usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 482
Parent subsystem(s): kernel (112)
Child subsystems: usb-storage (5)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
kernel BUG in v4l2_device_put media usb prio:high -1 syz, C 1 3d11h 3d01h PATCH [2d06h]
WARNING in ec168_ctrl_msg/usb_submit_urb usb prio:low -1 syz, C 3 10d 6d09h PATCH [1d23h]
general protection fault in saitek_event input usb prio:high 2 syz, C error 20 9d03h 9d17h PATCH [9d10h]
INFO: task hung in usb_device_read prio:normal usb 1 syz, C 21 2d08h 13d PATCH [3d03h]
KASAN: slab-use-after-free Read in printer_func_unbind usb prio:normal actionable 19 2 19d 15d PATCH [19h48m]
BUG: unable to handle kernel paging request in usb_driver_release_interface prio:high usb 8 syz, C 4 3d06h 17d PATCH [14d]
KASAN: slab-use-after-free Write in ffs_data_clear usb prio:normal actionable 22 1 23d 18d PATCH [13d]
WARNING in smsusb_term_device (2) media usb prio:high -1 syz, C error 1 20d 19d PATCH [17d]
KASAN: slab-use-after-free Write in usb_giveback_urb_bh (2) prio:high actionable usb 22 1 30d 25d PATCH [3h51m]
WARNING: held lock freed in device_release_driver_internal prio:high usb media 4 syz, C error 72 6d10h 27d PATCH [24d]
INFO: task hung in usb_deregister_dev (4) prio:high usb 1 45 2d16h 27d
general protection fault in mxl111sf_ep6_streaming_ctrl media usb prio:high 2 syz, C error 5 (+2) 6d12h 28d PATCH [20d]
INFO: task hung in usbdev_ioctl (8) prio:high usb 1 syz, C error 7 6d16h 33d PATCH [31d]
WARNING in ttusb_start_feed/usb_submit_urb prio:high usb media -1 syz, C error 33 5d12h 36d PATCH [36d]
KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req prio:high usb mmc 22 syz, C error 673 45m 37d PATCH [24d]
general protection fault in ucsi_acpi_probe (2) prio:low usb 2 syz, C error 50 2d20h 40d PATCH [33d]
WARNING in service_outstanding_interrupt/usb_submit_urb (2) prio:high usb -1 1 47d 43d
INFO: task hung in pn533_usb_probe prio:high usb nfc 1 syz, C error 6 13d 47d PATCH [44d]
INFO: task hung in usb_register_dev (3) prio:high usb 1 syz, C error 30 19h43m 50d PATCH [47d]
WARNING: suspicious RCU usage in phy_detach prio:high usb net 4 syz 39 2h28m 51d PATCH [22d]
KASAN: slab-use-after-free Read in roccat_disconnect prio:high input usb 19 syz, C error error 20 32d 52d PATCH [5d12h]
BUG: unable to handle kernel paging request in gs_close prio:low usb 8 6 54d 54d PATCH [11d]
memory leak in nci_send_cmd prio:high usb 3 syz, C 6 8d07h 55d PATCH [30d]
KASAN: slab-use-after-free Read in k90_record_led_work prio:high actionable usb input 19 6 31d 56d PATCH [43d]
possible deadlock in fifo_open (2) prio:low usb 4 2 14d 56d
KASAN: slab-use-after-free Read in atkbd_event_work prio:high actionable usb 19 syz, C 8 23d 57d 💬 2 [39d]
KASAN: slab-use-after-free Read in k90_backlight_work prio:high usb input 19 12 7d13h 57d PATCH [40d]
KASAN: slab-use-after-free Read in sd_stopN prio:high media usb 19 syz 1 45d 58d PATCH [46d]
KASAN: slab-out-of-bounds Write in gb_operation_message_alloc prio:high usb greybus 21 syz, C error 176 1h25m 58d PATCH [50d]
WARNING in drm_mode_config_validate prio:high usb dri -1 syz, C error error 36 48d 58d 💬 1 [57d]
KASAN: slab-use-after-free Read in roccat_open prio:high input usb 19 syz, C 2 36d 58d PATCH [5d12h]
UBSAN: shift-out-of-bounds in __vcc_connect prio:high usb net -1 syz 2 63d 59d PATCH [24d]
WARNING: ODEBUG bug in vub300_disconnect prio:high mmc usb -1 syz 110 11h53m 61d PATCH [45d]
INFO: task hung in usb_set_configuration prio:high usb input 1 syz 2 65d 61d PATCH [59d]
INFO: task hung in unbind_store prio:high usb 1 syz, C error 11 5d22h 62d 💬 7 [58d]
possible deadlock in lookup_open prio:low usb 4 syz, C 133 2d02h 63d
KASAN: slab-out-of-bounds Read in aqc_raw_event prio:high input usb hwmon 17 syz, C error 12 17d 63d PATCH [63d]
