usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 457
Parent subsystem(s): kernel (121)
Child subsystems: usb-storage (5)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING: suspicious RCU usage in phy_detach net usb 4 syz 2 10h55m 6h49m
KASAN: slab-use-after-free Read in roccat_disconnect prio:high input usb 19 syz, C 6 1d23h 1d09h PATCH [15h47m]
INFO: task hung in em28xx_i2c_unregister prio:high i2c usb 1 syz 30 9h09m 3d06h 💬 1 [2d21h]
BUG: unable to handle kernel paging request in gs_close prio:low usb 8 6 3d16h 3d16h
KASAN: slab-use-after-free Write in keyspan_close usb prio:high 22 syz, C 1 4d18h 4d12h PATCH [4d01h]
WARNING in cx231xx_send_vendor_cmd/usb_submit_urb usb prio:low -1 syz, C error 4 5d13h 4d13h
memory leak in nci_send_cmd usb nfc net prio:high 3 syz, C 2 8d15h 4d15h PATCH [4d09h]
KASAN: slab-use-after-free Read in k90_record_led_work usb input prio:high actionable 19 4 1d06h 5d03h PATCH [3d20h]
possible deadlock in fifo_open (2) usb prio:low 4 1 9d08h 5d08h
KASAN: slab-use-after-free Read in k90_backlight_work input usb prio:high 19 11 3d17h 6d12h
KASAN: slab-use-after-free Read in sd_stopN media usb prio:high 19 syz 1 9d00h 7d09h PATCH [4d18h]
general protection fault in keyspan_break_ctl usb prio:high 2 syz, C 11 12h35m 7d09h PATCH [11h28m]
INFO: task hung in trigger_card_free prio:high usb input 1 syz 29 7d16h 7d09h
KASAN: slab-out-of-bounds Write in gb_operation_message_alloc greybus usb prio:high 21 syz, C 20 8h25m 7d09h PATCH [1d13h]
WARNING in drm_mode_config_validate usb dri prio:high -1 syz, C error 28 7h06m 7d09h 💬 1 [6d21h]
KASAN: slab-use-after-free Read in roccat_open input usb prio:high 19 syz 1 11d 7d21h 💬 2 [22h03m]
UBSAN: shift-out-of-bounds in __vcc_connect net usb prio:high -1 syz 2 12d 8d15h
KASAN: stack-out-of-bounds Write in append_midi1_out_jack usb prio:normal 21 C 6 8d15h 8d16h PATCH [2d13h]
INFO: task hung in usb_set_configuration prio:high usb input 1 syz 2 14d 10d PATCH [8d20h]
INFO: task hung in unbind_store prio:high usb 1 syz, C error 11 8d13h 11d 💬 7 [7d18h]
KASAN: slab-use-after-free Write in usb_giveback_urb_bh usb prio:high actionable 22 2 14d 12d PATCH [11d]
possible deadlock in lookup_open usb prio:low 4 75 8h13m 12d
KASAN: slab-use-after-free Read in dummy_timer usb prio:normal 19 24 1d13h 13d
INFO: trying to register non-static key in edge_bulk_in_callback usb prio:high -1 1 17d 13d
general protection fault in ucsi_acpi_probe usb prio:low 2 syz 17 11m 13d PATCH [13d]
INFO: trying to register non-static key in u_audio_get_playback_srate usb prio:high -1 1 17d 13d PATCH [13d]
general protection fault in vhci_hcd_probe usb prio:low 2 syz 10 17d 13d
BUG: unable to handle kernel NULL pointer dereference in usb_reinit usb prio:low 10 syz, C 10 16h01m 13d PATCH [12d]
BUG: unable to handle kernel paging request in xhci_halt usb prio:high 8 syz, C 17 13d 13d PATCH [12d]
KASAN: slab-out-of-bounds Read in gether_get_ifname usb prio:normal 17 syz, C 21 1d22h 13d PATCH [12d]
general protection fault in wcove_typec_probe prio:low usb 2 syz 12 10d 13d PATCH [13d]
possible deadlock in mdc800_device_open usb prio:high 4 syz, C error 224 7h39m 13d
general protection fault in bus_remove_device usb prio:high 2 syz, C 4 7d03h 15d PATCH [14d]
memory leak in __usbhid_submit_report (2) input usb prio:high 3 syz, C 1 3d19h 15d PATCH [15d]
INFO: trying to register non-static key in gadget_dev_open usb prio:normal -1 1 22d 18d
general protection fault in adsl_state_store prio:low usb 2 C 7 8d18h 18d PATCH [1d19h]
WARNING: ODEBUG bug in hid_device_remove input usb prio:high -1 syz, C error 48 1d04h 19d 💬 2 [3d23h]
WARNING: ODEBUG bug in corsair_remove input usb prio:high -1 syz, C done 523 5h31m 19d PATCH [3d20h]
KASAN: slab-use-after-free Read in attach_store usb prio:normal 19 C 2 20d 20d PATCH [15h40m]
KASAN: slab-use-after-free Read in usa49_glocont_callback prio:high actionable usb 19 C 3 4d06h 21d PATCH [13d]
memory leak in gadget_bind (2) usb prio:low 3 syz, C 1 9d09h 21d PATCH [13d]
possible deadlock in uvcg_frame_dw_frame_interval_store usb prio:low 4 4 7d15h 21d
possible deadlock in uvcg_extension_ba_source_id_show usb prio:low 4 6 26d 22d
