usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 461
Parent subsystem(s): kernel (122)
Child subsystems: usb-storage (5)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in ucsi_acpi_probe (2) usb 2 syz, C 17 2h53m 2h41m
WARNING in service_outstanding_interrupt/usb_submit_urb (2) usb prio:high -1 1 7d04h 3d03h
WARNING in v4l2_ctrl_auto_cluster media usb prio:high -1 syz, C 2 6d19h 6d01h PATCH [3d10h]
INFO: task hung in pn533_usb_probe nfc usb prio:high 1 syz, C error 2 8d12h 6d22h PATCH [4d07h]
KASAN: use-after-free Read in pn533_acr122_is_rx_frame_valid usb nfc prio:high 19 syz, C 19 8h56m 9d10h PATCH [2d20h]
INFO: task hung in usb_register_dev (3) prio:high usb 1 syz, C error 15 1d07h 10d PATCH [7d16h]
WARNING: suspicious RCU usage in phy_detach net usb prio:high 4 syz 5 1d02h 11d
KASAN: slab-use-after-free Read in roccat_disconnect prio:high input usb 19 syz, C 13 7d04h 12d PATCH [11d]
INFO: task hung in em28xx_i2c_unregister prio:high i2c usb 1 syz 30 11d 14d 💬 1 [13d]
BUG: unable to handle kernel paging request in gs_close prio:low usb 8 6 14d 14d
KASAN: slab-use-after-free Write in keyspan_close usb prio:high 22 syz, C 1 1d14h 15d PATCH [4d11h]
WARNING in cx231xx_send_vendor_cmd/usb_submit_urb usb prio:low -1 syz, C error 6 6d01h 15d PATCH [6d20h]
memory leak in nci_send_cmd usb nfc net prio:high 3 syz, C 4 8d04h 15d PATCH [6d04h]
KASAN: slab-use-after-free Read in k90_record_led_work usb input prio:high actionable 19 4 12d 16d PATCH [3d07h]
possible deadlock in fifo_open (2) usb prio:low 4 1 20d 16d
KASAN: slab-use-after-free Read in k90_backlight_work input usb prio:high 19 11 14d 17d PATCH [17h41m]
KASAN: slab-use-after-free Read in sd_stopN media usb prio:high 19 syz 1 5d19h 18d PATCH [6d14h]
KASAN: slab-out-of-bounds Write in gb_operation_message_alloc greybus usb prio:high 21 syz, C error 40 1d09h 18d PATCH [10d]
WARNING in drm_mode_config_validate usb dri prio:high -1 syz, C error 36 8d21h 18d 💬 1 [17d]
KASAN: slab-use-after-free Read in roccat_open input usb prio:high 19 syz, C 2 10d 18d 💬 2 [12h50m]
UBSAN: shift-out-of-bounds in __vcc_connect net usb prio:high -1 syz 2 23d 19d
KASAN: stack-out-of-bounds Write in append_midi1_out_jack usb prio:normal 21 C 6 5d09h 19d PATCH [13d]
INFO: task hung in usb_set_configuration prio:high usb input 1 syz 2 25d 21d PATCH [19d]
INFO: task hung in unbind_store prio:high usb 1 syz, C error 11 19d 22d 💬 7 [18d]
KASAN: slab-use-after-free Write in usb_giveback_urb_bh usb prio:high actionable 22 2 25d 22d PATCH [22d]
possible deadlock in lookup_open usb prio:low 4 85 4d22h 23d
KASAN: slab-use-after-free Read in dummy_timer usb prio:normal 19 30 9h45m 23d
INFO: trying to register non-static key in edge_bulk_in_callback usb prio:high -1 1 28d 24d
INFO: trying to register non-static key in u_audio_get_playback_srate usb prio:high -1 1 28d 24d PATCH [2d22h]
KASAN: slab-out-of-bounds Read in gether_get_ifname usb prio:normal 17 syz, C 21 12d 24d PATCH [2d00h]
possible deadlock in mdc800_device_open usb prio:high 4 syz, C error 226 7h58m 24d PATCH [5d23h]
general protection fault in bus_remove_device prio:high usb 2 syz, C 7 2d20h 26d PATCH [25d]
memory leak in __usbhid_submit_report (2) prio:high input usb 3 syz, C 1 14d 26d PATCH [26d]
general protection fault in drm_object_attach_property usb dri 8 syz, C error 48 4d04h 28d PATCH [28d]
INFO: trying to register non-static key in gadget_dev_open prio:normal usb -1 1 33d 29d
general protection fault in adsl_state_store prio:low usb 2 C 9 1d01h 29d PATCH [4d11h]
WARNING: ODEBUG bug in hid_device_remove prio:high input usb -1 syz, C error 51 2d12h 30d 💬 2 [14d]
WARNING: ODEBUG bug in corsair_remove prio:high input usb -1 syz, C done 614 2h10m 30d PATCH [3d07h]
KASAN: slab-use-after-free Read in attach_store prio:normal usb 19 C 2 31d 31d PATCH [11d]
