usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 447
Parent subsystem(s): kernel (107)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in fsg_common_set_num_buffers prio:low usb 2 syz, C 9 15m 2h48m
INFO: trying to register non-static key in gadget_dev_open usb prio:normal -1 1 4d11h 11h31m
general protection fault in adsl_state_store prio:low usb 2 C 3 18h37m 18h36m
WARNING: ODEBUG bug in hid_device_remove input usb prio:high -1 syz 12 1d00h 2d01h 💬 2 [8h12m]
WARNING: ODEBUG bug in corsair_remove input usb prio:high -1 syz 15 1d02h 2d01h PATCH [2h59m]
KASAN: slab-use-after-free Read in attach_store usb prio:normal 19 C 2 3d00h 3d00h PATCH [1d03h]
KASAN: slab-use-after-free Read in usa49_glocont_callback prio:high actionable usb 19 C 2 18h15m 3d08h
KASAN: slab-use-after-free Read in f_midi2_opts_iface_name_show usb prio:normal 19 11 12h59m 3d10h PATCH [23h47m]
memory leak in gadget_bind (2) usb prio:low 3 syz, C 1 7d20h 3d10h
possible deadlock in uvcg_frame_dw_frame_interval_store usb 4 2 23h24m 3d23h
possible deadlock in uvcg_extension_ba_source_id_show usb prio:low 4 6 8d13h 4d10h
BUG: spinlock bad magic in gadget_dev_open usb 4 5 4d11h 4d11h
possible deadlock in uvcg_default_output_i_terminal_show usb prio:low 4 1 10d 5d10h
WARNING: kobject bug in pch_udc_remove prio:high usb -1 syz, C 5 5d21h 5d21h PATCH [5d18h]
possible deadlock in uvcg_extension_b_num_controls_store usb prio:low 4 1 10d 6d10h
general protection fault in uvcg_video_enable prio:high usb 2 C 6 6d00h 6d10h PATCH [2d22h]
possible deadlock in tcm_register_callback usb prio:low 4 3 38m 7d10h
WARNING in ttusb_dec_start_feed media usb prio:high -1 syz, C 2 8d06h 7d15h
memory leak in hidg_bind usb prio:low 3 syz, C 2 9d00h 7d15h PATCH [7d00h]
WARNING: refcount bug in trace_suspend_resume (2) usb prio:normal 13 syz, C 2 8d23h 7d15h PATCH [5d20h]
WARNING in i2c_unregister_device usb prio:low -1 syz, C error 24 6d10h 7d15h
KASAN: slab-out-of-bounds Read in hid_dump_input input usb prio:high 19 syz, C error 22 4d00h 8d14h PATCH [8d06h]
memory leak in usb_copy_descriptors usb prio:low 3 syz, C 1 13d 9d23h PATCH [8d16h]
INFO: trying to register non-static key in usbg_make_tpg usb prio:low -1 3 9d02h 10d
WARNING in trace_suspend_resume/usb_submit_urb (2) usb prio:high -1 3 12d 10d
BUG: unable to handle kernel paging request in nhi_probe usb prio:high 8 syz, C 8 1h36m 11d PATCH [9d20h]
KASAN: slab-use-after-free Read in sur40_open usb input prio:high 19 syz, C error 44 4d07h 11d PATCH [11d]
BUG: sleeping function called from invalid context in cancel_delayed_work_sync usb prio:high 5 syz, C 1983 now 11d PATCH [2h13m]
BUG: unable to handle kernel paging request in ioread32 usb prio:high 8 syz, C 64 2h35m 11d
memory leak in f_uac1_opts_c_srate_store usb prio:normal 3 syz, C 1 16d 12d PATCH [10d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 3 4d13h 13d
WARNING in __fsg_is_set usb prio:low -1 1 17d 13d
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) usb prio:high actionable 19 1 17d 13d PATCH [12d]
possible deadlock in tcm_alloc prio:low usb 4 syz, C 168 1h02m 13d
general protection fault in usb_put_function_instance usb prio:low 2 12 9d20h 14d PATCH [1d04h]
possible deadlock in uvcg_extension_allow_link usb prio:low 4 syz, C 12 6d20h 14d
memory leak in f_uac2_opts_p_srate_store usb prio:normal 3 syz, C 1 1d01h 14d PATCH [11d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 4 1d20h 15d PATCH [12d]
KASAN: slab-use-after-free Read in uvcg_extension_drop usb prio:normal actionable 19 3 17d 15d PATCH [12d]
general protection fault in dummy_udc_stop usb prio:low 8 12 1h30m 15d
general protection fault in emi26_probe prio:low usb 17 syz, C error 15 2h57m 15d
WARNING in ttusb_dec_send_command media usb prio:high -1 syz, C 86 4h02m 16d PATCH [13d]
general protection fault in mon_notify usb prio:high 2 syz, C 4 5d22h 16d PATCH [16d]
general protection fault in rebind_store usb prio:low 2 27 2d11h 16d PATCH [4d14h]
KASAN: slab-use-after-free Read in vhci_cleanup_unlink_list usb prio:normal 19 syz, C error 203 3h14m 16d PATCH [13d]
KASAN: slab-use-after-free Write in pn_bind usb prio:normal 22 26 2d23h 16d PATCH [12d]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 58 2d07h 16d PATCH [12d]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 2 9d00h 16d
