_dump_input prio:high input usb 19 syz, C error error 22 39d 43d PATCH [10d]
memory leak in usb_copy_descriptors prio:low usb 3 syz, C 1 29d 45d PATCH [6d05h]
INFO: trying to register non-static key in usbg_make_tpg prio:low usb -1 4 32d 45d
WARNING in trace_suspend_resume/usb_submit_urb (2) prio:high nfc usb -1 3 47d 45d
INFO: trying to register non-static key in as102_stream_ctrl prio:high usb media -1 syz, C error 54 1d17h 46d PATCH [11d]
KASAN: slab-use-after-free Read in sur40_open prio:high usb input 19 syz, C error error 44 39d 46d PATCH [31d]
KASAN: slab-use-after-free Read in rc_dev_uevent prio:high usb media 19 syz, C error 182 12m 46d PATCH [46d]
WARNING in port100_send_cmd_async/usb_submit_urb (3) prio:high usb nfc -1 syz, C error 325 9d16h 46d
possible deadlock in mnt_want_write (9) prio:low usb 4 syz, C 75 11d 47d
memory leak in f_uac1_opts_c_srate_store prio:normal usb 3 syz, C 1 34d 47d PATCH [46d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 5 17d 48d PATCH [16d]
WARNING in as102_stream_ctrl prio:low usb media -1 syz, C 107 11h17m 48d
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) prio:high actionable usb 19 1 53d 48d PATCH [11d]
possible deadlock in tcm_alloc prio:low usb 4 syz, C error 397 6h07m 49d
possible deadlock in uvcg_extension_allow_link prio:low usb 4 syz, C 13 24d 49d
memory leak in f_uac2_opts_p_srate_store prio:normal usb 3 syz, C 1 36d 49d PATCH [46d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 6 23d 50d PATCH [47d]
KASAN: slab-use-after-free Read in uvcg_extension_drop prio:normal actionable usb 19 5 15d 50d PATCH [47d]
general protection fault in dummy_udc_stop prio:low usb 8 24 25d 50d
general protection fault in emi26_probe prio:low usb 17 syz, C error 17 27d 50d 💬 1 [19d]
WARNING in ttusb_dec_send_command prio:high usb media -1 syz, C 245 3h04m 51d PATCH [48d]
general protection fault in rebind_store prio:low usb 8 syz, C 58 10d 51d PATCH [21d]
KASAN: slab-use-after-free Write in pn_bind prio:normal usb 22 syz 50 11d 51d PATCH [10d]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 58 8d23h 51d PATCH [47d]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 3 20d 51d PATCH [11d]
KASAN: slab-use-after-free Read in vhci_shutdown_connection prio:normal usb 19 syz, C 221 25d 51d PATCH [13d]
KASAN: slab-use-after-free Write in put_dev prio:normal usb 22 syz 5 15d 51d PATCH [49d]
KASAN: slab-use-after-free Write in gadgetfs_bind prio:normal usb 22 syz, C error 197 2d08h 51d PATCH [47d]
memory leak in uvcg_extension_ba_source_id_store prio:low usb 3 syz, C 1 52d 51d PATCH [48d]
WARNING in usb_ep_enable prio:high usb -1 syz, C done 1295 1h01m 51d PATCH [49d]
WARNING: locking bug in gadget_dev_open prio:normal usb 4 4 31d 52d
KASAN: slab-use-after-free Read in find_endpoint prio:normal usb 19 127 8h57m 52d
KASAN: slab-use-after-free Read in gadget_dev_open prio:normal usb 19 syz, C 184 4d00h 52d
KASAN: slab-use-after-free Read in ep_open prio:normal usb 19 syz, C done 169 18h02m 52d PATCH [51d]
WARNING in usbg_make_tpg prio:low usb -1 3 41d 52d
memory leak in f_uac2_opts_c_srate_store prio:low usb 3 syz, C 1 39d 52d PATCH [50d]
kernel BUG in register_netdevice prio:low usb -1 syz, C done 108 1d06h 53d 💬 2 [26d]
KASAN: invalid-free in f_uac2_opts_p_srate_store prio:normal usb 24 syz, C error 156 23d 53d PATCH [47d]
KASAN: invalid-free in f_uac2_opts_c_srate_store prio:normal usb 24 syz, C error 117 24d 54d PATCH [47d]
KASAN: slab-out-of-bounds Read in dummy_free_request prio:normal usb 17 162 24d 54d
general protection fault in start_dirop prio:low usb fs 2 syz, C 20 22d 54d PATCH [51d]
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 15 4d04h 54d
possible deadlock in uvc_func_allow_link prio:low usb fs 4 17 23d 54d
KASAN: slab-use-after-free Read in stub_rx_loop prio:high usb 19 C 10 11d 55d PATCH [25d]
general protection fault in dummy_udc_start prio:low usb 10 syz, C error 12268 10d 55d PATCH [54d]
general protection fault in dummy_set_selfpowered prio:low usb 10 syz, C error 1486 11d 55d
general protection fault in f_midi2_free_ep_reqs prio:high usb 10 syz, C 935 13d 55d PATCH [53d]
general protection fault in dummy_queue prio:low usb 19 643 7d12h 55d
KASAN: global-out-of-bounds Read in usb_copy_descriptors prio:high usb 17 523 1d07h 55d PATCH [50d]
KASAN: invalid-free in dev_free (4) prio:normal usb 24 1 60d 56d
WARNING in cm109_input_ev/usb_submit_urb (2) prio:low usb input -1 syz 1 61d 57d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C 3647 now 68d 💬 3 [17d]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 28d 79d PATCH [67d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm input usb 1 syz, C error error 1 85d 83d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 76 43d 83d PATCH [71d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 25 6d05h 136d PATCH [85d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 40 2d21h 156d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 104 1d05h 179d PATCH [110d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1260 21m 179d PATCH [110d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 30 1d07h 181d PATCH [113d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2713 26d 186d PATCH [185d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error error 2364 74d 186d PATCH [139d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 63d 217d PATCH [82d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 364 11d 244d PATCH [115d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb i2c 1 syz, C error error 11 2d13h 252d 💬 10 [250d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 178d 259d 💬 1 [178d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 33 24d 273d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error error 19 33d 290d PATCH [128d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 281d 294d PATCH [273d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 36 2d00h 325d PATCH [74d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1345 6h34m 343d PATCH [85d]
general protection fault in count_matching_names (2) usb 2 syz 6 112d 345d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 29 17d 367d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 272 14d 395d PATCH [206d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 599 20h24m 396d PATCH [90d]
INFO: task hung in dvb_usbv2_exit prio:low i2c usb 1 syz, C error 111 18d 406d
INFO: task hung in console_callback (6) prio:high usb input 1 syz, C error error 57 26d 432d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 160 1h59m 458d PATCH [59d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 527 1d18h 478d PATCH [129d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz 197 2d19h 485d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 847 1d02h 487d PATCH [300d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 97d 506d PATCH [503d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 442 3h31m 514d PATCH [469d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 2d02h 518d PATCH [308d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 19d 540d PATCH [342d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 788 5h36m 545d PATCH [469d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 437d 571d
general protection fault in status_show prio:high usb 2 syz, C 16 90d 612d PATCH [460d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz, C error 3349 6h43m 631d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 417d 705d
INFO: rcu detected stall in do_syscall_64 prio:high usb input 1 syz 25 25d 709d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 384 4d03h 738d PATCH [317d]
WARNING in enable_work prio:high usb media -1 syz, C error 1834 7d18h 761d 💬 2 [17d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7549 36m 841d PATCH [16d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 104 33d 846d
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error error 270 32d 907d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 377 4d17h 912d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 29d 951d 💬 2 [878d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 26 31d 1099d 💬 1 [28d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 447 3h28m 1126d 💬 1 [48d]
INFO: rcu detected stall in console_callback usb input serial 1 syz, C error error 18 245d 1128d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 136 12d 1138d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 776 2h37m 1199d 💬 4 [928d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 27d 1206d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1174 10h00m 1273d 💬 16 [142d]
INFO: task hung in hub_event (3) prio:high usb 1 C 1049 3h24m 1345d 💬 12 [17d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 863 27d 1369d 💬 14 [674d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 248d 1385d 💬 5 [329d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 237 3d20h 1451d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 12d 1840d PATCH [49d]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 158d 2043d PATCH [1833d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 4035 3h14m 2091d PATCH [1827d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3424 7h43m 2092d 💬 1 [142d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in usb_ep_alloc_request usb prio:low 2 2 8d14h 4d23h
BUG: soft lockup in dummy_timer (2) usb prio:normal 1 1 12d 8d08h
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] (2) usb prio:high -1 1 20d 16d
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add (2) usb race:benign prio:low 6 1 17d 17d
KASAN: stack-out-of-bounds Write in f_midi2_create_usb_configs prio:normal usb 21 3 34d 31d
KCSAN: data-race in kick_pool_pick / wq_worker_running race:benign prio:low usb 6 44 3h27m 31d
general protection fault in usbg_submit_command prio:high usb 2 1 47d 42d
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small prio:high usb 10 4 49d 46d
KCSAN: data-race in event_handler / usbip_stop_eh prio:high race:benign usb 6 1 47d 47d
BUG: unable to handle kernel paging request in dummy_enable prio:low usb 8 3 46d 47d
KASAN: slab-out-of-bounds Read in free_netdev prio:normal usb 19 2 44d 51d
general protection fault in dummy_wakeup prio:low usb 2 2 40d 53d
general protection fault in mon_text_release prio:normal usb 10 3 64d 164d