syzbot

 sign-in | mailing list | source | docs
🐞 Open [1479]
≡ Subsystems
🐞 Fixed [6786]
🐞 Invalid [17540]
⬇ Missing Backports [222]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

Applied filters: Label=subsystems:input (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: stack-out-of-bounds Read in cp2112_xfer input 17 C error 8 60d 89d 29/29 26d 362f21536966 HID: cp2112: Add parameter validation to data length
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb 19 C 1144 66d 372d 29/29 66d b56cc41a3ae7 hid: fix I2C read buffer overflow in raw_event() for mcp2221
WARNING in follow_page_pte usb input mm -1 C done 6 130d 130d 29/29 66d cf1b80dc31a1 mm: pass page directly instead of using folio_page
UBSAN: shift-out-of-bounds in s32ton (2) input usb -1 C 4 145d 152d 29/29 100d a6b87bfc2ab5 HID: core: Harden s32ton() against conversion to 0 bits
UBSAN: shift-out-of-bounds in __kfifo_alloc usb input -1 C 33349 190d 258d 29/29 159d 6bf8ab7774a2 HID: wacom: fix shift OOB in kfifo allocation for zero pktlen
KASAN: slab-use-after-free Read in steam_input_open input usb 19 C done 5 281d 294d 28/29 186d e53fc232a65f HID: hid-steam: Fix use-after-free when detaching device
WARNING in input_mt_init_slots input -1 C inconclusive 14301 488d 1798d 28/29 418d 99d3bf5f7377 Input: MT - limit max slots 206f533a0a7c Input: uinput - reject requests with unreasonable number of slots
KASAN: slab-out-of-bounds Read in cougar_report_fixup input usb 17 C 31 467d 501d 28/29 436d a6e9c391d45b HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
WARNING in implement input usb -1 C error done 960 551d 2280d 26/29 500d 4aa2dcfbad53 HID: core: remove unnecessary WARN_ON() in implement()
WARNING in hid_output_report input usb -1 C error 3 567d 587d 26/29 522d 4aa2dcfbad53 HID: core: remove unnecessary WARN_ON() in implement() fba383985354 net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
KMSAN: uninit-value in asus_report_fixup input usb 17 C done 35 544d 568d 26/29 522d 89e1ee118d6f hid: asus: asus_report_fixup: fix potential read out of bounds
WARNING in bcm5974_start_traffic/usb_submit_urb input -1 C error 41 632d 2227d 25/29 627d 2b9c3eb32a69 Input: bcm5974 - check endpoint type before starting traffic
KASAN: use-after-free Read in powermate_config_complete (4) input 19 syz done unreliable 14 828d 1200d 25/29 724d 5c15c60e7be6 Input: powermate - fix use-after-free in powermate_config_complete
KASAN: slab-use-after-free Read in input_dev_uevent input 19 C done 7 834d 845d 23/29 793d dd613a4e45f8 HID: uclogic: Correct devm device reference for hidinput input_dev name
INFO: rcu detected stall in uinput_write input 1 1 873d 873d 23/29 793d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
WARNING in pegasus_open/usb_submit_urb input usb -1 C 7 1000d 2010d 22/29 919d b3d80fd27a3c Input: pegasus-notetaker - check pipe type when probing
KASAN: slab-out-of-bounds Read in thrustmaster_probe input usb 17 C unreliable 92 1368d 1392d 22/29 1023d fc3ef2e3297b HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
UBSAN: shift-out-of-bounds in hid_report_raw_event (2) input usb -1 C error 1 1128d 1124d 22/29 1023d ec61b4191858 HID: core: fix shift-out-of-bounds in hid_report_raw_event
KMSAN: uninit-value in iforce_init_device (2) input 7 3 1159d 1133d 22/29 1023d b8ebf250997c Input: iforce - invert valid length check when fetching device IDs
