usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 472
Parent subsystem(s): kernel (117)
Child subsystems: usb-storage (5)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Write in usb_giveback_urb_bh (2) usb prio:high actionable 22 1 7d23h 3d12h
INFO: task hung in usb_deregister_dev (4) prio:high usb 1 35 49m 5d13h
general protection fault in mxl111sf_ep6_streaming_ctrl media usb prio:high 2 syz, C error 2 5d19h 5d18h PATCH [5d10h]
INFO: task hung in usbdev_ioctl (8) prio:high usb 1 syz error 4 11d 11d PATCH [9d01h]
WARNING in ttusb_start_feed/usb_submit_urb media usb prio:high -1 syz, C error 12 3d02h 13d PATCH [13d]
KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req mmc usb prio:high 22 syz, C error 276 3h16m 14d PATCH [2d07h]
general protection fault in ucsi_acpi_probe (2) usb prio:low 2 syz, C error 41 7d05h 17d PATCH [11d]
WARNING in service_outstanding_interrupt/usb_submit_urb (2) usb prio:high -1 1 24d 20d
INFO: task hung in pn533_usb_probe nfc usb prio:high 1 syz, C error 4 13d 24d PATCH [22d]
INFO: task hung in usb_register_dev (3) prio:high usb 1 syz, C error 21 13h46m 28d PATCH [25d]
WARNING: suspicious RCU usage in phy_detach net usb prio:high 4 syz 23 1d06h 28d PATCH [6h43m]
KASAN: slab-use-after-free Read in roccat_disconnect prio:high input usb 19 syz, C error 20 9d18h 29d PATCH [9d12h]
BUG: unable to handle kernel paging request in gs_close prio:low usb 8 6 32d 32d PATCH [4d02h]
memory leak in nci_send_cmd prio:high usb 3 syz, C 5 8d00h 33d PATCH [8d06h]
KASAN: slab-use-after-free Read in k90_record_led_work prio:high actionable input usb 19 6 9d09h 33d PATCH [21d]
possible deadlock in fifo_open (2) prio:low usb 4 1 37d 33d
KASAN: slab-use-after-free Read in atkbd_event_work prio:high actionable usb 19 syz, C 8 1d00h 34d 💬 2 [17d]
KASAN: slab-use-after-free Read in k90_backlight_work prio:high input usb 19 11 32d 35d PATCH [18d]
KASAN: slab-use-after-free Read in sd_stopN prio:high media usb 19 syz 1 23d 35d PATCH [24d]
KASAN: slab-out-of-bounds Write in gb_operation_message_alloc prio:high usb greybus 21 syz, C error 83 3h17m 35d PATCH [28d]
WARNING in drm_mode_config_validate prio:high usb dri -1 syz, C error 36 26d 35d 💬 1 [35d]
KASAN: slab-use-after-free Read in roccat_open prio:high input usb 19 syz, C 2 14d 36d 💬 2 [3d10h]
UBSAN: shift-out-of-bounds in __vcc_connect prio:high net usb -1 syz 2 40d 37d PATCH [1d22h]
INFO: task hung in usb_set_configuration prio:high usb input 1 syz 2 43d 39d PATCH [37d]
INFO: task hung in unbind_store prio:high usb 1 syz, C error 11 14d 40d 💬 7 [36d]
possible deadlock in lookup_open prio:low usb 4 syz, C 94 1d22h 41d
KASAN: slab-out-of-bounds Read in aqc_raw_event prio:high input usb hwmon 17 syz, C 12 9d12h 41d PATCH [41d]
KASAN: slab-use-after-free Read in dummy_timer prio:normal usb 19 34 6d06h 41d
INFO: trying to register non-static key in edge_bulk_in_callback prio:high usb -1 1 46d 42d
INFO: trying to register non-static key in u_audio_get_playback_srate prio:high usb -1 1 46d 42d PATCH [2d08h]
KASAN: slab-out-of-bounds Read in gether_get_ifname prio:normal usb 17 syz, C 21 30d 42d PATCH [19d]
possible deadlock in mdc800_device_open prio:high usb 4 syz, C error 259 5h01m 42d PATCH [23d]
KASAN: slab-use-after-free Read in __vb2_queue_cancel (2) prio:high usb media 19 syz, C 325 7h54m 43d PATCH [21d]
general protection fault in bus_remove_device prio:high usb 2 syz, C 9 6d22h 43d PATCH [42d]
memory leak in __usbhid_submit_report (2) prio:high input usb 3 syz, C 2 7h14m 44d PATCH [44d]
general protection fault in drm_object_attach_property usb dri prio:high 8 syz, C error 57 9h41m 46d PATCH [46d]
INFO: trying to register non-static key in gadget_dev_open prio:normal usb -1 1 50d 46d
general protection fault in adsl_state_store prio:low usb 2 C 20 1d09h 47d PATCH [6d13h]