memory leak in gadget_bind (2) prio:low usb 3 syz, C 1 20d 32d PATCH [23d]
possible deadlock in uvcg_extension_ba_source_id_show prio:low usb 4 6 37d 32d
BUG: spinlock bad magic in gadget_dev_open prio:normal usb 4 11 1d15h 33d
possible deadlock in uvcg_default_output_i_terminal_show prio:low usb 4 1 39d 33d
possible deadlock in uvcg_extension_b_num_controls_store prio:low usb 4 1 39d 34d
general protection fault in uvcg_video_enable prio:high usb 2 C 8 7d02h 34d PATCH [31d]
WARNING in ttusb_dec_start_feed prio:high media usb -1 syz, C 2 16d 36d
memory leak in hidg_bind prio:low usb 3 syz, C 2 22d 36d PATCH [23d]
WARNING: refcount bug in trace_suspend_resume (2) prio:normal usb 13 syz, C 5 14d 36d PATCH [34d]
WARNING in i2c_unregister_device prio:low usb -1 syz, C error 24 34d 36d
KASAN: slab-use-after-free Read in input_dev_uevent (2) prio:high usb input 19 syz, C error 19 4h26m 36d
KASAN: slab-out-of-bounds Read in hid_dump_input prio:high input usb 19 syz, C error 22 32d 37d PATCH [3d10h]
memory leak in usb_copy_descriptors prio:low usb 3 syz, C 1 23d 38d PATCH [3d15h]
INFO: trying to register non-static key in usbg_make_tpg prio:low usb -1 4 26d 39d
WARNING in trace_suspend_resume/usb_submit_urb (2) prio:high nfc usb -1 3 41d 39d
INFO: trying to register non-static key in as102_stream_ctrl prio:high usb media -1 syz, C error 52 18h51m 39d PATCH [5d09h]
KASAN: slab-use-after-free Read in sur40_open prio:high usb input 19 syz, C error 44 32d 40d PATCH [24d]
BUG: sleeping function called from invalid context in cancel_delayed_work_sync prio:high usb mmc 10 syz, C 29510 now 40d PATCH [11h39m]
BUG: sleeping function called from invalid context in mmc_free_host prio:high usb mmc 5 syz, C error 5003 31m 40d PATCH [26d]
KASAN: slab-use-after-free Read in rc_dev_uevent prio:high usb media 19 syz, C error 95 6m 40d PATCH [39d]
WARNING in port100_send_cmd_async/usb_submit_urb (3) prio:high usb nfc -1 syz, C error 325 3d01h 40d
possible deadlock in mnt_want_write (9) prio:low usb 4 syz, C 75 4d13h 40d
memory leak in f_uac1_opts_c_srate_store prio:normal usb 3 syz, C 1 27d 40d PATCH [39d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 5 10d 41d PATCH [9d23h]
WARNING in as102_stream_ctrl prio:low usb media -1 syz, C 91 21h37m 41d
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) prio:high actionable usb 19 1 46d 41d PATCH [4d11h]
possible deadlock in tcm_alloc prio:low usb 4 syz, C error 264 8d18h 42d
possible deadlock in uvcg_extension_allow_link prio:low usb 4 syz, C 13 18d 42d
memory leak in f_uac2_opts_p_srate_store prio:normal usb 3 syz, C 1 29d 43d PATCH [39d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 6 17d 43d PATCH [41d]
KASAN: slab-use-after-free Read in uvcg_extension_drop prio:normal actionable usb 19 5 9d00h 43d PATCH [41d]
general protection fault in dummy_udc_stop prio:low usb 8 24 19d 44d
general protection fault in emi26_probe prio:low usb 17 syz, C error 17 20d 44d 💬 1 [12d]
WARNING in ttusb_dec_send_command prio:high usb media -1 syz, C 210 3h23m 44d PATCH [42d]
general protection fault in rebind_store prio:low usb 8 syz, C 58 4d03h 44d PATCH [14d]
KASAN: slab-use-after-free Write in pn_bind prio:normal usb 22 syz 50 4d21h 44d PATCH [4d07h]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 58 2d08h 44d PATCH [40d]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 3 14d 45d PATCH [4d15h]
KASAN: slab-use-after-free Read in vhci_shutdown_connection prio:normal usb 19 syz, C 221 18d 45d PATCH [6d10h]
KASAN: slab-use-after-free Write in put_dev prio:normal usb 22 syz 5 9d01h 45d PATCH [42d]
KASAN: slab-use-after-free Write in gadgetfs_bind prio:normal usb 22 syz, C error 170 5h38m 45d PATCH [40d]
memory leak in uvcg_extension_ba_source_id_store prio:low usb 3 syz, C 1 46d 45d PATCH [41d]
WARNING in usb_ep_enable prio:high usb -1 syz, C done 772 10h10m 45d PATCH [43d]
