usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 443
Parent subsystem(s): kernel (103)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING: kobject bug in pch_udc_remove prio:high usb -1 syz, C 5 5h27m 5h26m PATCH [2h18m]
possible deadlock in uvcg_extension_b_num_controls_store usb prio:low 4 1 5d04h 18h05m
general protection fault in uvcg_video_enable prio:high usb 2 C 6 8h01m 18h05m
possible deadlock in tcm_register_callback usb prio:low 4 1 7d02h 1d18h
WARNING in ttusb_dec_start_feed media usb prio:high -1 syz, C 2 2d14h 1d23h
memory leak in hidg_bind usb prio:low 3 syz, C 2 3d08h 1d23h PATCH [1d07h]
WARNING: refcount bug in trace_suspend_resume (2) usb prio:normal 13 syz, C 2 3d06h 1d23h PATCH [4h00m]
WARNING in i2c_unregister_device usb prio:low -1 syz, C error 24 18h09m 1d23h
KASAN: slab-out-of-bounds Read in hid_dump_input input usb prio:high 19 syz, C error 19 4d08h 2d22h PATCH [2d14h]
memory leak in usb_copy_descriptors usb prio:low 3 syz, C 1 8d07h 4d07h PATCH [3d00h]
KASAN: slab-use-after-free Read in trace_event_raw_event_udc_log_req usb 19 1 7d16h 5d02h
INFO: trying to register non-static key in usbg_make_tpg usb prio:low -1 3 3d10h 5d02h
WARNING in trace_suspend_resume/usb_submit_urb (2) usb prio:high -1 3 6d23h 5d02h
BUG: unable to handle kernel paging request in nhi_probe usb prio:high 8 syz, C 4 6d22h 5d18h PATCH [4d04h]
KASAN: slab-use-after-free Read in sur40_open usb input prio:high 19 syz, C error 31 5h30m 5d18h PATCH [5d10h]
BUG: sleeping function called from invalid context in cancel_delayed_work_sync usb prio:high 5 syz, C 31 1d22h 5d19h
BUG: unable to handle kernel paging request in ioread32 usb prio:high 8 syz, C 61 45m 5d19h
memory leak in f_uac1_opts_c_srate_store usb prio:normal 3 syz, C 1 10d 6d15h PATCH [5d04h]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 2 5d23h 7d16h
WARNING in __fsg_is_set usb prio:low -1 1 11d 7d17h
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) usb prio:high actionable 19 1 12d 7d17h PATCH [7d01h]
possible deadlock in tcm_alloc prio:low usb 4 syz, C 161 13h30m 8d07h
general protection fault in usb_put_function_instance usb prio:low 2 12 4d04h 8d08h
possible deadlock in uvcg_extension_allow_link usb prio:low 4 syz, C 12 1d04h 8d08h
memory leak in f_uac2_opts_p_srate_store usb prio:normal 3 syz, C 1 12d 8d22h PATCH [5d08h]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 4 10d 9d14h PATCH [7d00h]
KASAN: slab-use-after-free Read in uvcg_extension_drop usb prio:normal actionable 19 3 12d 9d17h PATCH [7d00h]
general protection fault in dummy_udc_stop usb prio:low 8 8 3d14h 9d18h
general protection fault in emi26_probe prio:low usb 2 syz, C error 14 8d15h 9d18h
WARNING in ttusb_dec_send_command media usb prio:high -1 syz, C 68 10h13m 10d PATCH [8d00h]
general protection fault in mon_notify usb prio:high 2 syz, C 4 6h13m 10d PATCH [10d]
general protection fault in rebind_store usb prio:low 2 20 1d02h 10d PATCH [2h14m]
KASAN: slab-use-after-free Read in vhci_cleanup_unlink_list usb prio:normal 19 syz, C error 180 54m 10d PATCH [8d03h]
KASAN: slab-use-after-free Write in pn_bind usb prio:normal 22 18 1d01h 10d PATCH [6d14h]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 54 3d10h 10d PATCH [6d11h]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 2 3d08h 10d
WARNING in f_midi_free usb prio:low -1 4 2d04h 10d
KASAN: slab-use-after-free Read in vhci_shutdown_connection usb prio:normal 19 syz, C 142 8h08m 10d
KASAN: slab-use-after-free Write in put_dev usb prio:normal 22 syz 2 3d09h 10d PATCH [8d04h]
KASAN: slab-use-after-free Write in gadgetfs_bind usb prio:normal 22 syz, C error 18 3d12h 11d PATCH [6d04h]
memory leak in uvcg_extension_ba_source_id_store usb prio:low 3 syz, C 1 12d 11d PATCH [7d11h]
WARNING in usb_ep_enable usb prio:high -1 syz, C done 356 31m 11d PATCH [9d00h]
WARNING: locking bug in gadget_dev_open usb 4 1 15d 11d
KASAN: slab-use-after-free Read in find_endpoint usb prio:normal 19 14 10d 11d
KASAN: slab-use-after-free Read in gadget_dev_open usb prio:normal 19 syz, C 25 1d11h 11d
KASAN: slab-use-after-free Read in ep_open usb prio:normal 19 syz, C 30 2d01h 11d PATCH [10d]
WARNING in usbg_make_tpg usb prio:low -1 3 13h43m 11d
