usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 461
Parent subsystem(s): kernel (123)
Child subsystems: usb-storage (5)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING in ttusb_start_feed/usb_submit_urb media usb -1 syz, C 3 2h37m 3h19m
KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req mmc usb prio:high 22 syz 16 26m 19h15m
general protection fault in ucsi_acpi_probe (2) usb prio:low 2 syz, C error 37 1d02h 3d22h
WARNING in service_outstanding_interrupt/usb_submit_urb (2) usb prio:high -1 1 11d 7d00h
WARNING in v4l2_ctrl_auto_cluster media usb prio:high -1 syz, C 3 2d15h 9d22h PATCH [1d16h]
INFO: task hung in pn533_usb_probe nfc usb prio:high 1 syz, C error 2 12d 10d PATCH [8d04h]
KASAN: use-after-free Read in pn533_acr122_is_rx_frame_valid usb nfc prio:high 19 syz, C 25 21h26m 13d PATCH [6d16h]
INFO: task hung in usb_register_dev (3) prio:high usb 1 syz, C error 17 12h47m 14d PATCH [11d]
WARNING: suspicious RCU usage in phy_detach net usb prio:high 4 syz 12 14h28m 14d PATCH [17h41m]
KASAN: slab-use-after-free Read in roccat_disconnect prio:high input usb 19 syz, C 14 2d22h 16d PATCH [15d]
INFO: task hung in em28xx_i2c_unregister prio:high i2c usb 1 syz 31 1d08h 17d 💬 1 [17d]
BUG: unable to handle kernel paging request in gs_close prio:low usb 8 6 18d 18d
KASAN: slab-use-after-free Write in keyspan_close usb prio:high 22 syz, C 1 5d10h 19d PATCH [8d07h]
WARNING in cx231xx_send_vendor_cmd/usb_submit_urb usb prio:low -1 syz, C error 6 9d21h 19d PATCH [10d]
memory leak in nci_send_cmd usb nfc net prio:high 3 syz, C 4 12d 19d PATCH [10d]
KASAN: slab-use-after-free Read in k90_record_led_work usb input prio:high actionable 19 5 2d10h 19d PATCH [7d03h]
possible deadlock in fifo_open (2) usb prio:low 4 1 24d 20d
KASAN: slab-use-after-free Read in atkbd_event_work prio:high actionable usb 19 syz, C 7 3d16h 20d 💬 2 [3d08h]
KASAN: slab-use-after-free Read in k90_backlight_work input usb prio:high 19 11 18d 21d PATCH [4d13h]
KASAN: slab-use-after-free Read in sd_stopN media usb prio:high 19 syz 1 9d15h 22d PATCH [10d]
KASAN: slab-out-of-bounds Write in gb_operation_message_alloc greybus usb prio:high 21 syz, C error 51 9h32m 22d PATCH [14d]
WARNING in drm_mode_config_validate usb dri prio:high -1 syz, C error 36 12d 22d 💬 1 [21d]
KASAN: slab-use-after-free Read in roccat_open input usb prio:high 19 syz, C 2 4h25m 22d 💬 2 [2d12h]
UBSAN: shift-out-of-bounds in __vcc_connect net usb prio:high -1 syz 2 27d 23d
KASAN: stack-out-of-bounds Write in append_midi1_out_jack usb prio:normal 21 C 6 9d05h 23d PATCH [17d]
INFO: task hung in usb_set_configuration prio:high usb input 1 syz 2 29d 25d PATCH [23d]
INFO: task hung in unbind_store prio:high usb 1 syz, C error 11 10h38m 26d 💬 7 [22d]
KASAN: slab-use-after-free Write in usb_giveback_urb_bh prio:high actionable usb 22 2 29d 26d PATCH [26d]
possible deadlock in lookup_open prio:low usb 4 89 2d17h 27d
KASAN: slab-out-of-bounds Read in aqc_raw_event prio:high input usb hwmon 17 syz, C 10 12d 27d PATCH [27d]
KASAN: slab-use-after-free Read in dummy_timer prio:normal usb 19 31 3d02h 27d
WARNING in vb2_video_unregister_device prio:low media usb -1 syz, C 2 2d01h 27d
INFO: trying to register non-static key in edge_bulk_in_callback prio:high usb -1 1 32d 28d
INFO: trying to register non-static key in u_audio_get_playback_srate prio:high usb -1 1 32d 28d PATCH [6d19h]
KASAN: slab-out-of-bounds Read in gether_get_ifname prio:normal usb 17 syz, C 21 16d 28d PATCH [5d20h]
possible deadlock in mdc800_device_open prio:high usb 4 syz, C error 226 4d04h 28d PATCH [9d19h]
general protection fault in bus_remove_device prio:high usb 2 syz, C 7 6d16h 30d PATCH [28d]
memory leak in __usbhid_submit_report (2) prio:high input usb 3 syz, C 1 18d 30d PATCH [30d]
general protection fault in drm_object_attach_property usb dri prio:high 8 syz, C error 48 8d00h 32d PATCH [32d]
INFO: trying to register non-static key in gadget_dev_open prio:normal usb -1 1 36d 32d
