usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 451
Parent subsystem(s): kernel (121)
Child subsystems: usb-storage (5)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Write in keyspan_close usb prio:high 22 syz, C 1 13h35m 7h44m
WARNING in cx231xx_send_vendor_cmd/usb_submit_urb usb prio:low -1 syz, C error 4 1d08h 7h54m
memory leak in nci_send_cmd usb nfc net prio:high 3 syz, C 2 4d10h 9h57m PATCH [4h36m]
KASAN: slab-use-after-free Read in k90_record_led_work usb input prio:high actionable 19 3 4d02h 22h43m
possible deadlock in fifo_open (2) usb prio:low 4 1 5d03h 1d03h
KASAN: slab-use-after-free Read in k90_backlight_work input usb prio:high 19 10 1h16m 2d07h
KASAN: slab-use-after-free Read in sd_stopN media usb prio:high 19 syz 1 4d19h 3d03h PATCH [13h20m]
general protection fault in keyspan_break_ctl usb prio:high 2 syz 8 5d14h 3d03h 💬 1 [2d15h]
INFO: task hung in trigger_card_free prio:high usb input 1 syz 29 3d10h 3d03h
KASAN: slab-out-of-bounds Write in gb_operation_message_alloc greybus usb prio:high 21 syz, C 11 11h14m 3d03h 💬 1 [2d15h]
WARNING in drm_mode_config_validate usb dri prio:high -1 syz, C error 23 3h55m 3d03h 💬 1 [2d16h]
KASAN: slab-use-after-free Read in roccat_open input usb prio:high 19 syz 1 7d16h 3d16h 💬 2 [3d05h]
UBSAN: shift-out-of-bounds in __vcc_connect net usb prio:high -1 syz 2 8d04h 4d10h
KASAN: stack-out-of-bounds Write in append_midi1_out_jack usb 21 C 6 4d10h 4d10h PATCH [1d20h]
INFO: task hung in usb_set_configuration prio:high usb input 1 syz 2 10d 6d08h PATCH [4d15h]
INFO: task hung in unbind_store prio:high usb 1 syz, C error 11 4d07h 7d11h 💬 7 [3d13h]
KASAN: slab-use-after-free Write in usb_giveback_urb_bh usb prio:high actionable 22 2 10d 7d21h PATCH [7d05h]
possible deadlock in lookup_open usb prio:low 4 56 22h37m 8d15h
KASAN: slab-use-after-free Read in dummy_timer usb prio:normal 19 16 2h43m 8d20h
INFO: trying to register non-static key in edge_bulk_in_callback usb prio:high -1 1 13d 9d13h
general protection fault in ucsi_acpi_probe usb prio:low 2 syz 17 12d 9d13h PATCH [9d07h]
INFO: trying to register non-static key in u_audio_get_playback_srate usb prio:high -1 1 13d 9d13h PATCH [9d10h]
general protection fault in vhci_hcd_probe usb prio:low 2 syz 10 12d 9d14h
BUG: unable to handle kernel NULL pointer dereference in usb_reinit usb prio:low 10 syz, C 10 13d 9d14h PATCH [8d18h]
BUG: unable to handle kernel paging request in xhci_halt usb prio:high 8 syz, C 17 9d08h 9d14h PATCH [8d12h]
KASAN: slab-out-of-bounds Read in gether_get_ifname usb prio:normal 17 syz, C 21 12d 9d14h PATCH [8d13h]
general protection fault in wcove_typec_probe prio:low usb 2 syz 12 5d19h 9d15h PATCH [9d07h]
possible deadlock in mdc800_device_open usb prio:high 4 syz, C error 222 6d03h 9d15h
general protection fault in bus_remove_device usb prio:high 2 syz, C 4 2d22h 11d PATCH [10d]
memory leak in __usbhid_submit_report (2) input usb prio:high 3 syz, C 1 15d 11d PATCH [11d]
general protection fault in fsg_common_set_num_buffers prio:low usb 8 syz, C 11 10d 13d PATCH [12d]
INFO: trying to register non-static key in gadget_dev_open usb prio:normal -1 1 17d 13d
general protection fault in adsl_state_store prio:low usb 2 C 7 4d13h 14d
WARNING: ODEBUG bug in hid_device_remove input usb prio:high -1 syz 45 1h17m 15d 💬 2 [13d]
WARNING: ODEBUG bug in corsair_remove input usb prio:high -1 syz, C done 494 22m 15d PATCH [13d]
KASAN: slab-use-after-free Read in attach_store usb prio:normal 19 C 2 16d 16d PATCH [15h59m]
KASAN: slab-use-after-free Read in usa49_glocont_callback prio:high actionable usb 19 C 3 1h34m 16d PATCH [9d07h]
KASAN: slab-use-after-free Read in f_midi2_opts_iface_name_show usb prio:normal 19 12 9d00h 16d PATCH [14d]
memory leak in gadget_bind (2) usb prio:low 3 syz, C 1 5d04h 16d PATCH [8d19h]
possible deadlock in uvcg_frame_dw_frame_interval_store usb prio:low 4 4 3d10h 17d
possible deadlock in uvcg_extension_ba_source_id_show usb prio:low 4 6 22d 17d