memory leak in f_uac2_opts_c_srate_store usb prio:low 3 syz, C 1 16d 11d PATCH [9d14h]
memory leak in try_get_usb_function_instance usb prio:low 3 syz, C 1 1d21h 12d PATCH [8d11h]
kernel BUG in register_netdevice usb prio:low -1 41 12h11m 12d
KASAN: invalid-free in f_uac2_opts_p_srate_store usb prio:normal 24 syz, C error 92 2h59m 12d PATCH [7d00h]
KASAN: invalid-free in f_uac2_opts_c_srate_store usb prio:normal 24 syz, C 65 5h31m 13d PATCH [7d00h]
KASAN: slab-out-of-bounds Read in dummy_free_request usb prio:normal 17 152 7h06m 13d
general protection fault in usbtest_probe usb prio:low 8 syz, C 16 9d15h 13d PATCH [5d02h]
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C 9 4d18h 13d
possible deadlock in uvc_func_allow_link usb prio:low 4 7 3d23h 13d
KASAN: slab-use-after-free Read in lockref_get (2) fs usb prio:high 19 syz, C error 13 1d01h 13d
KASAN: slab-use-after-free Read in stub_rx_loop usb prio:high 19 9 18d 14d
general protection fault in dummy_udc_start usb prio:low 10 syz, C error 4761 34m 14d PATCH [13d]
general protection fault in dummy_set_selfpowered usb prio:low 10 syz, C error 718 1h35m 14d
KASAN: slab-use-after-free Read in raw_process_ep0_io prio:normal usb 19 syz, C 17 6h36m 14d PATCH [7d02h]
general protection fault in f_midi2_free_ep_reqs usb prio:high 10 syz, C 364 3d10h 14d PATCH [12d]
general protection fault in dummy_queue usb prio:low 10 261 now 14d
KASAN: global-out-of-bounds Read in usb_copy_descriptors usb prio:high 17 342 18m 14d PATCH [9d21h]
general protection fault in f_midi2_stop_eps usb prio:high 2 syz, C error 380 11h12m 14d PATCH [12d]
possible deadlock in uvcg_streaming_header_allow_link usb prio:low 4 syz, C error 340 7h16m 14d
general protection fault in uvcg_video_init usb prio:low 8 88 10h39m 14d PATCH [7d09h]
KASAN: invalid-free in dev_free (4) usb prio:normal 24 1 20d 16d
WARNING in cm109_input_ev/usb_submit_urb (2) input usb prio:low -1 syz 1 20d 16d
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 16d 38d PATCH [26d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm usb input 1 syz, C error error 1 44d 42d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 76 2d07h 42d PATCH [31d]
WARNING in igorplugusb_cmd/usb_submit_urb prio:low media usb -1 syz, C 1 77d 73d PATCH [55d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 20 9d08h 95d PATCH [44d]
KASAN: stack-out-of-bounds Write in carl9170_handle_command_response prio:high usb wireless 21 syz, C 105 15d 109d PATCH [28d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 38 1d23h 115d
KASAN: slab-use-after-free Read in hiddev_disconnect (4) actionable prio:high usb input 19 2 95d 132d PATCH [42d]
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error 91 30d 138d PATCH [70d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1157 4d15h 138d PATCH [70d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 9 107d 140d PATCH [72d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2640 2h59m 145d PATCH [145d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error 2364 33d 145d PATCH [99d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 22d 176d PATCH [41d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 225 54m 203d PATCH [74d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 syz, C error error 8 107d 212d 💬 10 [210d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 137d 218d 💬 1 [137d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 29 23d 232d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 19 24d 249d PATCH [87d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 240d 253d PATCH [233d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 27 11h18m 285d PATCH [33d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1123 now 302d PATCH [44d]
general protection fault in count_matching_names (2) usb 2 syz 6 71d 304d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 25 67d 326d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 267 2d18h 354d PATCH [165d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 583 17h21m 355d PATCH [49d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 syz, C error 108 8d22h 365d
