usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 456
Parent subsystem(s): kernel (118)
Child subsystems: usb-storage (5)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
INFO: task hung in pn533_usb_probe nfc usb prio:high 1 syz, C error 2 1d17h 3h11m
KASAN: use-after-free Read in pn533_acr122_is_rx_frame_valid usb nfc prio:high 19 syz, C 7 3h37m 2d14h PATCH [1d22h]
INFO: task hung in usb_register_dev (3) prio:high usb 1 syz, C 11 3d10h 3d14h PATCH [20h50m]
WARNING: suspicious RCU usage in phy_detach net usb prio:high 4 syz 3 3d03h 4d07h
KASAN: slab-use-after-free Read in roccat_disconnect prio:high input usb 19 syz, C 13 9h21m 5d09h PATCH [4d16h]
INFO: task hung in em28xx_i2c_unregister prio:high i2c usb 1 syz 30 4d09h 7d07h 💬 1 [6d21h]
BUG: unable to handle kernel paging request in gs_close prio:low usb 8 6 7d16h 7d16h
KASAN: slab-use-after-free Write in keyspan_close usb prio:high 22 syz, C 1 8d19h 8d13h PATCH [8d01h]
WARNING in cx231xx_send_vendor_cmd/usb_submit_urb usb prio:low -1 syz, C error 4 9d13h 8d13h PATCH [25m]
memory leak in nci_send_cmd usb nfc net prio:high 3 syz, C 4 1d08h 8d15h PATCH [8d10h]
KASAN: slab-use-after-free Read in k90_record_led_work usb input prio:high actionable 19 4 5d06h 9d04h PATCH [7d20h]
possible deadlock in fifo_open (2) usb prio:low 4 1 13d 9d08h
KASAN: slab-use-after-free Read in k90_backlight_work input usb prio:high 19 11 7d17h 10d PATCH [3d12h]
KASAN: slab-use-after-free Read in sd_stopN media usb prio:high 19 syz 1 13d 11d PATCH [8d19h]
general protection fault in keyspan_break_ctl usb prio:high 2 syz, C 12 3d08h 11d PATCH [4d12h]
KASAN: slab-out-of-bounds Write in gb_operation_message_alloc greybus usb prio:high 21 syz, C 27 now 11d PATCH [3d19h]
WARNING in drm_mode_config_validate usb dri prio:high -1 syz, C error 36 2d01h 11d 💬 1 [10d]
KASAN: slab-use-after-free Read in roccat_open input usb prio:high 19 syz, C 2 3d15h 11d 💬 2 [3d15h]
UBSAN: shift-out-of-bounds in __vcc_connect net usb prio:high -1 syz 2 16d 12d
KASAN: stack-out-of-bounds Write in append_midi1_out_jack usb prio:normal 21 C 6 12d 12d PATCH [6d13h]
INFO: task hung in usb_set_configuration prio:high usb input 1 syz 2 18d 14d PATCH [12d]
INFO: task hung in unbind_store prio:high usb 1 syz, C error 11 12d 15d 💬 7 [11d]
KASAN: slab-use-after-free Write in usb_giveback_urb_bh usb prio:high actionable 22 2 18d 16d PATCH [15d]
possible deadlock in lookup_open usb prio:low 4 82 11h56m 16d
KASAN: slab-use-after-free Read in dummy_timer usb prio:normal 19 25 2d04h 17d
INFO: trying to register non-static key in edge_bulk_in_callback usb prio:high -1 1 21d 17d
INFO: trying to register non-static key in u_audio_get_playback_srate usb prio:high -1 1 21d 17d PATCH [17d]
BUG: unable to handle kernel NULL pointer dereference in usb_reinit usb prio:low 10 syz, C 10 4d16h 17d PATCH [17d]
KASAN: slab-out-of-bounds Read in gether_get_ifname usb prio:normal 17 syz, C 21 5d23h 17d PATCH [16d]
possible deadlock in mdc800_device_open usb prio:high 4 syz, C error 224 4d08h 17d
general protection fault in bus_remove_device usb prio:high 2 syz, C 4 11d 19d PATCH [18d]
memory leak in __usbhid_submit_report (2) input usb prio:high 3 syz, C 1 7d20h 19d PATCH [19d]
INFO: trying to register non-static key in gadget_dev_open usb prio:normal -1 1 26d 22d
general protection fault in adsl_state_store prio:low usb 2 C 7 12d 22d PATCH [5d19h]
WARNING: ODEBUG bug in hid_device_remove input usb prio:high -1 syz, C error 50 1d12h 23d 💬 2 [7d23h]
WARNING: ODEBUG bug in corsair_remove input usb prio:high -1 syz, C done 556 now 23d PATCH [7d20h]
KASAN: slab-use-after-free Read in attach_store usb prio:normal 19 C 2 24d 24d PATCH [4d16h]
KASAN: slab-use-after-free Read in usa49_glocont_callback prio:high actionable usb 19 C 6 2d12h 25d PATCH [17d]
memory leak in gadget_bind (2) usb prio:low 3 syz, C 1 13d 25d PATCH [17d]
possible deadlock in uvcg_frame_dw_frame_interval_store usb prio:low 4 4 11d 25d
