usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 475
Parent subsystem(s): kernel (117)
Child subsystems: usb-storage (5)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
INFO: task hung in usb_device_read prio:normal usb 1 syz, C 20 1d03h 8h44m
UBSAN: shift-out-of-bounds in s32ton (3) input usb prio:high -1 syz, C 5 5d15h 1d20h PATCH [1d08h]
KASAN: slab-use-after-free Read in printer_func_unbind usb prio:normal actionable 19 2 6d14h 2d23h
BUG: unable to handle kernel paging request in usb_driver_release_interface prio:high usb 8 syz, C 3 4d14h 4d14h PATCH [1d19h]
KASAN: slab-use-after-free Write in ffs_data_clear usb prio:normal actionable 22 1 10d 5d23h PATCH [2h52m]
WARNING in smsusb_term_device (2) media usb prio:high -1 syz, C error 1 7d01h 6d20h PATCH [4d14h]
general protection fault in magicmouse_event prio:high input usb 2 syz, C 3 9d09h 9d08h PATCH [8d18h]
KASAN: slab-use-after-free Write in usb_giveback_urb_bh (2) usb prio:high actionable 22 1 17d 12d
INFO: task hung in usb_deregister_dev (4) prio:high usb 1 36 2d16h 14d
general protection fault in mxl111sf_ep6_streaming_ctrl media usb prio:high 2 syz, C error 4 8d16h 15d PATCH [7d11h]
INFO: task hung in usbdev_ioctl (8) prio:high usb 1 syz, C error 6 8d03h 20d PATCH [18d]
WARNING in ttusb_start_feed/usb_submit_urb media usb prio:high -1 syz, C error 29 3h24m 23d PATCH [23d]
KASAN: slab-use-after-free Read in rtsx_usb_ms_handle_req mmc usb prio:high 22 syz, C error 449 1h45m 24d PATCH [11d]
general protection fault in ucsi_acpi_probe (2) usb prio:low 2 syz, C error 50 3d22h 27d PATCH [20d]
WARNING in service_outstanding_interrupt/usb_submit_urb (2) prio:high usb -1 1 34d 30d
INFO: task hung in pn533_usb_probe prio:high usb nfc 1 syz, C error 6 13h11m 34d PATCH [31d]
INFO: task hung in usb_register_dev (3) prio:high usb 1 syz, C error 24 3d00h 37d PATCH [34d]
WARNING: suspicious RCU usage in phy_detach prio:high usb net 4 syz 29 1d03h 38d PATCH [9d16h]
KASAN: slab-use-after-free Read in roccat_disconnect prio:high input usb 19 syz, C error 20 19d 39d PATCH [18d]
BUG: unable to handle kernel paging request in gs_close prio:low usb 8 6 41d 41d PATCH [13d]
memory leak in nci_send_cmd prio:high usb 3 syz, C 5 1d16h 42d PATCH [17d]
KASAN: slab-use-after-free Read in k90_record_led_work prio:high actionable input usb 19 6 18d 43d PATCH [30d]
possible deadlock in fifo_open (2) prio:low usb 4 2 1d21h 43d
KASAN: slab-use-after-free Read in atkbd_event_work prio:high actionable usb 19 syz, C 8 10d 44d 💬 2 [26d]
KASAN: slab-use-after-free Read in k90_backlight_work prio:high input usb 19 11 41d 44d PATCH [27d]
KASAN: slab-use-after-free Read in sd_stopN prio:high media usb 19 syz 1 32d 45d PATCH [33d]
KASAN: slab-out-of-bounds Write in gb_operation_message_alloc prio:high usb greybus 21 syz, C error 100 9h57m 45d PATCH [37d]
WARNING in drm_mode_config_validate prio:high usb dri -1 syz, C error 36 35d 45d 💬 1 [44d]
KASAN: slab-use-after-free Read in roccat_open prio:high input usb 19 syz, C 2 23d 45d 💬 2 [12d]
UBSAN: shift-out-of-bounds in __vcc_connect prio:high net usb -1 syz 2 50d 46d PATCH [11d]
WARNING: ODEBUG bug in vub300_disconnect prio:high mmc usb -1 syz 81 1d00h 48d PATCH [32d]
INFO: task hung in usb_set_configuration prio:high usb input 1 syz 2 52d 48d PATCH [46d]
INFO: task hung in unbind_store prio:high usb 1 syz, C error 11 23d 49d 💬 7 [45d]
possible deadlock in lookup_open prio:low usb 4 syz, C 106 now 50d
KASAN: slab-out-of-bounds Read in aqc_raw_event prio:high input usb hwmon 17 syz, C error 12 4d03h 50d PATCH [50d]
KASAN: slab-use-after-free Read in dummy_timer prio:normal usb 19 39 5d16h 50d
INFO: trying to register non-static key in edge_bulk_in_callback prio:high usb -1 1 55d 51d
INFO: trying to register non-static key in u_audio_get_playback_srate prio:high usb -1 1 55d 51d PATCH [11d]
KASAN: slab-out-of-bounds Read in gether_get_ifname prio:normal usb 17 syz, C 21 39d 51d PATCH [29d]