BUG: spinlock bad magic in gadget_dev_open prio:normal usb 4 10 3d14h 22d
possible deadlock in uvcg_default_output_i_terminal_show usb prio:low 4 1 28d 23d
WARNING: kobject bug in pch_udc_remove prio:high usb -1 syz, C 5 23d 23d PATCH [1d21h]
possible deadlock in uvcg_extension_b_num_controls_store usb prio:low 4 1 28d 24d
general protection fault in uvcg_video_enable prio:high usb 2 C 8 10d 24d PATCH [20d]
WARNING in ttusb_dec_start_feed media usb prio:high -1 syz, C 2 5d20h 25d
memory leak in hidg_bind usb prio:low 3 syz, C 2 11d 25d PATCH [13d]
WARNING: refcount bug in trace_suspend_resume (2) usb prio:normal 13 syz, C 5 3d18h 25d PATCH [23d]
WARNING in i2c_unregister_device usb prio:low -1 syz, C error 24 24d 25d
KASAN: slab-out-of-bounds Read in hid_dump_input input usb prio:high 19 syz, C error 22 21d 26d PATCH [14d]
memory leak in usb_copy_descriptors prio:low usb 3 syz, C 1 12d 27d PATCH [1d17h]
INFO: trying to register non-static key in usbg_make_tpg prio:low usb -1 4 15d 28d
WARNING in trace_suspend_resume/usb_submit_urb (2) prio:high nfc usb -1 3 30d 28d
BUG: unable to handle kernel paging request in nhi_probe prio:high usb 8 syz, C 13 17d 29d PATCH [27d]
KASAN: slab-use-after-free Read in sur40_open prio:high usb input 19 syz, C error 44 22d 29d PATCH [14d]
BUG: sleeping function called from invalid context in cancel_delayed_work_sync prio:high usb mmc 5 syz, C 17340 now 29d PATCH [4d18h]
BUG: sleeping function called from invalid context in mmc_free_host prio:high usb mmc 5 syz, C error 3090 15m 29d PATCH [15d]
KASAN: slab-use-after-free Read in rc_dev_uevent prio:high usb media 19 syz, C error 79 3d07h 29d PATCH [28d]
BUG: unable to handle kernel paging request in ioread32 prio:high usb 8 syz, C error 66 9d22h 29d PATCH [9d11h]
WARNING in port100_send_cmd_async/usb_submit_urb (3) prio:high usb nfc -1 syz, C error 324 4d09h 29d
possible deadlock in mnt_want_write (9) prio:low usb 4 syz, C 70 19h59m 29d
memory leak in f_uac1_opts_c_srate_store prio:normal usb 3 syz, C 1 16d 30d PATCH [28d]
KASAN: slab-use-after-free Write in gadgetfs_kill_sb prio:normal actionable usb 22 C 4 2d22h 31d PATCH [1d13h]
WARNING in __fsg_is_set prio:low usb -1 1 35d 31d
KASAN: slab-use-after-free Read in lookup_object_or_alloc (4) prio:high actionable usb 19 1 35d 31d PATCH [30d]
possible deadlock in tcm_alloc prio:low usb 4 syz, C error 260 8h26m 31d
possible deadlock in uvcg_extension_allow_link prio:low usb 4 syz, C 13 7d13h 31d
memory leak in f_uac2_opts_p_srate_store prio:normal usb 3 syz, C 1 18d 32d PATCH [28d]
KASAN: invalid-free in f_uac1_opts_c_srate_store prio:normal usb 24 syz, C 6 6d09h 33d PATCH [30d]
KASAN: slab-use-after-free Read in uvcg_extension_drop prio:normal actionable usb 19 4 6d13h 33d PATCH [30d]
KASAN: slab-use-after-free Write in usb_free_urb prio:high actionable usb 22 syz, C 8 1d22h 33d PATCH [14h54m]
general protection fault in dummy_udc_stop prio:low usb 8 24 8d09h 33d
general protection fault in emi26_probe prio:low usb 17 syz, C error 17 9d22h 33d 💬 1 [1d15h]
WARNING in ttusb_dec_send_command prio:high usb media -1 syz, C 164 1h36m 34d PATCH [31d]
general protection fault in mon_notify prio:high usb 2 syz, C 4 23d 34d PATCH [33d]
general protection fault in rebind_store prio:low usb 8 syz, C 56 3d13h 34d PATCH [3d17h]
KASAN: slab-use-after-free Read in vhci_cleanup_unlink_list prio:normal usb 19 syz, C error 257 7d21h 34d PATCH [31d]
KASAN: slab-use-after-free Write in pn_bind prio:normal usb 22 syz 48 4d04h 34d PATCH [29d]
general protection fault in request_ihex_firmware prio:high usb 2 syz, C error 58 5d23h 34d PATCH [29d]
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb 4 C 3 3d10h 34d PATCH [11h05m]
KASAN: slab-use-after-free Read in vhci_shutdown_connection prio:normal usb 19 syz, C 221 8d03h 34d
KASAN: slab-use-after-free Write in put_dev prio:normal usb 22 syz 4 4d07h 34d PATCH [31d]
KASAN: slab-use-after-free Write in gadgetfs_bind prio:normal usb 22 syz, C error 112 now 34d PATCH [29d]
memory leak in uvcg_extension_ba_source_id_store prio:low usb 3 syz, C 1 35d 34d PATCH [30d]
WARNING in usb_ep_enable prio:high usb -1 syz, C done 672 2h19m 34d PATCH [32d]
WARNING: locking bug in gadget_dev_open prio:normal usb 4 4 13d 34d