WARNING: locking bug in gadget_dev_open prio:normal usb 4 4 24d 45d
KASAN: slab-use-after-free Read in find_endpoint prio:normal usb 19 111 10h38m 45d
KASAN: slab-use-after-free Read in gadget_dev_open prio:normal usb 19 syz, C 183 16h52m 45d
KASAN: slab-use-after-free Read in ep_open prio:normal usb 19 syz, C done 156 1h33m 45d PATCH [45d]
WARNING in usbg_make_tpg prio:low usb -1 3 34d 45d
memory leak in f_uac2_opts_c_srate_store prio:low usb 3 syz, C 1 32d 45d PATCH [43d]
kernel BUG in register_netdevice prio:low usb -1 syz, C done 106 5d15h 46d 💬 2 [19d]
KASAN: invalid-free in f_uac2_opts_p_srate_store prio:normal usb 24 syz, C error 156 17d 46d PATCH [41d]
KASAN: invalid-free in f_uac2_opts_c_srate_store prio:normal usb 24 syz, C error 117 17d 47d PATCH [41d]
KASAN: slab-out-of-bounds Read in dummy_free_request prio:normal usb 17 162 18d 47d
general protection fault in start_dirop prio:low usb fs 2 syz, C 20 16d 47d PATCH [44d]
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 14 12d 47d
possible deadlock in uvc_func_allow_link prio:low usb fs 4 17 16d 47d
KASAN: slab-use-after-free Read in stub_rx_loop prio:high usb 19 C 10 5d04h 48d PATCH [18d]
general protection fault in dummy_udc_start prio:low usb 10 syz, C error 12268 4d08h 48d PATCH [47d]
general protection fault in dummy_set_selfpowered prio:low usb 10 syz, C error 1486 4d09h 48d
general protection fault in f_midi2_free_ep_reqs prio:high usb 10 syz, C 935 7d04h 48d PATCH [47d]
general protection fault in dummy_queue prio:low usb 19 643 22h23m 48d
KASAN: global-out-of-bounds Read in usb_copy_descriptors prio:high usb 17 512 6d11h 48d PATCH [44d]
KASAN: invalid-free in dev_free (4) prio:normal usb 24 1 54d 50d
WARNING in cm109_input_ev/usb_submit_urb (2) prio:low input usb -1 syz 1 55d 51d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C 3514 3h10m 61d 💬 3 [10d]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 22d 72d PATCH [60d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm input usb 1 syz, C error error 1 79d 77d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 76 36d 77d PATCH [65d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 22 8m 130d PATCH [78d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 39 9d11h 149d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 91 64d 172d PATCH [104d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1157 24d 172d PATCH [104d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 27 8d07h 175d PATCH [106d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2713 20d 179d PATCH [179d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error error 2364 68d 179d PATCH [133d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 56d 211d PATCH [75d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 364 4d21h 237d PATCH [108d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 syz, C error error 9 15d 246d 💬 10 [244d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 171d 252d 💬 1 [171d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 33 17d 266d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 19 27d 283d PATCH [121d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 275d 288d PATCH [267d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 35 7d07h 319d PATCH [67d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1300 1h21m 336d PATCH [78d]
general protection fault in count_matching_names (2) usb 2 syz 6 105d 339d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 29 11d 360d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 272 8d03h 388d PATCH [199d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 598 8d10h 389d PATCH [83d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 syz, C error 111 11d 399d