possible deadlock in uvcg_extension_ba_source_id_show prio:low usb 4 6 30d 26d
BUG: spinlock bad magic in gadget_dev_open prio:normal usb 4 10 7d14h 26d
possible deadlock in uvcg_default_output_i_terminal_show prio:low usb 4 1 32d 27d
possible deadlock in uvcg_extension_b_num_controls_store prio:low usb 4 1 32d 28d
general protection fault in uvcg_video_enable prio:high usb 2 C 8 6h38m 28d PATCH [24d]
WARNING in ttusb_dec_start_feed prio:high media usb -1 syz, C 2 9d21h 29d
memory leak in hidg_bind prio:low usb 3 syz, C 2 15d 29d PATCH [17d]
WARNING: refcount bug in trace_suspend_resume (2) prio:normal usb 13 syz, C 5 7d18h 29d PATCH [27d]
WARNING in i2c_unregister_device prio:low usb -1 syz, C error 24 28d 29d
KASAN: slab-out-of-bounds Read in hid_dump_input prio:high input usb 19 syz, C error 22 25d 30d PATCH [18d]
memory leak in usb_copy_descriptors prio:low usb 3 syz, C 1 16d 31d PATCH [5d17h]
INFO: trying to register non-static key in usbg_make_tpg prio:low usb -1 4 19d 32d
WARNING in trace_suspend_resume/usb_submit_urb (2) prio:high nfc usb -1 3 34d 32d
INFO: trying to register non-static key in as102_stream_ctrl prio:high usb media -1 syz, C error 41 16m 33d PATCH [6d08h]
BUG: unable to handle kernel paging request in nhi_probe prio:high usb 8 syz, C 13 21d 33d PATCH [31d]
KASAN: slab-use-after-free Read in sur40_open prio:high usb input 19 syz, C error 44 26d 33d PATCH [18d]
BUG: sleeping function called from invalid context in cancel_delayed_work_sync prio:high usb mmc 10 syz, C 22608 now 33d PATCH [13h45m]
BUG: sleeping function called from invalid context in mmc_free_host prio:high usb mmc 5 syz, C error 3785 now 33d PATCH [19d]
KASAN: slab-use-after-free Read in rc_dev_uevent prio:high usb media 19 syz, C error 79 7d08h 33d PATCH [32d]
WARNING in port100_send_cmd_async/usb_submit_urb (3) prio:high usb nfc -1 syz, C error 324 8d09h 33d
possible deadlock in mnt_want_write (9) prio:low usb 4 syz, C 73 1d00h 33d
memory leak in f_uac1_opts_c_srate_store prio:normal usb 3 syz, C 1 20d 34d PATCH [32d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 5 3d21h 35d PATCH [3d03h]
WARNING in __fsg_is_set prio:low usb -1 1 39d 35d PATCH [19h34m]
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) prio:high actionable usb 19 1 39d 35d PATCH [34d]
possible deadlock in tcm_alloc prio:low usb 4 syz, C error 264 1d22h 35d
possible deadlock in uvcg_extension_allow_link prio:low usb 4 syz, C 13 11d 35d
memory leak in f_uac2_opts_p_srate_store prio:normal usb 3 syz, C 1 22d 36d PATCH [32d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 6 10d 37d PATCH [34d]
KASAN: slab-use-after-free Read in uvcg_extension_drop prio:normal actionable usb 19 5 2d04h 37d PATCH [34d]
KASAN: slab-use-after-free Write in usb_free_urb prio:high actionable usb 22 syz, C 9 2d19h 37d PATCH [1d20h]
general protection fault in dummy_udc_stop prio:low usb 8 24 12d 37d
general protection fault in emi26_probe prio:low usb 17 syz, C error 17 13d 37d 💬 1 [5d15h]
WARNING in ttusb_dec_send_command prio:high usb media -1 syz, C 180 3h57m 38d PATCH [35d]
general protection fault in mon_notify prio:high usb 2 syz, C 4 27d 38d PATCH [37d]
general protection fault in rebind_store prio:low usb 8 syz, C 57 1d15h 38d PATCH [7d18h]
KASAN: slab-use-after-free Read in vhci_cleanup_unlink_list prio:normal usb 19 syz, C error 257 11d 38d PATCH [35d]
KASAN: slab-use-after-free Write in pn_bind prio:normal usb 22 syz 49 4d00h 38d PATCH [34d]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 58 10d 38d PATCH [33d]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 3 7d11h 38d PATCH [50m]
KASAN: slab-use-after-free Read in vhci_shutdown_connection prio:normal usb 19 syz, C 221 12d 38d
KASAN: slab-use-after-free Write in put_dev prio:normal usb 22 syz 5 2d05h 38d PATCH [35d]
KASAN: slab-use-after-free Write in gadgetfs_bind prio:normal usb 22 syz, C error 124 3h15m 38d PATCH [33d]
