usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 461
Parent subsystem(s): kernel (123)
Child subsystems: usb-storage (5)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req mmc usb prio:high 22 syz 8 6m 9h43m
general protection fault in ucsi_acpi_probe (2) usb prio:low 2 syz, C error 37 16h31m 3d13h
WARNING in service_outstanding_interrupt/usb_submit_urb (2) usb prio:high -1 1 10d 6d14h
WARNING in v4l2_ctrl_auto_cluster media usb prio:high -1 syz, C 3 2d05h 9d12h PATCH [1d07h]
INFO: task hung in pn533_usb_probe nfc usb prio:high 1 syz, C error 2 11d 10d PATCH [7d18h]
KASAN: use-after-free Read in pn533_acr122_is_rx_frame_valid usb nfc prio:high 19 syz, C 25 11h53m 12d PATCH [6d06h]
INFO: task hung in usb_register_dev (3) prio:high usb 1 syz, C error 17 3h15m 13d PATCH [11d]
WARNING: suspicious RCU usage in phy_detach net usb prio:high 4 syz 12 4h56m 14d PATCH [8h09m]
KASAN: slab-use-after-free Read in roccat_disconnect prio:high input usb 19 syz, C 14 2d13h 15d PATCH [14d]
INFO: task hung in em28xx_i2c_unregister prio:high i2c usb 1 syz 31 22h35m 17d 💬 1 [17d]
BUG: unable to handle kernel paging request in gs_close prio:low usb 8 6 17d 17d
KASAN: slab-use-after-free Write in keyspan_close usb prio:high 22 syz, C 1 5d00h 18d PATCH [7d21h]
WARNING in cx231xx_send_vendor_cmd/usb_submit_urb usb prio:low -1 syz, C error 6 9d12h 18d PATCH [10d]
memory leak in nci_send_cmd usb nfc net prio:high 3 syz, C 4 11d 18d PATCH [9d14h]
KASAN: slab-use-after-free Read in k90_record_led_work usb input prio:high actionable 19 5 2d01h 19d PATCH [6d18h]
possible deadlock in fifo_open (2) usb prio:low 4 1 23d 19d
KASAN: slab-use-after-free Read in atkbd_event_work prio:high actionable usb 19 syz, C 7 3d07h 20d 💬 2 [2d22h]
KASAN: slab-use-after-free Read in k90_backlight_work input usb prio:high 19 11 18d 20d PATCH [4d04h]
KASAN: slab-use-after-free Read in sd_stopN media usb prio:high 19 syz 1 9d06h 21d PATCH [10d]
KASAN: slab-out-of-bounds Write in gb_operation_message_alloc greybus usb prio:high 21 syz, C error 51 now 21d PATCH [14d]
WARNING in drm_mode_config_validate usb dri prio:high -1 syz, C error 36 12d 21d 💬 1 [21d]
KASAN: slab-use-after-free Read in roccat_open input usb prio:high 19 syz, C 2 13d 22d 💬 2 [2d02h]
UBSAN: shift-out-of-bounds in __vcc_connect net usb prio:high -1 syz 2 26d 22d
KASAN: stack-out-of-bounds Write in append_midi1_out_jack usb prio:normal 21 C 6 8d19h 22d PATCH [16d]
INFO: task hung in usb_set_configuration prio:high usb input 1 syz 2 28d 24d PATCH [23d]
INFO: task hung in unbind_store prio:high usb 1 syz, C error 11 1h06m 25d 💬 7 [22d]
KASAN: slab-use-after-free Write in usb_giveback_urb_bh prio:high actionable usb 22 2 28d 26d PATCH [25d]
possible deadlock in lookup_open prio:low usb 4 89 2d07h 27d
KASAN: slab-out-of-bounds Read in aqc_raw_event prio:high input usb hwmon 17 syz, C 10 12d 27d PATCH [26d]
KASAN: slab-use-after-free Read in dummy_timer prio:normal usb 19 31 2d17h 27d
WARNING in vb2_video_unregister_device prio:low media usb -1 syz, C 2 1d15h 27d
INFO: trying to register non-static key in edge_bulk_in_callback prio:high usb -1 1 32d 28d
INFO: trying to register non-static key in u_audio_get_playback_srate prio:high usb -1 1 32d 28d PATCH [6d09h]
KASAN: slab-out-of-bounds Read in gether_get_ifname prio:normal usb 17 syz, C 21 16d 28d PATCH [5d10h]
possible deadlock in mdc800_device_open prio:high usb 4 syz, C error 226 3d18h 28d PATCH [9d09h]
general protection fault in bus_remove_device prio:high usb 2 syz, C 7 6d06h 29d PATCH [28d]
memory leak in __usbhid_submit_report (2) prio:high input usb 3 syz, C 1 18d 30d PATCH [29d]
general protection fault in drm_object_attach_property usb dri prio:high 8 syz, C error 48 7d14h 32d PATCH [31d]
INFO: trying to register non-static key in gadget_dev_open prio:normal usb -1 1 36d 32d
general protection fault in adsl_state_store prio:low usb 2 C 11 21h30m 32d PATCH [7d21h]
