usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 435
Parent subsystem(s): kernel (91)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
memory leak in try_get_usb_function_instance usb prio:low 3 syz, C 1 4d03h 3h00m PATCH [1h28m]
kernel BUG in register_netdevice usb prio:low -1 2 2d15h 15h16m
KASAN: invalid-free in f_uac2_opts_p_srate_store usb prio:normal 24 syz, C error 14 10h10m 15h16m PATCH [23h25m]
KASAN: invalid-free in f_uac2_opts_c_srate_store usb prio:normal 24 syz, C 12 1d08h 1d09h PATCH [1d04h]
KASAN: slab-out-of-bounds Read in dummy_free_request usb prio:normal 17 63 6m 1d15h
general protection fault in usbtest_probe usb prio:low 8 syz, C 13 1d19h 1d15h PATCH [1d06h]
WARNING in dummy_free_request (2) usb prio:normal -1 1 5d19h 1d15h
possible deadlock in uvc_func_allow_link usb prio:low 4 5 5d12h 1d15h
KASAN: slab-use-after-free Read in lockref_get (2) fs usb prio:high 19 syz, C error 3 5d11h 1d15h
KASAN: slab-use-after-free Read in stub_rx_loop usb prio:high 19 9 6d00h 2d01h
general protection fault in dummy_udc_start usb prio:low 10 syz, C 1573 15m 2d01h PATCH [1d01h]
general protection fault in dummy_set_selfpowered usb prio:low 10 syz, C error 362 29m 2d01h
KASAN: slab-use-after-free Read in raw_process_ep0_io prio:normal usb 19 syz, C 7 14h59m 2d01h
general protection fault in f_midi2_free_ep_reqs usb prio:high 10 syz, C 221 3h11m 2d01h PATCH [19h48m]
general protection fault in dummy_queue usb prio:low 8 134 9h43m 2d01h
KASAN: global-out-of-bounds Read in usb_copy_descriptors usb prio:high 17 202 2h21m 2d01h
general protection fault in f_midi2_stop_eps usb prio:high 2 syz, C error 136 5h38m 2d01h PATCH [19h48m]
possible deadlock in uvcg_streaming_header_allow_link usb prio:low 4 syz, C error 157 now 2d01h
general protection fault in uvcg_video_init usb prio:low 2 29 7m 2d01h PATCH [2h08m]
KASAN: invalid-free in dev_free (4) usb prio:normal 24 1 7d23h 3d23h
WARNING in cm109_input_ev/usb_submit_urb (2) input usb prio:low -1 syz 1 8d19h 4d19h
WARNING in __carl9170_tx_process_status wireless usb prio:high -1 syz, C 6 3d21h 26d PATCH [14d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm usb input 1 syz, C error 1 32d 30d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 72 1d20h 30d PATCH [19d]
KMSAN: uninit-value in steam_register prio:high input usb 7 3 53d 51d PATCH [31d]
WARNING in igorplugusb_cmd/usb_submit_urb prio:low media usb -1 syz, C 1 65d 61d PATCH [43d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 20 12d 83d PATCH [32d]
KASAN: stack-out-of-bounds Write in carl9170_handle_command_response prio:high usb wireless 21 syz, C 105 3d10h 97d PATCH [16d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 36 9d16h 103d
KASAN: slab-use-after-free Read in hiddev_disconnect (4) actionable prio:high usb input 19 2 83d 120d PATCH [30d]
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error 91 18d 126d PATCH [57d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1156 5h40m 126d PATCH [57d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 9 94d 128d PATCH [60d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2505 2h53m 133d PATCH [132d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error 2364 21d 133d PATCH [86d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 10d 164d PATCH [29d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C 67 11m 191d PATCH [62d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 syz, C error error 8 95d 199d 💬 10 [197d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 125d 206d 💬 1 [125d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 29 11d 220d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 19 12d 237d PATCH [75d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 228d 241d PATCH [220d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 23 5d17h 273d PATCH [21d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1029 6h43m 290d PATCH [32d]
general protection fault in count_matching_names (2) usb 2 syz 6 59d 292d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 25 55d 314d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 266 6h53m 342d PATCH [153d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 570 23h44m 343d PATCH [37d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 syz, C error 107 8d04h 353d
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 26 17h53m 379d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 154 16d 405d PATCH [6d18h]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 471 12h35m 425d PATCH [76d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 149 4h15m 432d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 736 1d00h 434d PATCH [247d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 syz, C error 396 3d17h 452d PATCH [442d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 44d 453d PATCH [450d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 343 14h00m 461d PATCH [416d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 96d 465d PATCH [255d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 5d00h 487d PATCH [289d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 748 16h13m 492d PATCH [416d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 384d 518d
general protection fault in status_show prio:high usb 2 syz, C 16 37d 559d PATCH [407d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz error 31 1d11h 578d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 364d 653d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 23 311d 656d
KASAN: use-after-free Read in em28xx_close_extension (2) prio:high usb media 19 syz, C error 17 16d 679d PATCH [6d21h]
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 360 22h11m 685d PATCH [264d]
WARNING in enable_work prio:high usb -1 syz, C error 1825 12d 708d 💬 2 [26d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7282 6d18h 788d PATCH [91d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 102 12d 793d
INFO: rcu detected stall in schedule (7) usb 1 syz, C done error 72 17d 794d
WARNING in kernfs_get (5) prio:high usb kernfs -1 syz inconclusive 753 17d 813d 💬 3 [29d]
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error 253 1d07h 855d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 364 56m 859d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 126 1d21h 898d 💬 2 [825d]
KASAN: stack-out-of-bounds Read in sched_show_task prio:high input usb serial 17 syz, C 166 204d 1043d PATCH [1028d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 24 2d09h 1046d 💬 1 [6d10h]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 440 6d07h 1073d 💬 1 [26d]
INFO: rcu detected stall in console_callback usb input serial 1 syz, C error error 18 192d 1075d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 130 2d01h 1085d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 667 1h22m 1146d 💬 4 [875d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 52d 1153d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1150 3d18h 1220d 💬 16 [89d]
INFO: task hung in hub_event (3) prio:high usb 1 961 3h47m 1292d 💬 12 [26d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 862 494d 1316d 💬 14 [622d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 195d 1332d 💬 5 [276d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 216 4h27m 1398d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 7d13h 1787d
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 105d 1991d PATCH [1781d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 3858 9h44m 2038d PATCH [1774d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3279 4h52m 2039d 💬 1 [89d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 syz, C 44 34d 2058d PATCH [8h33m]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in dummy_wakeup usb prio:low 2 1 4d21h 15h05m
general protection fault in dummy_udc_stop usb prio:low 8 4 1d07h 1d12h
KCSAN: data-race in mon_reader_add / usb_hcd_submit_urb (3) usb race:benign prio:low 6 1 10d 10d
general protection fault in mon_text_release prio:normal usb 10 3 11d 111d