BUG: spinlock bad magic in gadget_dev_open prio:normal usb 4 9 33m 17d
possible deadlock in uvcg_default_output_i_terminal_show usb prio:low 4 1 24d 18d
WARNING: kobject bug in pch_udc_remove prio:high usb -1 syz, C 5 19d 19d PATCH [19d]
possible deadlock in uvcg_extension_b_num_controls_store usb prio:low 4 1 24d 19d
general protection fault in uvcg_video_enable prio:high usb 2 C 8 6d01h 19d PATCH [16d]
possible deadlock in tcm_register_callback usb prio:low 4 4 11d 20d
WARNING in ttusb_dec_start_feed media usb prio:high -1 syz, C 2 1d15h 21d
memory leak in hidg_bind usb prio:low 3 syz, C 2 7d14h 21d PATCH [8d19h]
WARNING: refcount bug in trace_suspend_resume (2) usb prio:normal 13 syz, C 4 1d15h 21d PATCH [19d]
WARNING in i2c_unregister_device usb prio:low -1 syz, C error 24 19d 21d
KASAN: slab-out-of-bounds Read in hid_dump_input input usb prio:high 19 syz, C error 22 17d 22d PATCH [9d20h]
memory leak in usb_copy_descriptors usb prio:low 3 syz, C 1 8d04h 23d PATCH [8d21h]
INFO: trying to register non-static key in usbg_make_tpg usb prio:low -1 4 11d 24d
WARNING in trace_suspend_resume/usb_submit_urb (2) usb prio:high -1 3 26d 24d
BUG: unable to handle kernel paging request in nhi_probe usb prio:high 8 syz, C 13 13d 24d PATCH [23d]
KASAN: slab-use-after-free Read in sur40_open usb input prio:high 19 syz, C error 44 17d 24d PATCH [9d21h]
BUG: sleeping function called from invalid context in cancel_delayed_work_sync usb prio:high 5 syz, C 12934 now 25d PATCH [13h14m]
BUG: unable to handle kernel paging request in ioread32 usb prio:high 8 syz, C error 66 5d17h 25d PATCH [5d06h]
memory leak in f_uac1_opts_c_srate_store usb prio:normal 3 syz, C 1 12d 25d PATCH [24d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 3 18d 26d PATCH [1d07h]
WARNING in __fsg_is_set prio:low usb -1 1 30d 26d
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) prio:high actionable usb 19 1 31d 26d PATCH [26d]
possible deadlock in tcm_alloc prio:low usb 4 syz, C error 192 5d04h 27d
general protection fault in usb_put_function_instance prio:low usb 2 12 23d 27d PATCH [3d17h]
possible deadlock in uvcg_extension_allow_link prio:low usb 4 syz, C 13 3d08h 27d
memory leak in f_uac2_opts_p_srate_store prio:normal usb 3 syz, C 1 14d 28d PATCH [24d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 6 2d04h 28d PATCH [26d]
KASAN: slab-use-after-free Read in uvcg_extension_drop prio:normal actionable usb 19 4 2d08h 28d PATCH [26d]
KASAN: slab-use-after-free Write in usb_free_urb prio:high actionable media usb 22 4 6d04h 28d PATCH [26d]
general protection fault in dummy_udc_stop prio:low usb 8 24 4d04h 28d
general protection fault in emi26_probe prio:low usb 17 syz, C error 17 5d16h 28d
WARNING in ttusb_dec_send_command prio:high usb media -1 syz, C 145 3h04m 29d PATCH [27d]
general protection fault in mon_notify prio:high usb 2 syz, C 4 19d 29d PATCH [29d]
general protection fault in rebind_store prio:low usb 8 syz, C 49 2h31m 29d PATCH [10d]
KASAN: slab-use-after-free Read in vhci_cleanup_unlink_list prio:normal usb 19 syz, C error 257 3d16h 29d PATCH [27d]
KASAN: slab-use-after-free Write in pn_bind prio:normal usb 22 syz 47 1d20h 29d PATCH [25d]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 58 1d18h 29d PATCH [25d]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 3 13d 29d
WARNING in f_midi_free prio:low usb -1 14 12m 29d PATCH [14d]
KASAN: slab-use-after-free Read in vhci_shutdown_connection prio:normal usb 19 syz, C 221 3d22h 29d
KASAN: slab-use-after-free Write in put_dev prio:normal usb 22 syz 4 2h19m 29d PATCH [27d]
KASAN: slab-use-after-free Write in gadgetfs_bind prio:normal usb 22 syz, C error 68 1d12h 30d PATCH [25d]
memory leak in uvcg_extension_ba_source_id_store prio:low usb 3 syz, C 1 31d 30d PATCH [26d]
WARNING in usb_ep_enable prio:high usb -1 syz, C done 641 18h52m 30d PATCH [28d]
WARNING: locking bug in gadget_dev_open prio:normal usb 4 4 9d13h 30d