WARNING: ODEBUG bug in hid_device_remove prio:high input usb -1 syz, C error 51 5d22h 34d 💬 2 [18d]
WARNING: ODEBUG bug in corsair_remove prio:high input usb -1 syz, C done 635 1h52m 34d PATCH [6d18h]
KASAN: slab-use-after-free Read in attach_store prio:normal usb 19 C 2 35d 35d PATCH [14d]
memory leak in gadget_bind (2) prio:low usb 3 syz, C 1 23d 35d PATCH [27d]
possible deadlock in uvcg_extension_ba_source_id_show prio:low usb 4 6 40d 36d
BUG: spinlock bad magic in gadget_dev_open prio:normal usb 4 11 5d02h 36d
possible deadlock in uvcg_default_output_i_terminal_show prio:low usb 4 1 42d 37d
possible deadlock in uvcg_extension_b_num_controls_store prio:low usb 4 1 42d 38d
general protection fault in uvcg_video_enable prio:high usb 2 C 8 10d 38d PATCH [34d]
WARNING in ttusb_dec_start_feed prio:high media usb -1 syz, C 2 20d 39d
memory leak in hidg_bind prio:low usb 3 syz, C 2 26d 39d PATCH [27d]
WARNING: refcount bug in trace_suspend_resume (2) prio:normal usb 13 syz, C 5 18d 39d PATCH [37d]
WARNING in i2c_unregister_device prio:low usb -1 syz, C error 24 38d 39d
KASAN: slab-use-after-free Read in input_dev_uevent (2) prio:high usb input 19 syz, C error 20 2d05h 40d
KASAN: slab-out-of-bounds Read in hid_dump_input prio:high input usb 19 syz, C error 22 36d 40d PATCH [6d20h]
memory leak in usb_copy_descriptors prio:low usb 3 syz, C 1 26d 41d PATCH [3d02h]
INFO: trying to register non-static key in usbg_make_tpg prio:low usb -1 4 29d 42d
WARNING in trace_suspend_resume/usb_submit_urb (2) prio:high nfc usb -1 3 44d 42d
INFO: trying to register non-static key in as102_stream_ctrl prio:high usb media -1 syz, C error 52 4d05h 43d PATCH [8d19h]
KASAN: slab-use-after-free Read in sur40_open prio:high usb input 19 syz, C error 44 36d 43d PATCH [28d]
BUG: sleeping function called from invalid context in cancel_delayed_work_sync prio:high usb mmc 10 syz, C 32713 now 43d PATCH [3d22h]
BUG: sleeping function called from invalid context in mmc_free_host prio:high usb mmc 5 syz, C error 5729 now 43d PATCH [29d]
KASAN: slab-use-after-free Read in rc_dev_uevent prio:high usb media 19 syz, C error 134 55m 43d PATCH [42d]
WARNING in port100_send_cmd_async/usb_submit_urb (3) prio:high usb nfc -1 syz, C error 325 6d12h 43d
possible deadlock in mnt_want_write (9) prio:low usb 4 syz, C 75 7d23h 44d
memory leak in f_uac1_opts_c_srate_store prio:normal usb 3 syz, C 1 30d 44d PATCH [42d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 5 14d 45d PATCH [13d]
WARNING in as102_stream_ctrl prio:low usb media -1 syz, C 101 1h50m 45d
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) prio:high actionable usb 19 1 49d 45d PATCH [7d21h]
possible deadlock in tcm_alloc prio:low usb 4 syz, C error 347 4h43m 45d
possible deadlock in uvcg_extension_allow_link prio:low usb 4 syz, C 13 21d 46d
memory leak in f_uac2_opts_p_srate_store prio:normal usb 3 syz, C 1 33d 46d PATCH [43d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 6 20d 47d PATCH [44d]
KASAN: slab-use-after-free Read in uvcg_extension_drop prio:normal actionable usb 19 5 12d 47d PATCH [44d]
general protection fault in dummy_udc_stop prio:low usb 8 24 22d 47d
general protection fault in emi26_probe prio:low usb 17 syz, C error 17 24d 47d 💬 1 [15d]
WARNING in ttusb_dec_send_command prio:high usb media -1 syz, C 232 5h59m 48d PATCH [45d]
general protection fault in rebind_store prio:low usb 8 syz, C 58 7d14h 48d PATCH [18d]
KASAN: slab-use-after-free Write in pn_bind prio:normal usb 22 syz 50 8d08h 48d PATCH [7d18h]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 58 5d19h 48d PATCH [44d]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 3 17d 48d PATCH [8d01h]
KASAN: slab-use-after-free Read in vhci_shutdown_connection prio:normal usb 19 syz, C 221 22d 48d PATCH [9d20h]
KASAN: slab-use-after-free Write in put_dev prio:normal usb 22 syz 5 12d 48d PATCH [45d]
KASAN: slab-use-after-free Write in gadgetfs_bind prio:normal usb 22 syz, C error 195 19h10m 48d PATCH [43d]