KASAN: slab-use-after-free Read in dummy_timer prio:normal usb 19 39 18d 63d
INFO: trying to register non-static key in edge_bulk_in_callback prio:high usb -1 1 68d 64d PATCH [1d13h]
INFO: trying to register non-static key in u_audio_get_playback_srate prio:high usb -1 1 68d 64d PATCH [6d14h]
KASAN: slab-out-of-bounds Read in gether_get_ifname prio:normal usb 17 syz, C 21 52d 64d PATCH [42d]
possible deadlock in mdc800_device_open prio:high usb 4 syz, C error 332 58m 64d PATCH [46d]
memory leak in __usbhid_submit_report (2) prio:high input usb 3 syz, C 2 8d15h 66d PATCH [66d]
general protection fault in drm_object_attach_property prio:high usb dri 8 syz, C error 64 2d12h 68d PATCH [68d]
INFO: trying to register non-static key in gadget_dev_open prio:normal usb -1 1 73d 69d
general protection fault in adsl_state_store prio:low usb 2 C 20 23d 69d PATCH [28d]
WARNING: ODEBUG bug in hid_device_remove prio:high input usb -1 syz, C error 52 20d 70d 💬 2 [30d]
WARNING: ODEBUG bug in corsair_remove prio:high input usb -1 syz, C done 873 now 70d PATCH [43d]
KASAN: slab-use-after-free Read in attach_store prio:normal usb 19 C 2 71d 71d PATCH [31d]
memory leak in gadget_bind (2) prio:low usb 3 syz, C 1 60d 72d PATCH [24d]
possible deadlock in uvcg_extension_ba_source_id_show prio:low usb 4 6 77d 73d
BUG: spinlock bad magic in gadget_dev_open prio:normal usb 4 13 17d 73d
possible deadlock in uvcg_default_output_i_terminal_show prio:low usb 4 1 79d 74d
possible deadlock in uvcg_extension_b_num_controls_store prio:low usb 4 1 79d 75d
general protection fault in uvcg_video_enable prio:high usb 2 C 8 47d 75d PATCH [71d]
WARNING in ttusb_dec_start_feed prio:high usb media -1 syz, C 2 56d 76d PATCH [10d]
memory leak in hidg_bind prio:low usb 3 syz, C 2 62d 76d PATCH [63d]
WARNING in i2c_unregister_device prio:low usb -1 syz, C error 61 8h46m 76d PATCH [13d]
memory leak in usb_copy_descriptors prio:low usb 3 syz, C 1 63d 78d PATCH [39d]
INFO: trying to register non-static key in usbg_make_tpg prio:low usb -1 4 66d 79d
INFO: trying to register non-static key in as102_stream_ctrl prio:high usb media -1 syz, C error 129 15m 80d PATCH [45d]
KASAN: slab-use-after-free Read in sur40_open prio:high usb input 19 syz, C error error 44 72d 80d PATCH [6d14h]
KASAN: slab-use-after-free Read in rc_dev_uevent prio:high usb media 19 syz, C error 198 12d 80d PATCH [79d]
WARNING in port100_send_cmd_async/usb_submit_urb (3) prio:high usb nfc -1 syz, C error 347 10d 80d PATCH [28d]
memory leak in f_uac1_opts_c_srate_store prio:normal usb 3 syz, C 1 67d 80d PATCH [79d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C error 5 50d 81d PATCH [6d17h]
WARNING in as102_stream_ctrl prio:low usb media -1 syz, C error 289 9h46m 82d PATCH [30d]
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) prio:high actionable usb 19 1 86d 82d PATCH [44d]
possible deadlock in tcm_alloc prio:low usb 4 syz, C error 548 1d19h 82d PATCH [2d11h]
possible deadlock in uvcg_extension_allow_link prio:low usb 4 syz, C 13 58d 82d PATCH [2d12h]
memory leak in f_uac2_opts_p_srate_store prio:normal usb 3 syz, C 1 69d 83d PATCH [79d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 6 57d 83d PATCH [81d]
KASAN: slab-use-after-free Read in uvcg_extension_drop prio:normal actionable usb 19 C 7 12d 84d PATCH [81d]
general protection fault in dummy_udc_stop prio:low usb 8 24 59d 84d
general protection fault in emi26_probe prio:low usb 17 syz, C error error 17 60d 84d PATCH [15d]
WARNING in ttusb_dec_send_command prio:high usb media -1 syz, C 400 2h19m 85d PATCH [82d]
general protection fault in rebind_store prio:low usb 8 syz, C 66 13h34m 85d PATCH [28d]