KASAN: slab-use-after-free Read in find_endpoint prio:normal usb 19 68 14m 30d
KASAN: slab-use-after-free Read in gadget_dev_open prio:normal usb 19 syz, C 93 24m 30d
KASAN: slab-use-after-free Read in ep_open prio:normal usb 19 syz, C done 95 4h36m 30d PATCH [29d]
WARNING in usbg_make_tpg prio:low usb -1 3 19d 30d
memory leak in f_uac2_opts_c_srate_store prio:low usb 3 syz, C 1 17d 30d PATCH [28d]
possible deadlock in process_measurement (6) prio:low usb 4 942 56m 31d
kernel BUG in register_netdevice prio:low usb -1 syz, C done 102 1d00h 31d 💬 2 [4d09h]
KASAN: invalid-free in f_uac2_opts_p_srate_store prio:normal usb 24 syz, C error 156 2d02h 31d PATCH [26d]
KASAN: invalid-free in f_uac2_opts_c_srate_store prio:normal usb 24 syz, C error 117 2d08h 32d PATCH [26d]
KASAN: slab-out-of-bounds Read in dummy_free_request prio:normal usb 17 162 3d02h 32d
general protection fault in start_dirop prio:low usb fs 2 syz, C 20 1d01h 32d PATCH [29d]
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 13 13d 32d
possible deadlock in uvc_func_allow_link prio:low usb fs 4 17 1d20h 32d
KASAN: slab-use-after-free Read in stub_rx_loop prio:high usb 19 C 10 4d05h 33d PATCH [3d21h]
general protection fault in dummy_udc_start prio:low usb 10 syz, C error 12268 3d07h 33d PATCH [32d]
general protection fault in dummy_set_selfpowered prio:low usb 10 syz, C error 1486 3d09h 33d
KASAN: slab-use-after-free Read in raw_process_ep0_io prio:normal usb 19 syz, C 38 4d06h 33d PATCH [26d]
general protection fault in f_midi2_free_ep_reqs prio:high usb 10 syz, C 627 2h47m 33d PATCH [32d]
general protection fault in dummy_queue prio:low usb 19 637 3d08h 33d
KASAN: global-out-of-bounds Read in usb_copy_descriptors prio:high usb 17 476 3h02m 33d PATCH [29d]
general protection fault in f_midi2_stop_eps prio:high usb 2 syz, C error 555 1d06h 33d PATCH [32d]
KASAN: invalid-free in dev_free (4) prio:normal usb 24 1 39d 35d
WARNING in cm109_input_ev/usb_submit_urb (2) prio:low input usb -1 syz 1 40d 36d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C 3162 2h01m 46d 💬 3 [30d]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 7d07h 57d PATCH [45d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm input usb 1 syz, C error error 1 64d 62d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 76 21d 62d PATCH [50d]
WARNING in igorplugusb_cmd/usb_submit_urb prio:low media usb -1 syz, C 1 96d 93d PATCH [74d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 21 14d 114d PATCH [63d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 38 21d 134d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error 91 49d 157d PATCH [89d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1157 9d08h 157d PATCH [89d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 9 126d 160d PATCH [91d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2713 5d01h 164d PATCH [164d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error 2364 53d 164d PATCH [118d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 41d 196d PATCH [60d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 364 3d22h 222d PATCH [93d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 syz, C error error 9 8h30m 231d 💬 10 [229d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 156d 237d 💬 1 [156d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 33 2d08h 251d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 19 12d 268d PATCH [106d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 260d 273d PATCH [252d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 35 6d07h 304d PATCH [52d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1207 1h05m 321d PATCH [63d]
general protection fault in count_matching_names (2) usb 2 syz 6 90d 324d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 28 11d 345d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 272 9d15h 373d PATCH [184d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 596 5d09h 374d PATCH [68d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 syz, C error 109 14d 384d