memory leak in uvcg_extension_ba_source_id_store prio:low usb 3 syz, C 1 49d 48d PATCH [45d]
WARNING in usb_ep_enable prio:high usb -1 syz, C done 957 1h28m 48d PATCH [46d]
WARNING: locking bug in gadget_dev_open prio:normal usb 4 4 28d 49d
KASAN: slab-use-after-free Read in find_endpoint prio:normal usb 19 123 8h19m 49d
KASAN: slab-use-after-free Read in gadget_dev_open prio:normal usb 19 syz, C 184 20h40m 49d
KASAN: slab-use-after-free Read in ep_open prio:normal usb 19 syz, C done 164 5h46m 49d PATCH [48d]
WARNING in usbg_make_tpg prio:low usb -1 3 38d 49d
memory leak in f_uac2_opts_c_srate_store prio:low usb 3 syz, C 1 36d 49d PATCH [47d]
kernel BUG in register_netdevice prio:low usb -1 syz, C done 107 2d11h 50d 💬 2 [22d]
KASAN: invalid-free in f_uac2_opts_p_srate_store prio:normal usb 24 syz, C error 156 20d 50d PATCH [44d]
KASAN: invalid-free in f_uac2_opts_c_srate_store prio:normal usb 24 syz, C error 117 20d 51d PATCH [44d]
KASAN: slab-out-of-bounds Read in dummy_free_request prio:normal usb 17 162 21d 51d
general protection fault in start_dirop prio:low usb fs 2 syz, C 20 19d 51d PATCH [48d]
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 15 1d00h 51d
possible deadlock in uvc_func_allow_link prio:low usb fs 4 17 20d 51d
KASAN: slab-use-after-free Read in stub_rx_loop prio:high usb 19 C 10 8d15h 51d PATCH [22d]
general protection fault in dummy_udc_start prio:low usb 10 syz, C error 12268 7d18h 51d PATCH [50d]
general protection fault in dummy_set_selfpowered prio:low usb 10 syz, C error 1486 7d20h 51d
general protection fault in f_midi2_free_ep_reqs prio:high usb 10 syz, C 935 10d 51d PATCH [50d]
general protection fault in dummy_queue prio:low usb 19 643 4d09h 51d
KASAN: global-out-of-bounds Read in usb_copy_descriptors prio:high usb 17 512 9d22h 51d PATCH [47d]
KASAN: invalid-free in dev_free (4) prio:normal usb 24 1 57d 53d
WARNING in cm109_input_ev/usb_submit_urb (2) prio:low input usb -1 syz 1 58d 54d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C 3523 4h12m 65d 💬 3 [13d]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 25d 76d PATCH [64d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm input usb 1 syz, C error error 1 82d 80d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 76 40d 80d PATCH [68d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 25 3d01h 133d PATCH [82d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 39 12d 153d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 93 2d02h 176d PATCH [107d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1171 4h21m 176d PATCH [107d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 27 11d 178d PATCH [110d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2713 23d 183d PATCH [182d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error error 2364 71d 183d PATCH [136d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 60d 214d PATCH [79d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 364 8d08h 240d PATCH [111d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 syz, C error error 10 10h10m 249d 💬 10 [247d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 175d 256d 💬 1 [174d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 33 20d 270d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 19 30d 287d PATCH [124d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 278d 291d PATCH [270d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 35 10d 322d PATCH [71d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1328 13h43m 340d PATCH [82d]
general protection fault in count_matching_names (2) usb 2 syz 6 109d 342d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 29 14d 364d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 272 11d 392d PATCH [202d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 598 11d 393d PATCH [87d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 syz, C error 111 14d 403d