KASAN: slab-use-after-free Read in find_endpoint prio:normal usb 19 88 1h15m 34d
KASAN: slab-use-after-free Read in gadget_dev_open prio:normal usb 19 syz, C 155 13h54m 34d
KASAN: slab-use-after-free Read in ep_open prio:normal usb 19 syz, C done 117 1h07m 35d PATCH [34d]
WARNING in usbg_make_tpg prio:low usb -1 3 23d 35d
memory leak in f_uac2_opts_c_srate_store prio:low usb 3 syz, C 1 22d 35d PATCH [33d]
kernel BUG in register_netdevice prio:low usb -1 syz, C done 105 1d14h 36d 💬 2 [8d14h]
KASAN: invalid-free in f_uac2_opts_p_srate_store prio:normal usb 24 syz, C error 156 6d07h 36d PATCH [30d]
KASAN: invalid-free in f_uac2_opts_c_srate_store prio:normal usb 24 syz, C error 117 6d13h 36d PATCH [30d]
KASAN: slab-out-of-bounds Read in dummy_free_request prio:normal usb 17 162 7d07h 37d
general protection fault in start_dirop prio:low usb fs 2 syz, C 20 5d06h 37d PATCH [34d]
WARNING in dummy_free_request (2) prio:normal usb -1 syz, C error 14 1d09h 37d
possible deadlock in uvc_func_allow_link prio:low usb fs 4 17 6d02h 37d
KASAN: slab-use-after-free Read in stub_rx_loop prio:high usb 19 C 10 8d11h 37d PATCH [8d02h]
general protection fault in dummy_udc_start prio:low usb 10 syz, C error 12268 7d12h 37d PATCH [36d]
general protection fault in dummy_set_selfpowered prio:low usb 10 syz, C error 1486 7d14h 37d
KASAN: slab-use-after-free Read in raw_process_ep0_io prio:normal usb 19 syz, C 38 8d11h 37d PATCH [30d]
general protection fault in f_midi2_free_ep_reqs prio:high usb 10 syz, C 704 1h00m 37d PATCH [36d]
general protection fault in dummy_queue prio:low usb 19 639 3d14h 37d
KASAN: global-out-of-bounds Read in usb_copy_descriptors prio:high usb 17 487 7h02m 37d PATCH [33d]
KASAN: invalid-free in dev_free (4) prio:normal usb 24 1 43d 39d
WARNING in cm109_input_ev/usb_submit_urb (2) prio:low input usb -1 syz 1 44d 40d
INFO: trying to register non-static key in __vb2_queue_cancel prio:high usb media -1 syz, C 3460 8h51m 51d 💬 3 [34d]
WARNING in __carl9170_tx_process_status prio:high usb wireless -1 syz, C 6 11d 61d PATCH [50d]
INFO: rcu detected stall in sys_epoll_wait (9) prio:high mm input usb 1 syz, C error error 1 68d 66d
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 syz, C error 76 25d 66d PATCH [54d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 syz, C 21 18d 119d PATCH [68d]
INFO: task hung in devres_release_group (2) prio:high input usb 1 syz, C error 38 25d 138d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 91 53d 161d PATCH [93d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 syz, C error error 1157 13d 161d PATCH [93d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 syz, C error 9 3d15h 164d PATCH [96d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 syz, C error 2713 9d06h 168d PATCH [168d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 syz, C error error 2364 57d 168d PATCH [122d]
memory leak in dvb_register_device prio:high media usb 3 syz, C 2 45d 200d PATCH [64d]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 syz, C error 364 8d03h 226d PATCH [97d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 syz, C error error 9 4d13h 235d 💬 10 [233d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 syz, C 4 160d 241d 💬 1 [160d]
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 33 6d14h 256d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 19 16d 273d PATCH [110d]
WARNING in usb_start_wait_urb prio:low usb -1 syz, C error 79 264d 277d PATCH [256d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 syz, C error error 35 10d 308d PATCH [56d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 syz, C error 1243 12m 325d PATCH [67d]
general protection fault in count_matching_names (2) usb 2 syz 6 94d 328d
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 29 11h12m 349d
general protection fault in su3000_i2c_transfer prio:low usb media 2 syz, C done 272 13d 378d PATCH [188d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 syz, C error 597 5m 379d PATCH [73d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 syz, C error 111 16h51m 389d