possible deadlock in mdc800_device_open prio:high usb 4 syz, C error 317 7h11m 51d PATCH [33d]
general protection fault in bus_remove_device prio:high usb 2 syz, C 10 1d07h 53d PATCH [52d]
memory leak in __usbhid_submit_report (2) prio:high input usb 3 syz, C 2 9d16h 53d PATCH [53d]
general protection fault in drm_object_attach_property usb dri prio:high 8 syz, C error 60 2d22h 55d PATCH [55d]
INFO: trying to register non-static key in gadget_dev_open prio:normal usb -1 1 60d 56d
general protection fault in adsl_state_store prio:low usb 2 C 20 10d 56d PATCH [15d]
WARNING: ODEBUG bug in hid_device_remove prio:high input usb -1 syz, C error 52 7d07h 57d 💬 2 [17d]
WARNING: ODEBUG bug in corsair_remove prio:high input usb -1 syz, C done 804 17h42m 57d PATCH [30d]
KASAN: slab-use-after-free Read in attach_store prio:normal usb 19 C 2 58d 58d PATCH [18d]
memory leak in gadget_bind (2) prio:low usb 3 syz, C 1 47d 59d PATCH [11d]
possible deadlock in uvcg_extension_ba_source_id_show prio:low usb 4 6 64d 60d
BUG: spinlock bad magic in gadget_dev_open prio:normal usb 4 13 4d21h 60d
possible deadlock in uvcg_default_output_i_terminal_show prio:low usb 4 1 66d 61d
possible deadlock in uvcg_extension_b_num_controls_store prio:low usb 4 1 66d 62d
general protection fault in uvcg_video_enable prio:high usb 2 C 8 34d 62d PATCH [58d]
WARNING in ttusb_dec_start_feed prio:high usb media -1 syz, C 2 43d 63d
memory leak in hidg_bind prio:low usb 3 syz, C 2 49d 63d PATCH [50d]
WARNING: refcount bug in trace_suspend_resume (2) prio:normal usb 13 syz, C 5 41d 63d PATCH [61d]
WARNING in i2c_unregister_device prio:low usb -1 syz, C error 36 16d 63d PATCH [8h16m]
KASAN: slab-out-of-bounds Read in hid_dump_input prio:high input usb 19 syz, C error error 22 59d 64d PATCH [30d]
memory leak in usb_copy_descriptors prio:low usb 3 syz, C 1 50d 65d PATCH [26d]
INFO: trying to register non-static key in usbg_make_tpg prio:low usb -1 4 53d 66d
INFO: trying to register non-static key in as102_stream_ctrl prio:high usb media -1 syz, C error 101 6h38m 67d PATCH [32d]
KASAN: slab-use-after-free Read in sur40_open prio:high usb input 19 syz, C error error 44 59d 67d PATCH [18d]
KASAN: slab-use-after-free Read in rc_dev_uevent prio:high usb media 19 syz, C error 197 16h46m 67d PATCH [66d]
WARNING in port100_send_cmd_async/usb_submit_urb (3) prio:high usb nfc -1 syz, C error 347 11d 67d PATCH [15d]
memory leak in f_uac1_opts_c_srate_store prio:normal usb 3 syz, C 1 54d 67d PATCH [66d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 5 37d 68d PATCH [37d]
WARNING in as102_stream_ctrl prio:low usb media -1 syz, C 219 3h16m 69d PATCH [17d]
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) prio:high actionable usb 19 1 73d 69d PATCH [31d]
possible deadlock in tcm_alloc prio:low usb 4 syz, C error 547 6d05h 69d
possible deadlock in uvcg_extension_allow_link prio:low usb 4 syz, C 13 45d 69d
memory leak in f_uac2_opts_p_srate_store prio:normal usb 3 syz, C 1 56d 70d PATCH [66d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 6 44d 70d PATCH [68d]
KASAN: slab-use-after-free Read in uvcg_extension_drop prio:normal actionable usb 19 C 6 10d 71d PATCH [68d]
general protection fault in dummy_udc_stop prio:low usb 8 24 46d 71d
general protection fault in emi26_probe prio:low usb 17 syz, C error 17 47d 71d PATCH [2d21h]
WARNING in ttusb_dec_send_command prio:high usb media -1 syz, C 339 9h00m 72d PATCH [69d]
general protection fault in rebind_store prio:low usb 8 syz, C 65 1d10h 72d PATCH [15d]
KASAN: slab-use-after-free Write in pn_bind prio:normal usb 22 syz, C done 59 17h36m 72d PATCH [31d]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 58 14d 72d PATCH [67d]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 3 41d 72d PATCH [2d14h]
KASAN: slab-use-after-free Read in vhci_shutdown_connection prio:normal usb 19 syz, C 221 46d 72d PATCH [33d]
