usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 447
Parent subsystem(s): kernel (113)
Child subsystems: usb-storage (3)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
UBSAN: shift-out-of-bounds in vcc_connect net usb prio:high -1 syz 4 14h47m 7h36m
INFO: task hung in unbind_store prio:high usb 1 syz 8 4d02h 14h50m 💬 4 [2h00m]
KASAN: slab-use-after-free Write in usb_giveback_urb_bh usb prio:high actionable 22 2 3d12h 1d00h PATCH [9h04m]
possible deadlock in lookup_open usb prio:low 4 32 6h56m 1d18h
KASAN: slab-use-after-free Read in dummy_timer usb prio:normal 19 11 16h51m 2d00h
INFO: trying to register non-static key in edge_bulk_in_callback usb prio:high -1 1 6d17h 2d17h
general protection fault in ucsi_acpi_probe usb prio:low 2 syz 17 5d22h 2d17h PATCH [2d11h]
INFO: trying to register non-static key in u_audio_get_playback_srate usb prio:high -1 1 6d17h 2d17h PATCH [2d14h]
general protection fault in vhci_hcd_probe usb prio:low 2 syz 10 5d23h 2d18h
BUG: unable to handle kernel NULL pointer dereference in usb_reinit usb prio:low 10 syz, C 10 6d14h 2d18h PATCH [1d22h]
BUG: unable to handle kernel paging request in xhci_halt usb prio:high 8 syz, C 17 2d12h 2d18h PATCH [1d15h]
KASAN: slab-out-of-bounds Read in gether_get_ifname usb prio:normal 17 syz, C 21 5d21h 2d18h PATCH [1d17h]
general protection fault in wcove_typec_probe usb prio:low 2 11 5d23h 2d18h PATCH [2d11h]
possible deadlock in mdc800_device_open usb prio:high 4 syz, C error 221 2d12h 2d18h
WARNING in drm_plane_create_rotation_property dri usb prio:high -1 syz, C error 8 23h27m 3d12h PATCH [9h56m]
general protection fault in bus_remove_device usb prio:high 2 syz, C 3 6d13h 4d09h PATCH [3d05h]
memory leak in __usbhid_submit_report (2) input usb prio:high 3 syz, C 1 8d19h 4d19h PATCH [4d15h]
KASAN: slab-out-of-bounds Read in drm_property_add_enum dri usb 17 syz, C error 55 4h32m 5d01h PATCH [10h33m]
general protection fault in fsg_common_set_num_buffers prio:low usb 8 syz, C 11 3d10h 6d18h PATCH [5d10h]
INFO: trying to register non-static key in gadget_dev_open usb prio:normal -1 1 11d 7d03h
general protection fault in adsl_state_store prio:low usb 2 C 5 2d12h 7d10h
WARNING: ODEBUG bug in hid_device_remove input usb prio:high -1 syz 23 16h26m 8d17h 💬 2 [7d00h]
WARNING: ODEBUG bug in corsair_remove input usb prio:high -1 syz 75 9h28m 8d17h PATCH [6d19h]
KASAN: slab-use-after-free Read in attach_store usb prio:normal 19 C 2 9d16h 9d16h PATCH [7d19h]
KASAN: slab-use-after-free Read in usa49_glocont_callback prio:high actionable usb 19 C 2 7d10h 10d PATCH [2d10h]
KASAN: slab-use-after-free Read in f_midi2_opts_iface_name_show usb prio:normal 19 12 2d04h 10d PATCH [7d15h]
memory leak in gadget_bind (2) usb prio:low 3 syz, C 1 14d 10d PATCH [1d23h]
possible deadlock in uvcg_frame_dw_frame_interval_store usb prio:low 4 3 1d02h 10d
possible deadlock in uvcg_extension_ba_source_id_show usb prio:low 4 6 15d 11d
BUG: spinlock bad magic in gadget_dev_open usb prio:normal 4 5 11d 11d
possible deadlock in uvcg_default_output_i_terminal_show usb prio:low 4 1 17d 12d
WARNING: kobject bug in pch_udc_remove prio:high usb -1 syz, C 5 12d 12d PATCH [12d]
possible deadlock in uvcg_extension_b_num_controls_store usb prio:low 4 1 17d 13d
general protection fault in uvcg_video_enable prio:high usb 2 C 6 12d 13d PATCH [9d14h]
possible deadlock in tcm_register_callback usb prio:low 4 4 4d07h 14d
WARNING in ttusb_dec_start_feed media usb prio:high -1 syz, C 2 14d 14d
memory leak in hidg_bind usb prio:low 3 syz, C 2 18h10m 14d PATCH [1d23h]
WARNING: refcount bug in trace_suspend_resume (2) usb prio:normal 13 syz, C 2 15d 14d PATCH [12d]
WARNING in i2c_unregister_device usb prio:low -1 syz, C error 24 13d 14d
KASAN: slab-out-of-bounds Read in hid_dump_input input usb prio:high 19 syz, C error 22 10d 15d PATCH [3d00h]
memory leak in usb_copy_descriptors usb prio:low 3 syz, C 1 1d07h 16d PATCH [2d00h]
INFO: trying to register non-static key in usbg_make_tpg usb prio:low -1 4 4d06h 17d
WARNING in trace_suspend_resume/usb_submit_urb (2) usb prio:high -1 3 19d 17d
BUG: unable to handle kernel paging request in nhi_probe usb prio:high 8 syz, C 13 6d14h 18d PATCH [16d]
KASAN: slab-use-after-free Read in sur40_open usb input prio:high 19 syz, C error 44 11d 18d PATCH [3d00h]
BUG: sleeping function called from invalid context in cancel_delayed_work_sync usb prio:high 5 syz, C 6773 now 18d PATCH [6d18h]
BUG: unable to handle kernel paging request in ioread32 usb prio:high 8 syz, C error 65 2d19h 18d
memory leak in f_uac1_opts_c_srate_store usb prio:normal 3 syz, C 1 5d13h 18d PATCH [17d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 3 11d 20d
WARNING in __fsg_is_set usb prio:low -1 1 24d 20d
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) usb prio:high actionable 19 1 24d 20d PATCH [19d]
possible deadlock in tcm_alloc prio:low usb 4 syz, C error 191 1d14h 20d