general protection fault in adsl_state_store prio:low usb 2 C 11 1d07h 33d PATCH [8d07h]
WARNING: ODEBUG bug in hid_device_remove prio:high input usb -1 syz, C error 51 6d08h 34d 💬 2 [18d]
WARNING: ODEBUG bug in corsair_remove prio:high input usb -1 syz, C done 636 9h03m 34d PATCH [7d03h]
KASAN: slab-use-after-free Read in attach_store prio:normal usb 19 C 2 35d 35d PATCH [15d]
memory leak in gadget_bind (2) prio:low usb 3 syz, C 1 24d 35d PATCH [27d]
possible deadlock in uvcg_extension_ba_source_id_show prio:low usb 4 6 40d 36d
BUG: spinlock bad magic in gadget_dev_open prio:normal usb 4 11 5d11h 36d
possible deadlock in uvcg_default_output_i_terminal_show prio:low usb 4 1 43d 37d
possible deadlock in uvcg_extension_b_num_controls_store prio:low usb 4 1 43d 38d
general protection fault in uvcg_video_enable prio:high usb 2 C 8 10d 38d PATCH [35d]
WARNING in ttusb_dec_start_feed prio:high media usb -1 syz, C 2 20d 40d
memory leak in hidg_bind prio:low usb 3 syz, C 2 26d 40d PATCH [27d]
WARNING: refcount bug in trace_suspend_resume (2) prio:normal usb 13 syz, C 5 18d 40d PATCH [38d]
WARNING in i2c_unregister_device prio:low usb -1 syz, C error 24 38d 40d
KASAN: slab-use-after-free Read in input_dev_uevent (2) prio:high usb input 19 syz, C error 20 2d14h 40d
KASAN: slab-out-of-bounds Read in hid_dump_input prio:high input usb 19 syz, C error 22 36d 41d PATCH [7d06h]
memory leak in usb_copy_descriptors prio:low usb 3 syz, C 1 27d 42d PATCH [3d11h]
INFO: trying to register non-static key in usbg_make_tpg prio:low usb -1 4 30d 43d
WARNING in trace_suspend_resume/usb_submit_urb (2) prio:high nfc usb -1 3 45d 43d
INFO: trying to register non-static key in as102_stream_ctrl prio:high usb media -1 syz, C error 52 4d15h 43d PATCH [9d05h]
KASAN: slab-use-after-free Read in sur40_open prio:high usb input 19 syz, C error 44 36d 43d PATCH [28d]
BUG: sleeping function called from invalid context in cancel_delayed_work_sync prio:high usb mmc 10 syz, C 33035 now 43d PATCH [4d07h]
BUG: sleeping function called from invalid context in mmc_free_host prio:high usb mmc 5 syz, C error 5769 now 43d PATCH [30d]
KASAN: slab-use-after-free Read in rc_dev_uevent prio:high usb media 19 syz, C error 141 1h31m 43d PATCH [43d]
WARNING in port100_send_cmd_async/usb_submit_urb (3) prio:high usb nfc -1 syz, C error 325 6d22h 43d
possible deadlock in mnt_want_write (9) prio:low usb 4 syz, C 75 8d09h 44d
memory leak in f_uac1_opts_c_srate_store prio:normal usb 3 syz, C 1 31d 44d PATCH [43d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 5 14d 45d PATCH [13d]
WARNING in as102_stream_ctrl prio:low usb media -1 syz, C 101 11h22m 45d
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) prio:high actionable usb 19 1 50d 45d PATCH [8d07h]
possible deadlock in tcm_alloc prio:low usb 4 syz, C error 383 2h42m 46d
possible deadlock in uvcg_extension_allow_link prio:low usb 4 syz, C 13 22d 46d
memory leak in f_uac2_opts_p_srate_store prio:normal usb 3 syz, C 1 33d 47d PATCH [43d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 6 21d 47d PATCH [45d]
KASAN: slab-use-after-free Read in uvcg_extension_drop prio:normal actionable usb 19 5 12d 47d PATCH [45d]
general protection fault in dummy_udc_stop prio:low usb 8 24 23d 47d
general protection fault in emi26_probe prio:low usb 17 syz, C error 17 24d 47d 💬 1 [16d]
WARNING in ttusb_dec_send_command prio:high usb media -1 syz, C 235 2h46m 48d PATCH [46d]
general protection fault in rebind_store prio:low usb 8 syz, C 58 7d23h 48d PATCH [18d]
KASAN: slab-use-after-free Write in pn_bind prio:normal usb 22 syz 50 8d17h 48d PATCH [8d03h]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 58 6d04h 48d PATCH [44d]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 3 18d 48d PATCH [8d11h]
KASAN: slab-use-after-free Read in vhci_shutdown_connection prio:normal usb 19 syz, C 221 22d 48d PATCH [10d]
KASAN: slab-use-after-free Write in put_dev prio:normal usb 22 syz 5 12d 48d PATCH [46d]