KASAN: slab-use-after-free Write in put_dev prio:normal usb 22 syz 5 36d 72d PATCH [69d]
KASAN: slab-use-after-free Write in gadgetfs_bind prio:normal usb 22 syz, C error 205 1d14h 72d PATCH [67d]
memory leak in uvcg_extension_ba_source_id_store prio:low usb 3 syz, C 1 73d 72d PATCH [68d]
WARNING in usb_ep_enable prio:high usb -1 syz, C done 2707 40m 72d PATCH [70d]
WARNING: locking bug in gadget_dev_open prio:normal usb 4 4 51d 72d
KASAN: slab-use-after-free Read in find_endpoint prio:normal usb 19 149 4d12h 72d
KASAN: slab-use-after-free Read in gadget_dev_open prio:normal usb 19 syz, C 194 1d16h 72d
KASAN: slab-use-after-free Read in ep_open prio:normal usb 19 syz, C done 222 2h22m 73d PATCH [72d]
WARNING in usbg_make_tpg prio:low usb -1 3 61d 73d
memory leak in f_uac2_opts_c_srate_store prio:low usb 3 syz, C 1 60d 73d PATCH [70d]
kernel BUG in register_netdevice prio:low usb -1 syz, C done 115 1d04h 74d 💬 2 [46d]
KASAN: invalid-free in f_uac2_opts_p_srate_store prio:normal usb 24 syz, C error done 156 44d 74d PATCH [68d]
KASAN: invalid-free in f_uac2_opts_c_srate_store prio:normal usb 24 syz, C error done 117 44d 74d PATCH [68d]
KASAN: slab-out-of-bounds Read in dummy_free_request prio:normal usb 17 162 45d 75d
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 15 10d 75d
possible deadlock in uvc_func_allow_link prio:low usb fs 4 17 44d 75d
KASAN: slab-use-after-free Read in stub_rx_loop prio:high usb 19 C 10 32d 75d PATCH [18d]
general protection fault in dummy_udc_start prio:low usb 10 syz, C error 12268 3d04h 75d PATCH [74d]
general protection fault in dummy_set_selfpowered prio:low usb 10 syz, C error 1486 3d07h 75d
general protection fault in f_midi2_free_ep_reqs prio:high usb 10 syz, C 935 34d 75d PATCH [74d]
general protection fault in dummy_queue prio:low usb 19 643 28d 75d
possible deadlock in configfs_depend_item_unlocked prio:low usb fs 4 syz, C error 6157 2h05m 75d
KASAN: global-out-of-bounds Read in usb_copy_descriptors prio:high usb 17 syz, C error 601 23h05m 75d PATCH [1d23h]
KASAN: invalid-free in dev_free (4) prio:normal usb 24 1 81d 77d
WARNING in cm109_input_ev/usb_submit_urb (2) prio:low usb input -1 syz 1 82d 78d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C 3856 35m 88d 💬 3 [6d05h]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 7d08h 99d PATCH [87d]
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 76 63d 104d PATCH [92d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 27 4d05h 157d PATCH [106d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 42 12h28m 176d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 125 2d00h 199d PATCH [131d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1982 10m 199d PATCH [131d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 30 6d16h 202d PATCH [134d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2713 47d 206d PATCH [206d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error error 2364 95d 206d PATCH [160d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 3 13d 238d PATCH [102d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 364 15d 264d PATCH [135d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb i2c 1 syz, C error error 12 5d02h 273d 💬 10 [271d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 198d 279d 💬 1 [198d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 36 10d 294d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error error 19 54d 311d PATCH [148d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 302d 315d PATCH [294d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 43 2d16h 346d PATCH [1d08h]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1460 58m 363d PATCH [105d]
general protection fault in count_matching_names (2) usb 2 syz 6 132d 366d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 29 38d 387d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 277 4d23h 416d PATCH [226d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 602 1d07h 416d PATCH [111d]