general protection fault in usb_put_function_instance usb prio:low 2 12 16d 20d PATCH [7d20h]
possible deadlock in uvcg_extension_allow_link usb prio:low 4 syz, C 12 13d 20d
memory leak in f_uac2_opts_p_srate_store usb prio:normal 3 syz, C 1 7d17h 21d PATCH [17d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 5 1d12h 21d PATCH [19d]
KASAN: slab-use-after-free Read in uvcg_extension_drop usb prio:normal actionable 19 3 24d 22d PATCH [19d]
general protection fault in dummy_udc_stop usb prio:low 8 21 2h48m 22d
general protection fault in emi26_probe prio:low usb 17 syz, C error 15 6d19h 22d
WARNING in ttusb_dec_send_command media usb prio:high -1 syz, C 116 59m 23d PATCH [20d]
general protection fault in mon_notify usb prio:high 2 syz, C 4 12d 23d PATCH [22d]
general protection fault in rebind_store prio:low usb 8 syz, C 30 1d01h 23d PATCH [3d16h]
KASAN: slab-use-after-free Read in vhci_cleanup_unlink_list usb prio:normal 19 syz, C error 244 1d00h 23d PATCH [20d]
KASAN: slab-use-after-free Write in pn_bind prio:normal usb 22 syz 41 2d18h 23d PATCH [18d]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 58 8d23h 23d PATCH [18d]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 3 6d15h 23d
WARNING in f_midi_free usb prio:low -1 9 3d00h 23d PATCH [7d15h]
KASAN: slab-use-after-free Read in vhci_shutdown_connection usb prio:normal 19 syz, C 207 9h55m 23d
KASAN: slab-use-after-free Write in put_dev usb prio:normal 22 syz 2 15d 23d PATCH [20d]
KASAN: slab-use-after-free Write in gadgetfs_bind usb prio:normal 22 syz, C error 30 13h53m 23d PATCH [18d]
memory leak in uvcg_extension_ba_source_id_store usb prio:low 3 syz, C 1 24d 23d PATCH [19d]
WARNING in usb_ep_enable usb prio:high -1 syz, C done 548 1h20m 23d PATCH [21d]
WARNING: locking bug in gadget_dev_open usb prio:normal 4 4 2d17h 23d
KASAN: slab-use-after-free Read in find_endpoint usb prio:normal 19 46 6h13m 23d
KASAN: slab-use-after-free Read in gadget_dev_open usb prio:normal 19 syz, C 50 15h49m 23d
KASAN: slab-use-after-free Read in ep_open usb prio:normal 19 syz, C done 61 2h54m 24d PATCH [23d]
WARNING in usbg_make_tpg usb prio:low -1 3 12d 24d
memory leak in f_uac2_opts_c_srate_store usb prio:low 3 syz, C 1 11d 24d PATCH [21d]
kernel BUG in register_netdevice prio:low usb -1 syz, C done 86 10h05m 25d 💬 1 [3d19h]
KASAN: invalid-free in f_uac2_opts_p_srate_store usb prio:normal 24 syz, C error 135 13h12m 25d PATCH [19d]
KASAN: invalid-free in f_uac2_opts_c_srate_store usb prio:normal 24 syz, C error 100 4h40m 25d PATCH [19d]
KASAN: slab-out-of-bounds Read in dummy_free_request prio:normal usb 17 159 1d05h 26d
general protection fault in start_dirop prio:low usb fs 2 syz, C 13 11h26m 26d PATCH [22d]
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 13 6d17h 26d
possible deadlock in uvc_func_allow_link prio:low usb fs 4 14 1d17h 26d
KASAN: slab-use-after-free Read in stub_rx_loop prio:high usb 19 9 30d 26d
general protection fault in dummy_udc_start prio:low usb 10 syz, C error 11028 now 26d PATCH [25d]
general protection fault in dummy_set_selfpowered prio:low usb 10 syz, C error 1360 13m 26d
KASAN: slab-use-after-free Read in raw_process_ep0_io prio:normal usb 19 syz, C 32 13h38m 26d PATCH [19d]
general protection fault in f_midi2_free_ep_reqs prio:high usb 10 syz, C 581 6h08m 26d PATCH [25d]
general protection fault in dummy_queue prio:low usb 19 574 2h15m 26d
KASAN: global-out-of-bounds Read in usb_copy_descriptors prio:high usb 17 425 53m 26d PATCH [22d]
general protection fault in f_midi2_stop_eps prio:high usb 2 syz, C error 507 3h17m 26d PATCH [25d]
KASAN: invalid-free in dev_free (4) prio:normal usb 24 1 32d 28d
WARNING in cm109_input_ev/usb_submit_urb (2) prio:low input usb -1 syz 1 33d 29d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C 2706 39m 39d 💬 3 [23d]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 11h24m 50d PATCH [39d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm usb input 1 syz, C error error 1 57d 55d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 76 14d 55d PATCH [43d]
WARNING in igorplugusb_cmd/usb_submit_urb prio:low media usb -1 syz, C 1 89d 86d PATCH [67d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 21 7d21h 108d PATCH [57d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 38 14d 127d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error 91 42d 150d PATCH [82d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1157 2d11h 150d PATCH [82d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 9 119d 153d PATCH [85d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2706 12h36m 157d PATCH [157d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error 2364 46d 157d PATCH [111d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 34d 189d PATCH [53d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 349 3h00m 215d PATCH [86d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 syz, C error error 8 9d14h 224d 💬 10 [222d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 149d 230d 💬 1 [149d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 31 1d10h 245d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 19 5d09h 262d PATCH [99d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 253d 266d PATCH [245d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 33 3d11h 297d PATCH [45d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1192 22h24m 314d PATCH [56d]
