usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 447
Parent subsystem(s): kernel (108)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in fsg_common_set_num_buffers prio:low usb 2 syz, C 9 1d12h 1d15h PATCH [6h46m]
INFO: trying to register non-static key in gadget_dev_open usb prio:normal -1 1 5d23h 1d23h
general protection fault in adsl_state_store prio:low usb 2 C 3 2d06h 2d06h
WARNING: ODEBUG bug in hid_device_remove input usb prio:high -1 syz 15 5h37m 3d14h 💬 2 [1d20h]
WARNING: ODEBUG bug in corsair_remove input usb prio:high -1 syz 28 5h00m 3d14h PATCH [1d15h]
KASAN: slab-use-after-free Read in attach_store usb prio:normal 19 C 2 4d13h 4d13h PATCH [2d15h]
KASAN: slab-use-after-free Read in usa49_glocont_callback prio:high actionable usb 19 C 2 2d06h 4d21h
KASAN: slab-use-after-free Read in f_midi2_opts_iface_name_show usb prio:normal 19 11 2d01h 4d22h PATCH [2d12h]
memory leak in gadget_bind (2) usb prio:low 3 syz, C 1 9d09h 4d22h
possible deadlock in uvcg_frame_dw_frame_interval_store usb 4 2 2d11h 5d11h
possible deadlock in uvcg_extension_ba_source_id_show usb prio:low 4 6 10d 5d22h
BUG: spinlock bad magic in gadget_dev_open usb prio:normal 4 5 5d23h 5d23h
possible deadlock in uvcg_default_output_i_terminal_show usb prio:low 4 1 12d 6d22h
WARNING: kobject bug in pch_udc_remove prio:high usb -1 syz, C 5 7d09h 7d09h PATCH [7d06h]
possible deadlock in uvcg_extension_b_num_controls_store usb prio:low 4 1 12d 7d22h
general protection fault in uvcg_video_enable prio:high usb 2 C 6 7d12h 7d22h PATCH [4d10h]
possible deadlock in tcm_register_callback usb prio:low 4 3 1d12h 8d22h
WARNING in ttusb_dec_start_feed media usb prio:high -1 syz, C 2 9d19h 9d03h
memory leak in hidg_bind usb prio:low 3 syz, C 2 10d 9d03h PATCH [8d12h]
WARNING: refcount bug in trace_suspend_resume (2) usb prio:normal 13 syz, C 2 10d 9d03h PATCH [7d08h]
WARNING in i2c_unregister_device usb prio:low -1 syz, C error 24 7d22h 9d03h
KASAN: slab-out-of-bounds Read in hid_dump_input input usb prio:high 19 syz, C error 22 5d12h 10d PATCH [9d18h]
memory leak in usb_copy_descriptors usb prio:low 3 syz, C 1 15d 11d PATCH [10d]
INFO: trying to register non-static key in usbg_make_tpg usb prio:low -1 3 10d 12d
WARNING in trace_suspend_resume/usb_submit_urb (2) usb prio:high -1 3 14d 12d
BUG: unable to handle kernel paging request in nhi_probe usb prio:high 8 syz, C 13 1d10h 12d PATCH [11d]
KASAN: slab-use-after-free Read in sur40_open usb input prio:high 19 syz, C error 44 5d20h 12d PATCH [12d]
BUG: sleeping function called from invalid context in cancel_delayed_work_sync usb prio:high 5 syz, C 3134 now 13d PATCH [1d14h]
BUG: unable to handle kernel paging request in ioread32 usb prio:high 8 syz, C 64 1d14h 13d
memory leak in f_uac1_opts_c_srate_store usb prio:normal 3 syz, C 1 9h48m 13d PATCH [12d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 3 6d01h 14d
WARNING in __fsg_is_set usb prio:low -1 1 18d 14d
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) usb prio:high actionable 19 1 19d 14d PATCH [14d]
possible deadlock in tcm_alloc prio:low usb 4 syz, C 173 21h45m 15d
general protection fault in usb_put_function_instance usb prio:low 2 12 11d 15d PATCH [2d16h]
possible deadlock in uvcg_extension_allow_link usb prio:low 4 syz, C 12 8d09h 15d
memory leak in f_uac2_opts_p_srate_store usb prio:normal 3 syz, C 1 2d13h 16d PATCH [12d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 4 3d08h 16d PATCH [14d]
KASAN: slab-use-after-free Read in uvcg_extension_drop usb prio:normal actionable 19 3 19d 16d PATCH [14d]
general protection fault in dummy_udc_stop usb prio:low 8 15 13h11m 16d
general protection fault in emi26_probe prio:low usb 17 syz, C error 15 1d15h 16d
WARNING in ttusb_dec_send_command media usb prio:high -1 syz, C 96 4h26m 17d PATCH [15d]
general protection fault in mon_notify usb prio:high 2 syz, C 4 7d10h 17d PATCH [17d]
general protection fault in rebind_store usb prio:low 2 27 4d00h 17d PATCH [6d03h]
KASAN: slab-use-after-free Read in vhci_cleanup_unlink_list usb prio:normal 19 syz, C error 222 7m 17d PATCH [15d]
KASAN: slab-use-after-free Write in pn_bind prio:normal usb 22 syz 31 15m 17d PATCH [13d]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 58 3d20h 17d PATCH [13d]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 3 1d11h 17d