WARNING in f_midi_free usb prio:low -1 6 20h05m 16d PATCH [23h43m]
KASAN: slab-use-after-free Read in vhci_shutdown_connection usb prio:normal 19 syz, C 158 4h27m 16d
KASAN: slab-use-after-free Write in put_dev usb prio:normal 22 syz 2 9d01h 16d PATCH [13d]
KASAN: slab-use-after-free Write in gadgetfs_bind usb prio:normal 22 syz, C error 19 1d12h 16d PATCH [11d]
memory leak in uvcg_extension_ba_source_id_store usb prio:low 3 syz, C 1 17d 16d PATCH [13d]
WARNING in usb_ep_enable usb prio:high -1 syz, C done 481 8h33m 16d PATCH [14d]
WARNING: locking bug in gadget_dev_open usb 4 3 4d11h 17d
KASAN: slab-use-after-free Read in find_endpoint usb prio:normal 19 15 15h12m 17d
KASAN: slab-use-after-free Read in gadget_dev_open usb prio:normal 19 syz, C 38 3d00h 17d
KASAN: slab-use-after-free Read in ep_open usb prio:normal 19 syz, C 39 6h49m 17d PATCH [16d]
WARNING in usbg_make_tpg usb prio:low -1 3 6d05h 17d
memory leak in f_uac2_opts_c_srate_store usb prio:low 3 syz, C 1 4d10h 17d PATCH [15d]
kernel BUG in register_netdevice prio:low usb -1 syz, C 65 7h47m 18d
KASAN: invalid-free in f_uac2_opts_p_srate_store usb prio:normal 24 syz, C error 108 3h49m 18d PATCH [12d]
KASAN: invalid-free in f_uac2_opts_c_srate_store usb prio:normal 24 syz, C error 76 5h18m 19d PATCH [12d]
KASAN: slab-out-of-bounds Read in dummy_free_request usb prio:normal 17 155 1d12h 19d
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 13 1h51m 19d
possible deadlock in uvc_func_allow_link usb prio:low 4 8 4d03h 19d
KASAN: slab-use-after-free Read in lockref_get (2) fs usb prio:high 19 syz, C error 16 1d11h 19d
KASAN: slab-use-after-free Read in stub_rx_loop usb prio:high 19 9 23d 19d
general protection fault in dummy_udc_start usb prio:low 10 syz, C error 7448 6m 19d PATCH [18d]
general protection fault in dummy_set_selfpowered usb prio:low 10 syz, C error 916 now 19d
KASAN: slab-use-after-free Read in raw_process_ep0_io prio:normal usb 19 syz, C 23 2h44m 19d PATCH [12d]
general protection fault in f_midi2_free_ep_reqs usb prio:high 10 syz, C 457 18m 19d PATCH [18d]
general protection fault in dummy_queue usb prio:low 10 363 2h11m 19d
KASAN: global-out-of-bounds Read in usb_copy_descriptors usb prio:high 17 361 56m 19d PATCH [15d]
general protection fault in f_midi2_stop_eps usb prio:high 2 syz, C error 436 1h38m 19d PATCH [18d]
possible deadlock in uvcg_streaming_header_allow_link usb prio:low 4 syz, C error 385 10h46m 19d
KASAN: invalid-free in dev_free (4) usb prio:normal 24 1 25d 21d
WARNING in cm109_input_ev/usb_submit_urb (2) input usb prio:low -1 syz 1 26d 22d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C 1886 11h16m 33d 💬 3 [16d]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 21d 44d PATCH [32d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm usb input 1 syz, C error error 1 50d 48d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 76 7d23h 48d PATCH [36d]
WARNING in igorplugusb_cmd/usb_submit_urb prio:low media usb -1 syz, C 1 82d 79d PATCH [61d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 21 1d05h 101d PATCH [50d]
KASAN: stack-out-of-bounds Write in carl9170_handle_command_response prio:high usb wireless 21 syz, C 105 21d 115d PATCH [34d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 38 7d16h 121d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error 91 36d 144d PATCH [75d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1157 10d 144d PATCH [75d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 9 112d 146d PATCH [78d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2681 6h18m 151d PATCH [150d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error 2364 39d 151d PATCH [104d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 28d 182d PATCH [47d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 257 4h54m 208d PATCH [79d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 syz, C error error 8 2d22h 217d 💬 10 [215d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 143d 224d 💬 1 [142d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 30 3d16h 238d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 19 29d 255d PATCH [92d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 246d 259d PATCH [238d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 29 5d08h 290d PATCH [39d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1164 11h01m 308d PATCH [50d]