INFO: task hung in console_callback (6) prio:high input usb 1 syz, C error error 57 9d11h 415d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 syz, C error 159 6d05h 441d PATCH [42d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 syz, C error 513 7h32m 460d PATCH [112d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 syz 186 6h44m 467d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 syz, C error 829 19h21m 469d PATCH [283d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 syz, C error 420 2d15h 488d PATCH [478d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 syz, C 1099 79d 489d PATCH [486d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 syz, C error 387 7h52m 497d PATCH [451d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 syz, C error error 12 2d18h 501d PATCH [290d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 syz, C 5 2d02h 522d PATCH [324d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 syz, C error 770 17h47m 528d PATCH [451d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 syz, C 9 420d 553d
general protection fault in status_show prio:high usb 2 syz, C 16 73d 594d PATCH [442d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz, C error 2739 now 613d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 400d 688d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 25 8d03h 691d
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 syz, C error 376 10h06m 720d PATCH [300d]
WARNING in enable_work prio:high usb media -1 syz, C error 1833 1d10h 743d 💬 2 [61d]
WARNING in usb_free_urb prio:high usb media -1 syz, C inconclusive 7511 4h54m 824d PATCH [126d]
INFO: task hung in kernfs_add_one usb kernfs 1 syz, C error done 104 15d 828d
INFO: rcu detected stall in schedule (7) usb 1 syz, C done error 72 52d 829d
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 syz, C error 270 15d 890d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 373 3d04h 895d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 syz, C unreliable 127 11d 934d 💬 2 [860d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 syz, C done error 26 13d 1081d 💬 1 [10d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 syz, C error 447 4d01h 1109d 💬 1 [30d]
INFO: rcu detected stall in console_callback input usb serial 1 syz, C error error 18 228d 1111d
INFO: task hung in usbdev_release (2) prio:high usb 1 syz, C error error 134 3d06h 1121d
INFO: rcu detected stall in newfstatat (3) usb 1 syz, C done 742 1h17m 1181d 💬 4 [910d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 9d15h 1189d
INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1159 7h55m 1255d 💬 16 [124d]
INFO: task hung in hub_event (3) prio:high usb 1 C 996 22h55m 1328d 💬 12 [28d]
INFO: task hung in usb_get_descriptor (2) usb 1 syz, C inconclusive error 863 10d 1351d 💬 14 [657d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 syz, C inconclusive error 807 230d 1368d 💬 5 [311d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 225 1d13h 1433d
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 syz, C error 35 19d 1823d PATCH [31d]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 syz, C unreliable inconclusive 4066 141d 2026d PATCH [1816d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 syz, C unreliable 3956 25m 2074d PATCH [1810d]
INFO: task hung in usbdev_open (2) usb 1 syz, C error 3367 5h22m 2074d 💬 1 [124d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add (2) usb race:benign 6 1 9h21m 9h21m
KASAN: stack-out-of-bounds Write in f_midi2_create_usb_configs usb prio:normal 21 3 17d 13d
BUG: unable to handle kernel paging request in iowrite32 prio:high usb 8 1 30d 25d
general protection fault in usbg_submit_command prio:high usb 2 1 30d 25d
BUG: unable to handle kernel NULL pointer dereference in handle_ep_small prio:high usb 10 4 32d 29d
KCSAN: data-race in event_handler / usbip_stop_eh usb prio:high race:benign 6 1 29d 29d
BUG: unable to handle kernel paging request in dummy_enable prio:low usb 8 3 28d 30d
KASAN: slab-out-of-bounds Read in free_netdev prio:normal usb 19 2 26d 34d
general protection fault in dummy_wakeup prio:low usb 2 2 22d 36d
KCSAN: data-race in mon_reader_add / usb_hcd_submit_urb (3) race:benign prio:low usb 6 1 46d 46d
general protection fault in mon_text_release prio:normal usb 10 3 47d 146d