usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 442
Parent subsystem(s): kernel (97)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
memory leak in usb_copy_descriptors usb prio:low 3 syz, C 1 5d00h 1d00h
KASAN: slab-use-after-free Read in trace_event_raw_event_udc_log_req usb 19 1 4d09h 1d19h
INFO: trying to register non-static key in usbg_make_tpg usb -1 3 3h12m 1d19h
WARNING in trace_suspend_resume/usb_submit_urb (2) usb prio:high -1 3 3d16h 1d19h
BUG: unable to handle kernel paging request in nhi_probe usb 8 syz, C 4 3d15h 2d11h PATCH [21h21m]
WARNING in spcp8x5_get_msr prio:low usb -1 syz, C 19 1h08m 2d11h PATCH [1d21h]
KASAN: slab-use-after-free Read in sur40_open usb input 19 syz, C error 14 2h45m 2d11h PATCH [2d03h]
BUG: sleeping function called from invalid context in cancel_delayed_work_sync usb 5 syz, C 29 1d04h 2d12h
BUG: unable to handle kernel paging request in ioread32 usb 8 syz, C 60 3d14h 2d12h
memory leak in f_uac1_opts_c_srate_store usb prio:normal 3 syz, C 1 7d08h 3d08h PATCH [1d22h]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 2 2d16h 4d09h
WARNING in __fsg_is_set usb prio:low -1 1 8d10h 4d10h
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) usb prio:high actionable 19 1 8d21h 4d10h PATCH [3d18h]
possible deadlock in tcm_alloc prio:low usb 4 syz, C 145 2d18h 5d00h
general protection fault in usb_put_function_instance usb prio:low 2 12 21h37m 5d01h
possible deadlock in uvcg_extension_allow_link usb prio:low 4 syz, C 8 8d18h 5d01h
memory leak in f_uac2_opts_p_srate_store usb prio:normal 3 syz, C 1 9d15h 5d15h PATCH [2d01h]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 4 6d21h 6d07h PATCH [3d17h]
KASAN: slab-use-after-free Read in uvcg_extension_drop usb prio:normal actionable 19 3 9d00h 6d10h PATCH [3d18h]
general protection fault in dummy_udc_stop usb prio:low 8 8 7h37m 6d11h
general protection fault in emi26_probe prio:low usb 2 syz, C error 14 5d08h 6d11h
WARNING in ttusb_dec_send_command media usb prio:high -1 syz, C 47 24m 7d10h PATCH [4d18h]
general protection fault in mon_notify usb prio:high 2 syz, C 4 11d 7d10h PATCH [7d01h]
general protection fault in rebind_store usb prio:low 2 18 3h17m 7d10h PATCH [19h45m]
KASAN: slab-use-after-free Read in vhci_cleanup_unlink_list usb prio:normal 19 syz, C error 162 1d01h 7d10h PATCH [4d20h]
KASAN: slab-use-after-free Write in pn_bind usb prio:normal 22 16 1d02h 7d11h PATCH [3d07h]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 54 3h25m 7d11h PATCH [3d04h]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 2 1h34m 7d11h
WARNING in f_midi_free usb prio:low -1 2 5d15h 7d11h
KASAN: slab-use-after-free Read in vhci_shutdown_connection usb prio:normal 19 syz, C 130 3h50m 7d11h
KASAN: slab-use-after-free Write in put_dev usb prio:normal 22 syz 2 2h45m 7d11h PATCH [4d21h]
KASAN: slab-use-after-free Write in gadgetfs_bind usb prio:normal 22 syz, C error 18 5h36m 7d18h PATCH [2d21h]
memory leak in uvcg_extension_ba_source_id_store usb prio:low 3 syz, C 1 8d17h 7d18h PATCH [4d04h]
WARNING in usb_ep_enable usb prio:high -1 syz, C done 198 3h22m 7d18h PATCH [5d17h]
WARNING: locking bug in gadget_dev_open usb 4 1 12d 8d04h
KASAN: slab-use-after-free Read in find_endpoint usb prio:normal 19 14 7d10h 8d04h
KASAN: slab-use-after-free Read in gadget_dev_open usb prio:normal 19 syz, C 23 9h35m 8d05h
KASAN: slab-use-after-free Read in ep_open usb prio:normal 19 syz, C 29 2h02m 8d09h PATCH [7d12h]
WARNING in usbg_make_tpg usb prio:low -1 2 8d21h 8d11h
memory leak in f_uac2_opts_c_srate_store usb prio:low 3 syz, C 1 12d 8d11h PATCH [6d07h]
memory leak in try_get_usb_function_instance usb prio:low 3 syz, C 1 12d 8d22h PATCH [5d04h]
kernel BUG in register_netdevice usb prio:low -1 25 1h07m 9d11h
KASAN: invalid-free in f_uac2_opts_p_srate_store usb prio:normal 24 syz, C error 75 8h30m 9d11h PATCH [3d17h]
KASAN: invalid-free in f_uac2_opts_c_srate_store usb prio:normal 24 syz, C 50 44m 10d PATCH [3d17h]
KASAN: slab-out-of-bounds Read in dummy_free_request usb prio:normal 17 144 7h02m 10d
general protection fault in usbtest_probe usb prio:low 8 syz, C 16 6d08h 10d PATCH [1d19h]
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C 9 1d11h 10d
possible deadlock in uvc_func_allow_link usb prio:low 4 7 16h38m 10d
KASAN: slab-use-after-free Read in lockref_get (2) fs usb prio:high 19 syz, C error 10 1h39m 10d
KASAN: slab-use-after-free Read in stub_rx_loop usb prio:high 19 9 14d 10d
general protection fault in dummy_udc_start usb prio:low 10 syz, C error 3624 10m 10d PATCH [9d21h]
general protection fault in dummy_set_selfpowered usb prio:low 10 syz, C error 627 1h13m 10d
KASAN: slab-use-after-free Read in raw_process_ep0_io prio:normal usb 19 syz, C 11 1d22h 10d PATCH [3d19h]
general protection fault in f_midi2_free_ep_reqs usb prio:high 10 syz, C 364 3h48m 10d PATCH [9d15h]
general protection fault in dummy_queue usb prio:low 10 216 7h14m 10d
KASAN: global-out-of-bounds Read in usb_copy_descriptors usb prio:high 17 311 5h38m 10d PATCH [6d14h]
general protection fault in f_midi2_stop_eps usb prio:high 2 syz, C error 364 5h11m 10d PATCH [9d15h]
possible deadlock in uvcg_streaming_header_allow_link usb prio:low 4 syz, C error 297 3h03m 10d
general protection fault in uvcg_video_init usb prio:low 8 77 21h57m 10d PATCH [4d02h]
KASAN: invalid-free in dev_free (4) usb prio:normal 24 1 16d 12d
WARNING in cm109_input_ev/usb_submit_urb (2) input usb prio:low -1 syz 1 17d 13d
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 12d 35d PATCH [23d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm usb input 1 syz, C error error 1 41d 39d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 75 2d00h 39d PATCH [27d]
WARNING in igorplugusb_cmd/usb_submit_urb prio:low media usb -1 syz, C 1 73d 70d PATCH [52d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 20 6d01h 92d PATCH [41d]