KASAN: slab-use-after-free Write in gadgetfs_bind prio:normal usb 22 syz, C error 195 1d04h 49d PATCH [44d]
memory leak in uvcg_extension_ba_source_id_store prio:low usb 3 syz, C 1 50d 49d PATCH [45d]
WARNING in usb_ep_enable prio:high usb -1 syz, C done 1062 19m 49d PATCH [47d]
WARNING: locking bug in gadget_dev_open prio:normal usb 4 4 28d 49d
KASAN: slab-use-after-free Read in find_endpoint prio:normal usb 19 124 5h19m 49d
KASAN: slab-use-after-free Read in gadget_dev_open prio:normal usb 19 syz, C 184 1d06h 49d
KASAN: slab-use-after-free Read in ep_open prio:normal usb 19 syz, C done 165 2h27m 49d PATCH [48d]
WARNING in usbg_make_tpg prio:low usb -1 3 38d 49d
memory leak in f_uac2_opts_c_srate_store prio:low usb 3 syz, C 1 36d 49d PATCH [47d]
kernel BUG in register_netdevice prio:low usb -1 syz, C done 107 2d21h 50d 💬 2 [23d]
KASAN: invalid-free in f_uac2_opts_p_srate_store prio:normal usb 24 syz, C error 156 20d 50d PATCH [45d]
KASAN: invalid-free in f_uac2_opts_c_srate_store prio:normal usb 24 syz, C error 117 21d 51d PATCH [45d]
KASAN: slab-out-of-bounds Read in dummy_free_request prio:normal usb 17 162 22d 51d
general protection fault in start_dirop prio:low usb fs 2 syz, C 20 19d 51d PATCH [48d]
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 15 1d09h 51d
possible deadlock in uvc_func_allow_link prio:low usb fs 4 17 20d 51d
KASAN: slab-use-after-free Read in stub_rx_loop prio:high usb 19 C 10 9d01h 52d PATCH [22d]
general protection fault in dummy_udc_start prio:low usb 10 syz, C error 12268 8d04h 52d PATCH [51d]
general protection fault in dummy_set_selfpowered prio:low usb 10 syz, C error 1486 8d06h 52d
general protection fault in f_midi2_free_ep_reqs prio:high usb 10 syz, C 935 11d 52d PATCH [51d]
general protection fault in dummy_queue prio:low usb 19 643 4d18h 52d
KASAN: global-out-of-bounds Read in usb_copy_descriptors prio:high usb 17 512 10d 52d PATCH [47d]
KASAN: invalid-free in dev_free (4) prio:normal usb 24 1 58d 54d
WARNING in cm109_input_ev/usb_submit_urb (2) prio:low input usb -1 syz 1 59d 55d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C 3525 2h46m 65d 💬 3 [14d]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 26d 76d PATCH [64d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm input usb 1 syz, C error error 1 82d 80d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 76 40d 80d PATCH [69d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 25 3d11h 133d PATCH [82d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 40 2h59m 153d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 93 2d11h 176d PATCH [108d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1174 21m 176d PATCH [108d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 27 12d 179d PATCH [110d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2713 23d 183d PATCH [183d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error error 2364 72d 183d PATCH [137d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 60d 214d PATCH [79d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 364 8d17h 241d PATCH [112d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 syz, C error error 10 19h43m 250d 💬 10 [248d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 175d 256d 💬 1 [175d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 33 21d 270d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 19 31d 287d PATCH [125d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 279d 292d PATCH [271d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 35 11d 323d PATCH [71d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1330 7h22m 340d PATCH [82d]
general protection fault in count_matching_names (2) usb 2 syz 6 109d 342d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 29 15d 364d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 272 11d 392d PATCH [203d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 598 12d 393d PATCH [87d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 syz, C error 111 15d 403d