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 57 5d06h 411d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 159 2d00h 436d PATCH [38d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 499 1d03h 456d PATCH [107d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz 183 1d18h 463d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 820 13h14m 465d PATCH [279d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 syz, C error 416 1d08h 484d PATCH [473d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 75d 485d PATCH [481d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 381 7h27m 493d PATCH [447d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 27d 496d PATCH [286d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 16d 518d PATCH [320d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 761 1d05h 524d PATCH [447d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 416d 549d
general protection fault in status_show prio:high usb 2 syz, C 16 69d 590d PATCH [438d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz, C error 2135 now 609d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 396d 684d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 25 3d22h 687d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 371 1d22h 716d PATCH [296d]
WARNING in enable_work prio:high usb media -1 syz, C error 1832 12d 739d 💬 2 [57d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7505 7h37m 819d PATCH [122d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 104 11d 824d
INFO: rcu detected stall in schedule (7) usb 1 syz, C done error 72 48d 825d
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error 270 11d 886d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 372 8d03h 891d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 7d17h 930d 💬 2 [856d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 26 9d09h 1077d 💬 1 [6d18h]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 446 2d18h 1105d 💬 1 [26d]
INFO: rcu detected stall in console_callback input usb serial 1 syz, C error error 18 223d 1107d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 132 1d00h 1117d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 733 1d05h 1177d 💬 4 [906d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 5d09h 1185d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1157 1d23h 1251d 💬 16 [120d]
INFO: task hung in hub_event (3) prio:high usb 1 C 991 1d03h 1324d 💬 12 [24d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 863 5d21h 1347d 💬 14 [653d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 226d 1364d 💬 5 [307d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 224 4d14h 1429d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 14d 1819d PATCH [27d]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 137d 2022d PATCH [1812d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 3939 16h36m 2069d PATCH [1806d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3350 4h50m 2070d 💬 1 [120d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: stack-out-of-bounds Write in f_midi2_create_usb_configs usb prio:normal 21 3 12d 9d14h
BUG: unable to handle kernel paging request in iowrite32 usb prio:high 8 1 26d 20d
general protection fault in usbg_submit_command usb prio:high 2 1 26d 20d
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small usb prio:high 10 4 28d 24d
KCSAN: data-race in event_handler / usbip_stop_eh usb prio:high race:benign 6 1 25d 25d
BUG: unable to handle kernel paging request in gs_close usb prio:low 8 4 16d 25d
BUG: unable to handle kernel paging request in dummy_enable prio:low usb 8 3 24d 25d
KASAN: slab-out-of-bounds Read in free_netdev prio:normal usb 19 2 22d 29d
general protection fault in dummy_wakeup prio:low usb 2 2 18d 31d
KCSAN: data-race in mon_reader_add / usb_hcd_submit_urb (3) race:benign prio:low usb 6 1 42d 42d
general protection fault in mon_text_release prio:normal usb 10 3 43d 142d