WARNING: ODEBUG bug in hid_device_remove prio:high input usb -1 syz, C error 51 8h52m 48d 💬 2 [8d11h]
WARNING: ODEBUG bug in corsair_remove prio:high input usb -1 syz, C done 740 8h04m 48d PATCH [21d]
KASAN: slab-use-after-free Read in attach_store prio:normal usb 19 C 2 49d 49d PATCH [9d03h]
memory leak in gadget_bind (2) prio:low usb 3 syz, C 1 37d 49d PATCH [1d21h]
possible deadlock in uvcg_extension_ba_source_id_show prio:low usb 4 6 54d 50d
BUG: spinlock bad magic in gadget_dev_open prio:normal usb 4 12 10d 50d
possible deadlock in uvcg_default_output_i_terminal_show prio:low usb 4 1 57d 51d
possible deadlock in uvcg_extension_b_num_controls_store prio:low usb 4 1 57d 52d
general protection fault in uvcg_video_enable prio:high usb 2 C 8 24d 52d PATCH [49d]
WARNING in ttusb_dec_start_feed prio:high media usb -1 syz, C 2 34d 53d
memory leak in hidg_bind prio:low usb 3 syz, C 2 40d 53d PATCH [41d]
WARNING: refcount bug in trace_suspend_resume (2) prio:normal usb 13 syz, C 5 32d 53d PATCH [52d]
WARNING in i2c_unregister_device prio:low usb -1 syz, C error 36 7d12h 53d PATCH [7d20h]
KASAN: slab-out-of-bounds Read in hid_dump_input prio:high input usb 19 syz, C error error 22 50d 54d PATCH [21d]
memory leak in usb_copy_descriptors prio:low usb 3 syz, C 1 40d 56d PATCH [17d]
INFO: trying to register non-static key in usbg_make_tpg prio:low usb -1 4 43d 57d
INFO: trying to register non-static key in as102_stream_ctrl prio:high usb media -1 syz, C error 71 17h03m 57d PATCH [23d]
KASAN: slab-use-after-free Read in sur40_open prio:high usb input 19 syz, C error error 44 50d 57d PATCH [9d12h]
KASAN: slab-use-after-free Read in rc_dev_uevent prio:high usb media 19 syz, C error 191 4d10h 57d PATCH [57d]
WARNING in port100_send_cmd_async/usb_submit_urb (3) prio:high usb nfc -1 syz, C error 347 1d20h 57d PATCH [6d01h]
memory leak in f_uac1_opts_c_srate_store prio:normal usb 3 syz, C 1 45d 58d PATCH [57d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 5 28d 59d PATCH [27d]
WARNING in as102_stream_ctrl prio:low usb media -1 syz, C 163 7h08m 59d PATCH [8d11h]
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) prio:high actionable usb 19 1 64d 59d PATCH [22d]
possible deadlock in tcm_alloc prio:low usb 4 syz, C error 504 5d09h 60d
possible deadlock in uvcg_extension_allow_link prio:low usb 4 syz, C 13 36d 60d
memory leak in f_uac2_opts_p_srate_store prio:normal usb 3 syz, C 1 47d 60d PATCH [57d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 6 34d 61d PATCH [58d]
KASAN: slab-use-after-free Read in uvcg_extension_drop prio:normal actionable usb 19 C 6 1d09h 61d PATCH [58d]
general protection fault in dummy_udc_stop prio:low usb 8 24 36d 61d
general protection fault in emi26_probe prio:low usb 17 syz, C error 17 38d 61d 💬 1 [30d]
WARNING in ttusb_dec_send_command prio:high usb media -1 syz, C 294 2h43m 62d PATCH [59d]
general protection fault in rebind_store prio:low usb 8 syz, C 65 6d00h 62d PATCH [5d20h]
KASAN: slab-use-after-free Write in pn_bind prio:normal usb 22 syz 58 19h14m 62d PATCH [21d]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 58 5d13h 62d PATCH [58d]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 3 31d 62d PATCH [1d18h]
KASAN: slab-use-after-free Read in vhci_shutdown_connection prio:normal usb 19 syz, C 221 36d 62d PATCH [24d]
KASAN: slab-use-after-free Write in put_dev prio:normal usb 22 syz 5 26d 62d PATCH [60d]
KASAN: slab-use-after-free Write in gadgetfs_bind prio:normal usb 22 syz, C error 205 6d06h 62d PATCH [58d]
memory leak in uvcg_extension_ba_source_id_store prio:low usb 3 syz, C 1 63d 62d PATCH [59d]
WARNING in usb_ep_enable prio:high usb -1 syz, C done 2379 31m 62d PATCH [60d]
WARNING in __drm_atomic_helper_set_config prio:high usb dri -1 syz, C 19 13d 63d PATCH [4d09h]