INFO: task hung in dvb_usbv2_exit prio:low i2c usb 1 syz, C error 111 38d 426d
INFO: task hung in console_callback (6) prio:high usb input 1 syz, C error error 57 47d 453d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 167 2d04h 478d PATCH [80d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 550 29m 498d PATCH [150d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz 220 7h28m 505d PATCH [1d16h]
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 858 12h44m 507d PATCH [321d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 117d 527d PATCH [524d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 512 5h32m 535d PATCH [489d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 22d 539d PATCH [328d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 40d 560d PATCH [362d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 846 4h40m 566d PATCH [489d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 458d 591d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 438d 726d
INFO: rcu detected stall in do_syscall_64 prio:high usb input 1 syz 25 46d 729d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 458 17h34m 758d PATCH [338d]
WARNING in enable_work prio:high usb media -1 syz, C error 1840 7d07h 781d 💬 2 [6d05h]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7671 2d01h 862d PATCH [36d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 104 53d 866d
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error error 270 53d 928d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 380 8d07h 933d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 49d 972d 💬 2 [898d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 27 10d 1119d PATCH [12d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 450 6d03h 1147d 💬 1 [6d05h]
INFO: rcu detected stall in console_callback usb input serial 1 syz, C error error 18 266d 1149d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 137 15d 1159d PATCH [5d13h]
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 822 12h54m 1219d 💬 4 [948d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 47d 1227d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1190 6h05m 1293d PATCH [5d13h]
INFO: task hung in hub_event (3) prio:high usb 1 C 1072 1d01h 1366d PATCH [5d13h]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 863 48d 1389d 💬 14 [695d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 268d 1406d 💬 5 [349d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 242 11h07m 1471d
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 179d 2064d PATCH [1854d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 4093 14h43m 2111d PATCH [1848d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3483 18h12m 2112d 💬 1 [162d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb (6) usb race:benign prio:low 6 1 13d 13d
KASAN: slab-use-after-free Write in dev_config usb 22 2 21d 17d
general protection fault in usb_ep_alloc_request usb prio:low 2 2 29d 25d
BUG: soft lockup in dummy_timer (2) prio:normal usb 1 1 32d 28d
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] (2) prio:high usb -1 1 40d 36d
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add (2) race:benign prio:low usb 6 1 38d 38d
KASAN: stack-out-of-bounds Write in f_midi2_create_usb_configs prio:normal usb 21 3 55d 51d
KCSAN: data-race in kick_pool_pick / wq_worker_running race:benign prio:low usb net 6 C 77 4h32m 52d
general protection fault in usbg_submit_command prio:high usb 2 1 68d 63d
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small prio:high usb 10 4 70d 67d
BUG: unable to handle kernel paging request in dummy_enable prio:low usb 8 3 66d 68d
KASAN: slab-out-of-bounds Read in free_netdev prio:normal usb 19 2 64d 72d
general protection fault in dummy_wakeup prio:low usb 2 2 60d 74d
general protection fault in mon_text_release prio:normal usb 10 3 85d 184d