KASAN: stack-out-of-bounds Write in carl9170_handle_command_response prio:high usb wireless 21 syz, C 105 12d 106d PATCH [25d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 37 3d06h 112d
KASAN: slab-use-after-free Read in hiddev_disconnect (4) actionable prio:high usb input 19 2 91d 129d PATCH [39d]
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error 91 27d 135d PATCH [66d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1157 1d08h 135d PATCH [66d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 9 103d 137d PATCH [69d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2607 2h17m 142d PATCH [141d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error 2364 30d 142d PATCH [95d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 19d 173d PATCH [38d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 189 4h53m 199d PATCH [70d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 syz, C error error 8 104d 208d 💬 10 [206d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 134d 215d 💬 1 [133d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 29 20d 229d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 19 20d 246d PATCH [83d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 237d 250d PATCH [229d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 24 5d19h 281d PATCH [30d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1088 41m 299d PATCH [41d]
general protection fault in count_matching_names (2) usb 2 syz 6 68d 301d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 25 64d 323d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 266 9d02h 351d PATCH [161d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 578 19h05m 352d PATCH [46d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 syz, C error 108 5d15h 362d
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 41 23h06m 388d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 154 25d 414d PATCH [15d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 474 18h00m 434d PATCH [85d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 157 1d13h 441d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 741 1d01h 443d PATCH [256d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 syz, C error 404 12h08m 461d PATCH [451d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 52d 462d PATCH [459d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 358 14h54m 470d PATCH [425d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 5d05h 474d PATCH [263d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 13d 496d PATCH [298d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 751 5d12h 501d PATCH [425d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 393d 527d
general protection fault in status_show prio:high usb 2 syz, C 16 46d 568d PATCH [416d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz error 31 10d 587d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 373d 661d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 23 320d 665d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 366 1h35m 693d PATCH [273d]
WARNING in enable_work prio:high usb -1 syz, C error 1827 3d09h 717d 💬 2 [35d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7399 1d04h 797d PATCH [100d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 102 21d 802d
INFO: rcu detected stall in schedule (7) usb 1 syz, C done error 72 25d 802d
WARNING in kernfs_get (5) prio:high usb kernfs -1 syz inconclusive 753 26d 822d 💬 3 [37d]
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error 260 19h32m 863d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 367 12h48m 868d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 6d13h 907d 💬 2 [833d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 24 11d 1054d 💬 1 [15d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 440 15d 1082d 💬 1 [3d22h]
INFO: rcu detected stall in console_callback usb input serial 1 syz, C error error 18 201d 1084d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 130 10d 1094d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 686 1d21h 1155d 💬 4 [884d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 61d 1162d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1151 8d11h 1228d 💬 16 [97d]
INFO: task hung in hub_event (3) prio:high usb 1 C 965 16h39m 1301d 💬 12 [2d02h]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 862 503d 1325d 💬 14 [630d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 204d 1341d 💬 5 [285d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 219 16h59m 1406d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 16d 1796d PATCH [5d00h]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 114d 1999d PATCH [1789d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 3874 2h57m 2047d PATCH [1783d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3286 27m 2047d 💬 1 [97d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in attach_store usb 19 1 6d00h 2d00h
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small usb prio:high 10 4 5d19h 2d11h
KCSAN: data-race in event_handler / usbip_stop_eh usb 6 1 2d21h 2d21h
BUG: unable to handle kernel paging request in gs_close usb prio:low 8 2 1d12h 3d09h
general protection fault in fsg_common_set_num_buffers usb 2 2 17h49m 3d10h
BUG: unable to handle kernel paging request in dummy_enable usb prio:low 8 3 2d02h 3d11h
general protection fault in adsl_state_store usb prio:low 2 2 9d01h 5d01h
KASAN: slab-out-of-bounds Read in free_netdev usb prio:normal 19 2 1h56m 7d10h
BUG: spinlock bad magic in gadget_dev_open usb 4 3 12d 8d05h
general protection fault in dummy_wakeup usb prio:low 2 1 13d 9d11h
KCSAN: data-race in mon_reader_add / usb_hcd_submit_urb (3) usb race:benign prio:low 6 1 19d 19d
general protection fault in mon_text_release prio:normal usb 10 3 20d 120d