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 57 23d 429d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 159 1d01h 455d PATCH [56d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 524 4d14h 475d PATCH [126d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz 195 2d04h 482d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 844 20h58m 484d PATCH [297d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 syz, C error 427 3d04h 502d PATCH [492d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 93d 503d PATCH [500d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 419 28m 511d PATCH [466d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 17d 515d PATCH [304d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 16d 537d PATCH [339d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 784 1d18h 542d PATCH [466d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 434d 568d
general protection fault in status_show prio:high usb 2 syz, C 16 87d 609d PATCH [457d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz, C error 3346 4d05h 628d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 414d 702d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 25 22d 706d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 384 23h31m 734d PATCH [314d]
WARNING in enable_work prio:high usb media -1 syz, C error 1834 4d14h 758d 💬 2 [13d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7545 11h19m 838d PATCH [13d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 104 30d 843d
INFO: rcu detected stall in schedule (7) usb 1 syz, C done error 72 66d 843d
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error 270 29d 904d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 377 1d13h 909d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 26d 948d 💬 2 [874d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 26 27d 1095d 💬 1 [25d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 447 18d 1123d 💬 1 [44d]
INFO: rcu detected stall in console_callback input usb serial 1 syz, C error error 18 242d 1125d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 136 9d15h 1135d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 769 15h24m 1196d 💬 4 [924d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 23d 1203d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1171 2h25m 1269d 💬 16 [138d]
INFO: task hung in hub_event (3) prio:high usb 1 C 1040 3h12m 1342d 💬 12 [13d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 863 24d 1366d 💬 14 [671d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 244d 1382d 💬 5 [326d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 237 16h34m 1447d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 9d01h 1837d PATCH [46d]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 155d 2040d PATCH [1830d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 4024 2h06m 2088d PATCH [1824d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3416 1d00h 2088d 💬 1 [138d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in usb_ep_alloc_request usb prio:low 2 2 5d10h 1d19h
BUG: soft lockup in dummy_timer (2) usb prio:normal 1 1 9d04h 5d04h
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] (2) usb -1 1 16d 12d
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add (2) usb race:benign prio:low 6 1 14d 14d
KASAN: stack-out-of-bounds Write in f_midi2_create_usb_configs prio:normal usb 21 3 31d 28d
general protection fault in usbg_submit_command prio:high usb 2 1 44d 39d
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small prio:high usb 10 4 46d 43d
KCSAN: data-race in event_handler / usbip_stop_eh prio:high race:benign usb 6 1 43d 43d
BUG: unable to handle kernel paging request in dummy_enable prio:low usb 8 3 43d 44d
KASAN: slab-out-of-bounds Read in free_netdev prio:normal usb 19 2 41d 48d
general protection fault in dummy_wakeup prio:low usb 2 2 36d 50d
general protection fault in mon_text_release prio:normal usb 10 3 61d 161d