general protection fault in count_matching_names (2) usb 2 syz 6 77d 310d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 26 1d04h 332d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 267 8d10h 360d PATCH [170d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 587 1d01h 361d PATCH [55d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 syz, C error 109 19h44m 371d
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 43 1d02h 397d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 154 34d 423d PATCH [24d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 482 8h32m 443d PATCH [94d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz 172 14h50m 450d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 751 10h41m 452d PATCH [265d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 syz, C error 408 2d10h 470d PATCH [460d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 61d 471d PATCH [468d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 363 2d20h 479d PATCH [433d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 14d 483d PATCH [272d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 3d09h 505d PATCH [307d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 753 4d01h 510d PATCH [433d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 402d 536d
general protection fault in status_show prio:high usb 2 syz, C 16 55d 577d PATCH [425d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz, C error 51 now 596d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 382d 670d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 24 7d00h 674d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 371 5d07h 702d PATCH [282d]
WARNING in enable_work prio:high usb -1 syz, C error 1829 2h40m 726d 💬 2 [44d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7457 15m 806d PATCH [108d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 103 4d19h 811d
INFO: rcu detected stall in schedule (7) usb 1 syz, C done error 72 34d 811d
WARNING in kernfs_get (5) prio:high usb kernfs -1 syz inconclusive 753 35d 830d 💬 3 [46d]
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error 267 22h14m 872d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 369 5d23h 877d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 15d 916d 💬 2 [842d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 25 5h20m 1063d 💬 1 [24d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 443 3h46m 1091d 💬 1 [12d]
INFO: rcu detected stall in console_callback usb input serial 1 syz, C error error 18 210d 1093d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 130 2d20h 1103d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 708 21h11m 1164d 💬 4 [892d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 70d 1171d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1154 1d05h 1237d 💬 16 [106d]
INFO: task hung in hub_event (3) prio:high usb 1 C 982 38m 1310d 💬 12 [11d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 862 512d 1334d 💬 14 [639d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 212d 1350d 💬 5 [294d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 220 4d06h 1415d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 1d08h 1805d PATCH [13d]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 123d 2008d PATCH [1798d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 3901 16h45m 2056d PATCH [1792d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3303 2h53m 2056d 💬 1 [106d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: unable to handle kernel paging request in iowrite32 usb prio:high 8 1 12d 7d09h
general protection fault in usbg_submit_command usb prio:high 2 1 12d 7d09h
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small usb prio:high 10 4 14d 11d
KCSAN: data-race in event_handler / usbip_stop_eh usb prio:high race:benign 6 1 11d 11d
BUG: unable to handle kernel paging request in gs_close usb prio:low 8 4 2d16h 12d
BUG: unable to handle kernel paging request in dummy_enable usb prio:low 8 3 11d 12d
KASAN: slab-out-of-bounds Read in free_netdev usb prio:normal 19 2 9d01h 16d
general protection fault in dummy_wakeup usb prio:low 2 2 4d22h 18d
KCSAN: data-race in mon_reader_add / usb_hcd_submit_urb (3) usb race:benign prio:low 6 1 28d 28d
general protection fault in mon_text_release prio:normal usb 10 3 29d 129d