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 57 20d 426d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 159 17d 451d PATCH [53d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 524 1d04h 471d PATCH [122d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz 193 1d23h 478d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 840 1d19h 480d PATCH [294d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 syz, C error 426 now 499d PATCH [489d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 90d 500d PATCH [496d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 400 1d19h 508d PATCH [462d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 13d 511d PATCH [301d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 12d 533d PATCH [335d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 782 2d13h 539d PATCH [462d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 431d 564d
general protection fault in status_show prio:high usb 2 syz, C 16 84d 605d PATCH [453d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz, C error 3346 18h44m 624d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 411d 699d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 25 18d 702d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 383 6h58m 731d PATCH [311d]
WARNING in enable_work prio:high usb media -1 syz, C error 1834 1d04h 754d 💬 2 [10d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7535 1h52m 834d PATCH [9d13h]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 104 26d 839d
INFO: rcu detected stall in schedule (7) usb 1 syz, C done error 72 63d 840d
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error 270 26d 901d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 376 6d10h 906d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 22d 945d 💬 2 [871d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 26 24d 1092d 💬 1 [21d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 447 14d 1120d 💬 1 [41d]
INFO: rcu detected stall in console_callback input usb serial 1 syz, C error error 18 239d 1122d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 136 6d05h 1132d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 764 8h36m 1192d 💬 4 [921d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 20d 1200d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1166 1d20h 1266d 💬 16 [135d]
INFO: task hung in hub_event (3) prio:high usb 1 C 1029 1h57m 1339d 💬 12 [10d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 863 20d 1362d 💬 14 [668d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 241d 1379d 💬 5 [322d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 236 1d14h 1444d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 5d15h 1834d PATCH [42d]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 152d 2037d PATCH [1827d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 4013 9h32m 2084d PATCH [1821d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3411 1h04m 2085d 💬 1 [135d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: soft lockup in dummy_timer (2) usb prio:normal 1 1 5d17h 1d17h
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] (2) usb -1 1 13d 9d11h
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add (2) usb race:benign prio:low 6 1 11d 11d
KASAN: stack-out-of-bounds Write in f_midi2_create_usb_configs usb prio:normal 21 3 28d 24d
general protection fault in usbg_submit_command prio:high usb 2 1 41d 35d
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small prio:high usb 10 4 43d 40d
KCSAN: data-race in event_handler / usbip_stop_eh prio:high race:benign usb 6 1 40d 40d
BUG: unable to handle kernel paging request in dummy_enable prio:low usb 8 3 39d 40d
KASAN: slab-out-of-bounds Read in free_netdev prio:normal usb 19 2 37d 44d
general protection fault in dummy_wakeup prio:low usb 2 2 33d 46d
general protection fault in mon_text_release prio:normal usb 10 3 58d 157d