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 42 11h46m 392d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 154 28d 417d PATCH [18d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 476 17h00m 437d PATCH [88d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 161 6h16m 444d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 743 1d01h 446d PATCH [260d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 syz, C error 405 1d13h 464d PATCH [454d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 56d 465d PATCH [462d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 360 13h27m 473d PATCH [428d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 8d12h 477d PATCH [267d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 17d 499d PATCH [301d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 751 8d19h 505d PATCH [428d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 397d 530d
general protection fault in status_show prio:high usb 2 syz, C 16 50d 571d PATCH [419d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz error 31 13d 590d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 376d 665d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 24 1d08h 668d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 369 22h50m 697d PATCH [277d]
WARNING in enable_work prio:high usb -1 syz, C error 1827 6d16h 720d 💬 2 [38d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7399 4d11h 800d PATCH [103d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 102 24d 805d
INFO: rcu detected stall in schedule (7) usb 1 syz, C done error 72 29d 806d
WARNING in kernfs_get (5) prio:high usb kernfs -1 syz inconclusive 753 29d 825d 💬 3 [41d]
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error 263 22h33m 867d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 369 6h58m 872d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 9d20h 910d 💬 2 [837d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 24 14d 1058d 💬 1 [18d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 440 18d 1086d 💬 1 [7d05h]
INFO: rcu detected stall in console_callback usb input serial 1 syz, C error error 18 204d 1087d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 130 14d 1098d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 697 5h47m 1158d 💬 4 [887d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 64d 1165d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1151 11d 1232d 💬 16 [101d]
INFO: task hung in hub_event (3) prio:high usb 1 C 967 1d19h 1304d 💬 12 [5d09h]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 862 507d 1328d 💬 14 [634d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 207d 1344d 💬 5 [288d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 219 3d23h 1410d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 19d 1800d PATCH [8d07h]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 117d 2003d PATCH [1793d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 3885 9h33m 2050d PATCH [1787d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3291 1d13h 2051d 💬 1 [101d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: unable to handle kernel paging request in iowrite32 usb prio:high 8 1 6d21h 1d17h
general protection fault in usbg_submit_command usb prio:high 2 1 6d23h 1d17h
KASAN: slab-use-after-free Read in attach_store usb 19 1 9d07h 5d07h
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small usb prio:high 10 4 9d02h 5d18h
KCSAN: data-race in event_handler / usbip_stop_eh usb prio:high race:benign 6 1 6d04h 6d04h
BUG: unable to handle kernel paging request in gs_close usb prio:low 8 3 2d13h 6d16h
general protection fault in fsg_common_set_num_buffers usb prio:low 2 3 2d18h 6d17h
BUG: unable to handle kernel paging request in dummy_enable usb prio:low 8 3 5d09h 6d18h
general protection fault in adsl_state_store usb prio:low 2 2 12d 8d08h
KASAN: slab-out-of-bounds Read in free_netdev usb prio:normal 19 2 3d08h 10d
BUG: spinlock bad magic in gadget_dev_open usb 4 3 15d 11d
general protection fault in dummy_wakeup usb prio:low 2 1 17d 12d
KCSAN: data-race in mon_reader_add / usb_hcd_submit_urb (3) usb race:benign prio:low 6 1 22d 22d
general protection fault in mon_text_release prio:normal usb 10 3 23d 123d