KASAN: slab-use-after-free Write in pn_bind prio:normal usb 22 syz, C done 59 13d 85d PATCH [10d]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 58 27d 85d PATCH [80d]
KASAN: slab-use-after-free Read in vhci_shutdown_connection prio:normal usb 19 syz, C error 221 59d 85d PATCH [46d]
KASAN: slab-use-after-free Write in put_dev prio:normal usb 22 syz 5 49d 85d PATCH [82d]
KASAN: slab-use-after-free Write in gadgetfs_bind prio:normal usb 22 syz, C error 209 2d10h 85d PATCH [80d]
memory leak in uvcg_extension_ba_source_id_store prio:low usb 3 syz, C 1 86d 85d PATCH [81d]
WARNING in usb_ep_enable prio:high usb -1 syz, C done 3158 1h08m 85d PATCH [83d]
WARNING: locking bug in gadget_dev_open prio:normal usb 4 4 64d 85d
KASAN: slab-use-after-free Read in find_endpoint prio:normal usb 19 156 3d19h 85d
KASAN: slab-use-after-free Read in gadget_dev_open prio:normal usb 19 syz, C 245 1d07h 85d PATCH [6d09h]
KASAN: slab-use-after-free Read in ep_open prio:normal usb 19 syz, C done 245 25m 86d PATCH [85d]
WARNING in usbg_make_tpg prio:low usb -1 3 74d 86d
memory leak in f_uac2_opts_c_srate_store prio:low usb 3 syz, C 1 73d 86d PATCH [83d]
kernel BUG in register_netdevice prio:low usb -1 syz, C done 149 1d07h 87d PATCH [10d]
KASAN: invalid-free in f_uac2_opts_p_srate_store prio:normal usb 24 syz, C error done 156 57d 87d PATCH [81d]
KASAN: invalid-free in f_uac2_opts_c_srate_store prio:normal usb 24 syz, C error done 117 57d 87d PATCH [81d]
KASAN: slab-out-of-bounds Read in dummy_free_request prio:normal usb 17 162 58d 88d
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 15 7d00h 88d
possible deadlock in uvc_func_allow_link prio:low usb fs 4 C 19 4d16h 88d
KASAN: slab-use-after-free Read in stub_rx_loop prio:high usb 19 C 10 45d 88d PATCH [31d]
general protection fault in dummy_set_selfpowered prio:low usb 10 syz, C error 1486 2d06h 88d
general protection fault in f_midi2_free_ep_reqs prio:high usb 10 syz, C 935 47d 88d PATCH [87d]
general protection fault in dummy_queue prio:low usb 19 643 41d 88d
possible deadlock in configfs_depend_item_unlocked prio:low usb fs 4 syz, C error 6622 6h46m 88d
KASAN: global-out-of-bounds Read in usb_copy_descriptors prio:high usb 17 syz, C error 632 12h33m 88d PATCH [14d]
KASAN: invalid-free in dev_free (4) prio:normal usb 24 2 5d09h 90d
WARNING in cm109_input_ev/usb_submit_urb (2) prio:low input usb -1 syz 1 95d 91d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C 3882 9m 101d 💬 3 [19d]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 20d 112d PATCH [100d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 27 13h52m 170d PATCH [119d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 42 13d 189d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 131 7d05h 212d PATCH [144d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 2357 1h23m 212d PATCH [144d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 31 9d23h 215d PATCH [147d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error error 2713 60d 219d PATCH [219d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error error 2364 108d 219d PATCH [173d]
memory leak in dvb_register_device prio:high usb media 3 syz, C 3 10d 251d PATCH [115d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 364 28d 277d PATCH [148d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb i2c 1 syz, C error error 12 1d07h 286d 💬 10 [284d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 36 23d 306d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error error 19 1d05h 324d PATCH [161d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 315d 328d PATCH [307d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 47 2d21h 359d PATCH [14d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1516 17h55m 376d PATCH [118d]