WARNING in f_midi_free usb prio:low -1 8 14h35m 17d PATCH [2d12h]
KASAN: slab-use-after-free Read in vhci_shutdown_connection usb prio:normal 19 syz, C 173 19m 17d
KASAN: slab-use-after-free Write in put_dev usb prio:normal 22 syz 2 10d 17d PATCH [15d]
KASAN: slab-use-after-free Write in gadgetfs_bind usb prio:normal 22 syz, C error 19 3d01h 18d PATCH [13d]
memory leak in uvcg_extension_ba_source_id_store usb prio:low 3 syz, C 1 19d 18d PATCH [14d]
WARNING in usb_ep_enable usb prio:high -1 syz, C done 510 21m 18d PATCH [16d]
WARNING: locking bug in gadget_dev_open usb prio:normal 4 3 5d23h 18d
KASAN: slab-use-after-free Read in find_endpoint usb prio:normal 19 20 21h20m 18d
KASAN: slab-use-after-free Read in gadget_dev_open usb prio:normal 19 syz, C 39 8h10m 18d
KASAN: slab-use-after-free Read in ep_open usb prio:normal 19 syz, C done 44 7h30m 18d PATCH [17d]
WARNING in usbg_make_tpg usb prio:low -1 3 7d18h 18d
memory leak in f_uac2_opts_c_srate_store usb prio:low 3 syz, C 1 5d22h 18d PATCH [16d]
kernel BUG in register_netdevice prio:low usb -1 syz, C 74 34m 19d
KASAN: invalid-free in f_uac2_opts_p_srate_store usb prio:normal 24 syz, C error 112 1h30m 19d PATCH [14d]
KASAN: invalid-free in f_uac2_opts_c_srate_store usb prio:normal 24 syz, C error 79 44m 20d PATCH [14d]
KASAN: slab-out-of-bounds Read in dummy_free_request usb prio:normal 17 157 1d08h 20d
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 13 1d14h 20d
possible deadlock in uvc_func_allow_link usb prio:low 4 11 1h12m 20d
KASAN: slab-use-after-free Read in lockref_get (2) fs usb prio:high 19 syz, C error 17 4h01m 20d
KASAN: slab-use-after-free Read in stub_rx_loop usb prio:high 19 9 25d 21d
general protection fault in dummy_udc_start usb prio:low 10 syz, C error 8434 now 21d PATCH [20d]
general protection fault in dummy_set_selfpowered usb prio:low 10 syz, C error 1055 19m 21d
KASAN: slab-use-after-free Read in raw_process_ep0_io prio:normal usb 19 syz, C 26 5h05m 21d PATCH [14d]
general protection fault in f_midi2_free_ep_reqs usb prio:high 10 syz, C 492 4h28m 21d PATCH [20d]
general protection fault in dummy_queue usb prio:low 10 418 21m 21d
KASAN: global-out-of-bounds Read in usb_copy_descriptors usb prio:high 17 377 2h03m 21d PATCH [17d]
general protection fault in f_midi2_stop_eps usb prio:high 2 syz, C error 457 now 21d PATCH [20d]
possible deadlock in uvcg_streaming_header_allow_link usb prio:low 4 syz, C error 403 8h28m 21d
KASAN: invalid-free in dev_free (4) usb prio:normal 24 1 27d 23d
WARNING in cm109_input_ev/usb_submit_urb (2) input usb prio:low -1 syz 1 28d 24d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C 1929 1h51m 34d 💬 3 [18d]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 23d 45d PATCH [33d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm usb input 1 syz, C error error 1 52d 50d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 76 9d12h 50d PATCH [38d]
WARNING in igorplugusb_cmd/usb_submit_urb prio:low media usb -1 syz, C 1 84d 81d PATCH [62d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 21 2d17h 102d PATCH [51d]
KASAN: stack-out-of-bounds Write in carl9170_handle_command_response prio:high usb wireless 21 syz, C 105 22d 116d PATCH [36d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 38 9d04h 122d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error 91 37d 145d PATCH [77d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1157 11d 145d PATCH [77d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 9 114d 148d PATCH [79d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2688 2h03m 152d PATCH [152d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error 2364 41d 152d PATCH [106d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 29d 184d PATCH [48d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 287 1h03m 210d PATCH [81d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 syz, C error error 8 4d10h 219d 💬 10 [217d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 144d 225d 💬 1 [144d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 30 5d04h 239d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 19 5h45m 256d PATCH [94d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 248d 261d PATCH [240d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 30 15h03m 292d PATCH [40d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1174 11h47m 309d PATCH [51d]