memory leak in hidraw_report_event input usb 3 C 1 1299d 1298d 22/29 1023d a5623a203cff HID: hidraw: fix memory leak in hidraw_release()
WARNING in driver_unregister input usb -1 C 1 1301d 1297d 22/29 1023d f2d8c2606825 usb: gadget: Fix non-unique driver names in raw-gadget driver
WARNING in aiptek_open/usb_submit_urb usb input -1 C error 2380 1360d 2382d 22/29 1023d 5600f6986628 Input: aiptek - properly check endpoint type
INFO: task hung in __input_unregister_device (4) usb input 1 C done 924 1196d 1261d 22/29 1023d 98e01215708b Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
KASAN: slab-out-of-bounds Write in betop_probe input usb 23 C unreliable 9 1577d 2133d 20/29 1368d 689e453a9b9c HID: betop: fix slab-out-of-bounds Write in betop_probe HID: betop: fix slab-out-of-bounds Write in betop_probe
WARNING in atp_close (3) input -1 C 125 1440d 1533d 20/29 1376d 9f3ccdc3f6ef Input: appletouch - initialize work before device registration
WARNING: ODEBUG bug in corrupted (2) usb input -1 C error 2 1446d 1657d 20/29 1376d 33812fc7c8d7 HID: magicmouse: Fix an error handling path in magicmouse_probe()
WARNING in hid_submit_ctrl/usb_submit_urb input usb -1 C done 38 1561d 1609d 20/29 1495d 0a824efdb724 HID: usbhid: Fix warning caused by 0-length input reports
general protection fault in magicmouse_remove input usb 2 C 47 1645d 1672d 20/29 1495d 4b4f6cecca44 HID: magicmouse: fix NULL-deref on disconnect
memory leak in __usbhid_submit_report input usb 3 C 129 1565d 1858d 20/29 1495d f7744fa16b96 HID: usbhid: free raw_report buffers in usbhid_stop
KMSAN: kernel-usb-infoleak in hid_submit_ctrl input usb 9 C 839 1669d 2277d 20/29 1495d 6be388f4a35d HID: usbhid: fix info leak in hid_submit_ctrl
WARNING in input_register_device input usb -1 C error done 11 1712d 1863d 20/29 1495d b4104180a2ef kobject_uevent: remove warning in init_uevent_argv()
UBSAN: shift-out-of-bounds in snto32 input usb -1 C error 58 1754d 1826d 20/29 1709d a0312af1f94d HID: core: detect and skip invalid inputs to snto32()
unexpected kernel reboot (3) input usb -1 C error error 21132 1709d 2710d 20/29 1709d c8e2fe13d1d1 x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
memory leak in wacom_probe input usb 3 C 26 1803d 1857d 19/29 1740d 37309f47e2f5 HID: wacom: Fix memory leakage caused by kfifo_alloc
WARNING in cm109_input_ev/usb_submit_urb input usb -1 C unreliable 8 1829d 1849d 19/29 1740d 82e060904732 Input: cm109 - do not stomp on control URB
INFO: trying to register non-static key in uhid_dev_destroy input -1 C unreliable done 40 1936d 2108d 15/29 1853d bce1305c0ece HID: core: Correctly handle ReportSize being zero
KASAN: slab-out-of-bounds Write in hiddev_ioctl_usage usb input 23 C 279 1933d 2276d 15/29 1906d 25a097f52046 HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
BUG: corrupted list in mousedev_release input 8 syz done 5 1929d 1931d 15/29 1906d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
INFO: task hung in locks_remove_posix fs usb input 1 syz 2231 2010d 2033d 15/29 1975d 187b96db5ca7 x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
KASAN: use-after-free Read in usbhid_close (3) input usb 19 C 6 2049d 2076d 15/29 1975d 0ed08faded1d HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
KASAN: use-after-free Write in hiddev_disconnect usb input 24 20 2096d 2160d 15/29 2068d 5c02c447eaed HID: hiddev: Fix race in in hiddev_disconnect()