WARNING: locking bug in gadget_dev_open prio:normal usb 4 4 42d 63d
KASAN: slab-use-after-free Read in find_endpoint prio:normal usb 19 143 3d00h 63d
KASAN: slab-use-after-free Read in gadget_dev_open prio:normal usb 19 syz, C 189 3d21h 63d
KASAN: slab-use-after-free Read in ep_open prio:normal usb 19 syz, C done 201 7h45m 63d PATCH [62d]
WARNING in usbg_make_tpg prio:low usb -1 3 52d 63d
memory leak in f_uac2_opts_c_srate_store prio:low usb 3 syz, C 1 50d 63d PATCH [61d]
kernel BUG in register_netdevice prio:low usb -1 syz, C done 112 5d03h 64d 💬 2 [37d]
KASAN: invalid-free in f_uac2_opts_p_srate_store prio:normal usb 24 syz, C error 156 34d 64d PATCH [58d]
KASAN: invalid-free in f_uac2_opts_c_srate_store prio:normal usb 24 syz, C error 117 35d 65d PATCH [58d]
KASAN: slab-out-of-bounds Read in dummy_free_request prio:normal usb 17 162 35d 65d
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 15 21h08m 65d
possible deadlock in uvc_func_allow_link prio:low usb fs 4 17 34d 65d
KASAN: slab-use-after-free Read in stub_rx_loop prio:high usb 19 C 10 22d 66d PATCH [9d03h]
general protection fault in dummy_udc_start prio:low usb 10 syz, C error 12268 7d20h 66d PATCH [65d]
general protection fault in dummy_set_selfpowered prio:low usb 10 syz, C error 1486 7d23h 66d
general protection fault in f_midi2_free_ep_reqs prio:high usb 10 syz, C 935 24d 66d PATCH [64d]
general protection fault in dummy_queue prio:low usb 19 643 18d 66d
possible deadlock in configfs_depend_item_unlocked prio:low usb fs 4 syz, C error 5627 now 66d
KASAN: global-out-of-bounds Read in usb_copy_descriptors prio:high usb 17 syz, C 563 14h55m 66d PATCH [1d08h]
KASAN: invalid-free in dev_free (4) prio:normal usb 24 1 72d 68d
WARNING in cm109_input_ev/usb_submit_urb (2) prio:low usb input -1 syz 1 72d 68d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C 3809 6h35m 79d 💬 3 [28d]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 40d 90d PATCH [78d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm input usb 1 syz, C error error 1 96d 94d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 76 54d 94d PATCH [83d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 27 10d 147d PATCH [96d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 40 13d 167d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 116 1d21h 190d PATCH [122d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1738 30m 190d PATCH [122d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 30 12d 192d PATCH [124d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2713 37d 197d PATCH [196d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error error 2364 85d 197d PATCH [150d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 3 3d22h 228d PATCH [93d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 364 5d23h 255d PATCH [126d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb i2c 1 syz, C error error 12 11d 263d 💬 10 [262d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 189d 270d 💬 1 [189d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 36 17h19m 284d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error error 19 44d 301d PATCH [139d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 292d 305d PATCH [284d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 37 8d07h 337d PATCH [85d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1408 2h46m 354d PATCH [96d]
general protection fault in count_matching_names (2) usb 2 syz 6 123d 356d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 29 28d 378d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 272 25d 406d PATCH [217d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 601 4d17h 407d PATCH [101d]
INFO: task hung in dvb_usbv2_exit prio:low i2c usb 1 syz, C error 111 29d 417d