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 57 24d 430d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 159 1d10h 455d PATCH [56d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 524 5d00h 475d PATCH [126d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz 197 1h19m 482d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 844 1d06h 484d PATCH [298d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 syz, C error 428 6h22m 502d PATCH [492d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 94d 504d PATCH [500d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 422 4h23m 511d PATCH [466d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 17d 515d PATCH [305d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 16d 537d PATCH [339d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 784 2d04h 543d PATCH [466d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 435d 568d
general protection fault in status_show prio:high usb 2 syz, C 16 88d 609d PATCH [457d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz, C error 3346 4d14h 628d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 414d 703d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 25 22d 706d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 384 1d09h 735d PATCH [315d]
WARNING in enable_work prio:high usb media -1 syz, C error 1834 5d00h 758d 💬 2 [14d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7545 20h52m 838d PATCH [13d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 104 30d 843d
INFO: rcu detected stall in schedule (7) usb 1 syz, C done error 72 67d 844d
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error 270 30d 905d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 377 1d22h 910d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 26d 949d 💬 2 [875d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 26 28d 1096d 💬 1 [25d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 447 18d 1124d 💬 1 [45d]
INFO: rcu detected stall in console_callback input usb serial 1 syz, C error error 18 242d 1125d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 136 10d 1136d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 771 now 1196d 💬 4 [925d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 24d 1204d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1171 11h57m 1270d 💬 16 [139d]
INFO: task hung in hub_event (3) prio:high usb 1 C 1040 12h44m 1342d 💬 12 [14d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 863 24d 1366d 💬 14 [672d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 245d 1383d 💬 5 [326d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 237 1d02h 1448d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 9d11h 1838d PATCH [46d]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 155d 2041d PATCH [1831d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 4025 1h20m 2088d PATCH [1825d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3419 6h31m 2089d 💬 1 [139d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in usb_ep_alloc_request usb prio:low 2 2 5d20h 2d04h
BUG: soft lockup in dummy_timer (2) usb prio:normal 1 1 9d13h 5d13h
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] (2) usb -1 1 17d 13d
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add (2) usb race:benign prio:low 6 1 15d 15d
KASAN: stack-out-of-bounds Write in f_midi2_create_usb_configs prio:normal usb 21 3 31d 28d
general protection fault in usbg_submit_command prio:high usb 2 1 45d 39d
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small prio:high usb 10 4 47d 43d
KCSAN: data-race in event_handler / usbip_stop_eh prio:high race:benign usb 6 1 44d 44d
BUG: unable to handle kernel paging request in dummy_enable prio:low usb 8 3 43d 44d
KASAN: slab-out-of-bounds Read in free_netdev prio:normal usb 19 2 41d 48d
general protection fault in dummy_wakeup prio:low usb 2 2 37d 50d
general protection fault in mon_text_release prio:normal usb 10 3 61d 161d