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 29 1d12h 400d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 284 1d03h 429d PATCH [239d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 603 7d02h 429d PATCH [124d]
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 57 60d 466d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 173 2d18h 491d PATCH [93d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 558 1d04h 511d PATCH [163d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz, C error 241 19h43m 518d PATCH [14d]
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 880 1d03h 520d PATCH [334d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 130d 540d PATCH [537d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 544 2h59m 548d PATCH [502d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 35d 552d PATCH [341d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 53d 573d PATCH [375d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 868 9h24m 579d PATCH [502d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 471d 604d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 451d 739d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 25 59d 742d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 639 2h48m 771d PATCH [351d]
WARNING in enable_work prio:high usb media -1 syz, C error 1840 20d 794d 💬 2 [19d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7694 7m 875d PATCH [49d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 104 66d 879d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 381 5d17h 946d PATCH [2d22h]
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable error 127 62d 985d 💬 2 [911d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 28 3d02h 1132d PATCH [25d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 451 5d15h 1160d 💬 1 [19d]
INFO: rcu detected stall in console_callback input usb serial 1 syz, C error error 18 279d 1162d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 137 28d 1172d PATCH [4d18h]
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 295 (+553) 10h23m 1232d 💬 4 [961d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 60d 1240d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1203 1d18h 1306d PATCH [4d18h]
INFO: task hung in hub_event (3) prio:high usb 1 C 1093 3h16m 1379d PATCH [4d18h]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 863 61d 1402d 💬 14 [708d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 281d 1419d 💬 5 [362d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 247 3d10h 1484d PATCH [2d22h]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 192d 2077d PATCH [1867d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 4110 2d19h 2124d PATCH [1861d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3517 7h47m 2125d 💬 1 [175d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb (6) usb race:benign prio:low 6 1 26d 26d
KASAN: slab-use-after-free Write in dev_config usb 22 2 34d 30d
general protection fault in usb_ep_alloc_request prio:low usb 2 2 42d 38d
BUG: soft lockup in dummy_timer (2) prio:normal usb 1 1 45d 41d
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] (2) prio:high usb -1 1 53d 49d
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add (2) race:benign prio:low usb 6 1 51d 51d
KASAN: stack-out-of-bounds Write in f_midi2_create_usb_configs prio:normal usb 21 3 68d 64d
general protection fault in usbg_submit_command prio:high usb 2 1 81d 76d
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small prio:high usb 10 4 83d 80d
BUG: unable to handle kernel paging request in dummy_enable prio:low usb 8 3 79d 81d
KASAN: slab-out-of-bounds Read in free_netdev prio:normal usb 19 2 77d 85d
general protection fault in dummy_wakeup prio:low usb 2 2 73d 87d