general protection fault in count_matching_names (2) usb 2 syz 6 78d 312d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 26 2d16h 333d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 267 9d22h 361d PATCH [172d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 588 1d04h 362d PATCH [56d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 syz, C error 109 2d08h 372d
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 46 16h50m 399d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 155 7h41m 424d PATCH [26d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 482 1d20h 444d PATCH [95d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz 172 2d03h 451d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 762 1h20m 453d PATCH [267d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 syz, C error 408 3d22h 472d PATCH [461d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 63d 473d PATCH [469d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 363 4d08h 481d PATCH [435d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 15d 484d PATCH [274d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 4d21h 506d PATCH [308d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 754 14h14m 512d PATCH [435d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 404d 537d
general protection fault in status_show prio:high usb 2 syz, C 16 57d 578d PATCH [426d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz, C error 307 now 597d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 384d 672d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 24 8d13h 675d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 371 6d20h 704d PATCH [284d]
WARNING in enable_work prio:high usb -1 syz, C error 1832 17h57m 727d 💬 2 [45d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7477 4h29m 807d PATCH [110d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 103 6d07h 812d
INFO: rcu detected stall in schedule (7) usb 1 syz, C done error 72 36d 813d
WARNING in kernfs_get (5) prio:high usb kernfs -1 syz inconclusive 753 37d 832d 💬 3 [48d]
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error 268 20h11m 874d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 369 7d11h 879d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 17d 918d 💬 2 [844d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 25 1d17h 1065d 💬 1 [25d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 443 1d16h 1093d 💬 1 [14d]
INFO: rcu detected stall in console_callback usb input serial 1 syz, C error error 18 211d 1095d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 130 4d08h 1105d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 711 16h41m 1165d 💬 4 [894d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 71d 1173d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1155 1d11h 1239d 💬 16 [108d]
INFO: task hung in hub_event (3) prio:high usb 1 C 983 1d11h 1312d 💬 12 [12d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 862 514d 1335d 💬 14 [641d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 214d 1352d 💬 5 [295d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 220 5d18h 1417d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 2d20h 1807d PATCH [15d]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 125d 2010d PATCH [1800d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 3902 11h41m 2057d PATCH [1794d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3305 1d03h 2058d 💬 1 [108d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: unable to handle kernel paging request in iowrite32 usb prio:high 8 1 14d 8d22h
general protection fault in usbg_submit_command usb prio:high 2 1 14d 8d22h
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small usb prio:high 10 4 16d 12d
KCSAN: data-race in event_handler / usbip_stop_eh usb prio:high race:benign 6 1 13d 13d
BUG: unable to handle kernel paging request in gs_close usb prio:low 8 4 4d04h 13d
BUG: unable to handle kernel paging request in dummy_enable usb prio:low 8 3 12d 13d
KASAN: slab-out-of-bounds Read in free_netdev usb prio:normal 19 2 10d 17d
general protection fault in dummy_wakeup usb prio:low 2 2 6d10h 19d
KCSAN: data-race in mon_reader_add / usb_hcd_submit_urb (3) race:benign prio:low usb 6 1 30d 30d
general protection fault in mon_text_release prio:normal usb 10 3 31d 130d