memory leak in uvcg_extension_ba_source_id_store prio:low usb 3 syz, C 1 39d 38d PATCH [34d]
WARNING in usb_ep_enable prio:high usb -1 syz, C done 718 2h08m 38d PATCH [36d]
WARNING: locking bug in gadget_dev_open prio:normal usb 4 4 17d 38d
KASAN: slab-use-after-free Read in find_endpoint prio:normal usb 19 102 6h50m 38d
KASAN: slab-use-after-free Read in gadget_dev_open prio:normal usb 19 syz, C 157 3h49m 38d
KASAN: slab-use-after-free Read in ep_open prio:normal usb 19 syz, C done 124 1d17h 39d PATCH [38d]
WARNING in usbg_make_tpg prio:low usb -1 3 27d 39d
memory leak in f_uac2_opts_c_srate_store prio:low usb 3 syz, C 1 26d 39d PATCH [37d]
kernel BUG in register_netdevice prio:low usb -1 syz, C done 105 5d15h 40d 💬 2 [12d]
KASAN: invalid-free in f_uac2_opts_p_srate_store prio:normal usb 24 syz, C error 156 10d 40d PATCH [34d]
KASAN: invalid-free in f_uac2_opts_c_srate_store prio:normal usb 24 syz, C error 117 10d 40d PATCH [34d]
KASAN: slab-out-of-bounds Read in dummy_free_request prio:normal usb 17 162 11d 41d
general protection fault in start_dirop prio:low usb fs 2 syz, C 20 9d06h 41d PATCH [38d]
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 14 5d10h 41d
possible deadlock in uvc_func_allow_link prio:low usb fs 4 17 10d 41d
KASAN: slab-use-after-free Read in stub_rx_loop prio:high usb 19 C 10 12d 41d PATCH [12d]
general protection fault in dummy_udc_start prio:low usb 10 syz, C error 12268 11d 41d PATCH [40d]
general protection fault in dummy_set_selfpowered prio:low usb 10 syz, C error 1486 11d 41d
general protection fault in f_midi2_free_ep_reqs prio:high usb 10 syz, C 935 9h03m 41d PATCH [40d]
general protection fault in dummy_queue prio:low usb 19 641 3d15h 41d
KASAN: global-out-of-bounds Read in usb_copy_descriptors prio:high usb 17 511 4h37m 41d PATCH [37d]
KASAN: invalid-free in dev_free (4) prio:normal usb 24 1 47d 43d
WARNING in cm109_input_ev/usb_submit_urb (2) prio:low input usb -1 syz 1 48d 44d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C 3473 4h07m 55d 💬 3 [3d15h]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 15d 65d PATCH [54d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm input usb 1 syz, C error error 1 72d 70d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 76 29d 70d PATCH [58d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 21 3d07h 123d PATCH [72d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 39 2d15h 142d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 91 58d 165d PATCH [97d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1157 17d 165d PATCH [97d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 27 1d12h 168d PATCH [100d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2713 13d 172d PATCH [172d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error error 2364 61d 172d PATCH [126d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 49d 204d PATCH [68d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 364 12d 230d PATCH [101d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 syz, C error error 9 8d14h 239d 💬 10 [237d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 164d 245d 💬 1 [164d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 33 10d 260d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 19 20d 277d PATCH [114d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 268d 281d PATCH [260d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 35 12h10m 312d PATCH [60d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1253 14h29m 330d PATCH [71d]
general protection fault in count_matching_names (2) usb 2 syz 6 98d 332d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 29 4d11h 353d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 272 1d07h 382d PATCH [192d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 598 1d14h 383d PATCH [77d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 syz, C error 111 4d17h 393d