INFO: task hung in console_callback (6) prio:high usb input 1 syz, C error error 57 38d 443d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 163 1d14h 469d PATCH [70d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 535 5h16m 489d PATCH [140d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz 206 1d00h 496d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 851 2d07h 498d PATCH [311d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 108d 517d PATCH [514d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 466 30m 525d PATCH [480d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 13d 529d PATCH [319d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 30d 551d PATCH [353d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 811 6h35m 556d PATCH [480d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 449d 582d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 428d 717d
INFO: rcu detected stall in do_syscall_64 prio:high usb input 1 syz 25 36d 720d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 449 2d07h 749d PATCH [328d]
WARNING in enable_work prio:high usb media -1 syz, C error 1834 18d 772d 💬 2 [28d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7575 4h28m 852d PATCH [27d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 104 44d 857d
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error error 270 43d 919d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 378 5d18h 923d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 40d 962d 💬 2 [889d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 27 1d09h 1110d PATCH [3d08h]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 449 1d08h 1137d 💬 1 [59d]
INFO: rcu detected stall in console_callback usb input serial 1 syz, C error error 18 256d 1139d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 137 6d04h 1150d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 798 8h49m 1210d 💬 4 [939d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 38d 1217d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1183 2d08h 1284d 💬 16 [153d]
INFO: task hung in hub_event (3) prio:high usb 1 C 1059 15h17m 1356d 💬 12 [28d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 863 38d 1380d 💬 14 [686d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 259d 1396d 💬 5 [340d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 237 14d 1462d
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 169d 2055d PATCH [1845d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 4071 21h19m 2102d PATCH [1838d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3463 3h15m 2103d 💬 1 [153d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb (6) usb race:benign prio:low 6 1 4d11h 4d11h
KASAN: slab-use-after-free Write in dev_config usb 22 2 12d 8d12h
general protection fault in usb_ep_alloc_request usb prio:low 2 2 19d 16d
BUG: soft lockup in dummy_timer (2) usb prio:normal 1 1 23d 19d
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] (2) prio:high usb -1 1 31d 27d
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add (2) usb race:benign prio:low 6 1 28d 28d
KASAN: stack-out-of-bounds Write in f_midi2_create_usb_configs prio:normal usb 21 3 45d 42d
KCSAN: data-race in kick_pool_pick / wq_worker_running race:benign prio:low usb net 6 C 61 10h46m 42d
general protection fault in usbg_submit_command prio:high usb 2 1 58d 53d
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small prio:high usb 10 4 61d 57d
BUG: unable to handle kernel paging request in dummy_enable prio:low usb 8 3 57d 58d
KASAN: slab-out-of-bounds Read in free_netdev prio:normal usb 19 2 55d 62d
general protection fault in dummy_wakeup prio:low usb 2 2 51d 64d
general protection fault in mon_text_release prio:normal usb 10 3 75d 175d