general protection fault in count_matching_names (2) usb 2 syz 6 83d 317d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 28 4d23h 338d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 272 2d19h 367d PATCH [177d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 595 13h28m 368d PATCH [62d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 syz, C error 109 7d11h 377d
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 51 14h26m 404d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 157 2d02h 429d PATCH [31d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 490 15h41m 449d PATCH [101d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz 177 3d05h 456d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 794 14m 458d PATCH [272d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 syz, C error 415 1d03h 477d PATCH [467d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 68d 478d PATCH [475d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 373 4h25m 486d PATCH [440d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 20d 490d PATCH [279d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 10d 511d PATCH [313d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 756 3h55m 517d PATCH [440d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 409d 542d
general protection fault in status_show prio:high usb 2 syz, C 16 62d 583d PATCH [431d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz, C error 1137 now 602d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 389d 677d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 24 13d 680d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 371 11d 709d PATCH [289d]
WARNING in enable_work prio:high usb media -1 syz, C error 1832 5d21h 732d 💬 2 [50d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7493 4h44m 813d PATCH [115d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 104 4d19h 817d
INFO: rcu detected stall in schedule (7) usb 1 syz, C done error 72 41d 818d
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error 270 4d09h 879d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 372 1d07h 884d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 21h12m 923d 💬 2 [849d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 26 2d12h 1070d 💬 1 [30d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 445 13h56m 1098d 💬 1 [19d]
INFO: rcu detected stall in console_callback input usb serial 1 syz, C error error 18 217d 1100d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 130 9d12h 1110d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 720 1d03h 1170d 💬 4 [899d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 76d 1178d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1156 3d18h 1244d 💬 16 [113d]
INFO: task hung in hub_event (3) prio:high usb 1 C 988 8h24m 1317d 💬 12 [17d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 862 519d 1340d 💬 14 [646d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 219d 1357d 💬 5 [300d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 221 1d18h 1422d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 8d00h 1812d PATCH [20d]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 130d 2015d PATCH [1805d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 3911 17h28m 2062d PATCH [1799d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3328 37m 2063d 💬 1 [113d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: stack-out-of-bounds Write in append_midi1_out_jack usb 21 4 3d12h 6h30m
KASAN: stack-out-of-bounds Write in f_midi2_create_usb_configs usb prio:normal 21 3 6d03h 2d18h
BUG: unable to handle kernel paging request in iowrite32 usb prio:high 8 1 19d 14d
general protection fault in usbg_submit_command usb prio:high 2 1 19d 14d
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small usb prio:high 10 4 21d 18d
KCSAN: data-race in event_handler / usbip_stop_eh usb prio:high race:benign 6 1 18d 18d
BUG: unable to handle kernel paging request in gs_close usb prio:low 8 4 9d08h 19d
BUG: unable to handle kernel paging request in dummy_enable usb prio:low 8 3 17d 19d
KASAN: slab-out-of-bounds Read in free_netdev usb prio:normal 19 2 15d 23d
general protection fault in dummy_wakeup usb prio:low 2 2 11d 25d
KCSAN: data-race in mon_reader_add / usb_hcd_submit_urb (3) race:benign prio:low usb 6 1 35d 35d
general protection fault in mon_text_release prio:normal usb 10 3 36d 135d