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 57 13d 419d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 159 10d 445d PATCH [46d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 517 16h00m 464d PATCH [116d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz 188 1d07h 471d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 837 3h43m 473d PATCH [287d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 syz, C error 423 1d06h 492d PATCH [482d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 83d 493d PATCH [490d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 393 1d01h 501d PATCH [455d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 6d19h 505d PATCH [294d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 6d02h 526d PATCH [328d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 776 2h34m 532d PATCH [455d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 424d 558d
general protection fault in status_show prio:high usb 2 syz, C 16 77d 598d PATCH [446d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz, C error 3345 13h57m 617d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 404d 692d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 25 12d 695d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 378 14h21m 724d PATCH [304d]
WARNING in enable_work prio:high usb media -1 syz, C error 1833 5d10h 747d 💬 2 [3d15h]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7524 3h26m 828d PATCH [2d18h]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 104 19d 832d
INFO: rcu detected stall in schedule (7) usb 1 syz, C done error 72 56d 833d
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error 270 19d 894d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 375 1d00h 899d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 15d 938d 💬 2 [864d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 26 17d 1085d 💬 1 [15d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 447 8d02h 1113d 💬 1 [34d]
INFO: rcu detected stall in console_callback input usb serial 1 syz, C error error 18 232d 1115d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 134 7d07h 1125d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 752 3h13m 1185d 💬 4 [914d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 13d 1193d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1163 12h15m 1259d 💬 16 [128d]
INFO: task hung in hub_event (3) prio:high usb 1 C 1006 6h53m 1332d 💬 12 [3d15h]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 863 14d 1355d 💬 14 [661d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 234d 1372d 💬 5 [315d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 227 1d12h 1437d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 23d 1827d PATCH [35d]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 145d 2030d PATCH [1820d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 3978 5m 2078d PATCH [1814d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3391 15h01m 2078d 💬 1 [128d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] (2) usb -1 1 6d15h 2d15h
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add (2) usb race:benign prio:low 6 1 4d09h 4d09h
KASAN: stack-out-of-bounds Write in f_midi2_create_usb_configs usb prio:normal 21 3 21d 17d
BUG: unable to handle kernel paging request in iowrite32 prio:high usb 8 1 34d 29d
general protection fault in usbg_submit_command prio:high usb 2 1 34d 29d
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small prio:high usb 10 4 36d 33d
KCSAN: data-race in event_handler / usbip_stop_eh prio:high race:benign usb 6 1 33d 33d
BUG: unable to handle kernel paging request in dummy_enable prio:low usb 8 3 32d 34d
KASAN: slab-out-of-bounds Read in free_netdev prio:normal usb 19 2 30d 38d
general protection fault in dummy_wakeup prio:low usb 2 2 26d 40d
KCSAN: data-race in mon_reader_add / usb_hcd_submit_urb (3) race:benign prio:low usb 6 1 50d 50d
general protection fault in mon_text_release prio:normal usb 10 3 51d 150d