general protection fault in timer_is_static_object input 2 C 2 2209d 2207d 15/29 2125d cb222aed03d7 Input: add safety guards to input_set_keycode()
BUG: spinlock already unlocked in input_set_keycode input 4 C 2 2219d 2217d 15/29 2125d cb222aed03d7 Input: add safety guards to input_set_keycode()
KASAN: slab-out-of-bounds Read in hid_field_extract input usb 17 C 6 2166d 2200d 15/29 2125d 8ec321e96e05 HID: Fix slab-out-of-bounds read in hid_field_extract
KASAN: global-out-of-bounds Write in kbd_event serial input usb 23 C 6 2207d 2229d 15/29 2193d b2b2dd71e085 tty: vt: keyboard: reject invalid keycodes
WARNING: ODEBUG bug in input_ff_destroy input usb -1 C 6 2215d 2222d 14/29 2206d fa3a5a1880c9 Input: ff-memless - kill timer in destroy()
KMSAN: uninit-value in lg4ff_set_autocenter_default input usb 7 C 1 2239d 2239d 13/29 2209d d9d4b1e46d95 HID: Fix assumption that devices have inputs
KASAN: slab-out-of-bounds Write in ga_probe input 23 C 5 2259d 2280d 13/29 2229d d9d4b1e46d95 HID: Fix assumption that devices have inputs
general protection fault in pk_probe input usb 2 C 2 2297d 2293d 13/29 2251d 98375b86c791 HID: prodikeys: Fix general protection fault during probe
WARNING: ODEBUG bug in usbhid_disconnect (2) input usb -1 C 48 2271d 2293d 13/29 2251d 2bcdacb70327 HID: sony: Fix memory corruption issue on cleanup.
general protection fault in __pm_runtime_resume input usb pm 2 C 197 2271d 2334d 13/29 2251d 5f9242775bb6 HID: logitech: Fix general protection fault caused by Logitech driver
KASAN: slab-out-of-bounds Read in hidraw_ioctl input 17 C 104 2278d 2328d 13/29 2251d 416dacb819f5 HID: hidraw: Fix invalid read in hidraw_ioctl
WARNING in __iforce_usb_xmit/usb_submit_urb input usb -1 C 3 2318d 2322d 12/29 2290d 849f5ae3a513 Input: iforce - add sanity checks
WARNING in usbtouch_open input usb -1 C 768 2315d 2329d 12/29 2290d b55d996f057b Input: usbtouchscreen - initialize PM mutex before using it
general protection fault in holtek_kbd_input_event input 2 C 67 2321d 2333d 12/29 2300d 01ec0a5f19c8 HID: holtek: test for sanity of intfdata
KASAN: use-after-free Read in hiddev_release input usb 19 C 11 2311d 2326d 12/29 2300d 9c09b214f30e HID: hiddev: avoid opening a disconnected device 6d4472d7bec3 HID: hiddev: do cleanup in failure of opening a device
KASAN: use-after-free Read in string input 19 C 247 2418d 2658d 12/29 2374d c03a0fd0b609 kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice.
BUG: GPF in non-whitelisted uaccess (non-canonical address?) input -1 C 10 2582d 2589d 11/29 2564d 8c01db7619f0 HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges
KMSAN: uninit-value in synaptics_detect input 7 C 137 2588d 2641d 11/29 2588d f39f8688888a Input: synaptics - avoid using uninitialized variable when probing
WARNING: kmalloc bug in input_mt_init_slots input -1 C 54 2607d 2640d 11/29 2588d 61448479a9f2 mm: don't warn about large allocations for slab
INFO: rcu detected stall in mousedev_write input 1 18 2655d 2669d 11/29 2613d f74c371fe72a Input: mousedev - add a schedule point in mousedev_write()
WARNING in input_alloc_absinfo input -1 C 318 2667d 2739d 8/29 2664d 100294cee9a9 Input: do not use WARN() in input_alloc_absinfo()
WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected input -1 C 2126 2777d 2792d 5/29 2776d 6c1e851c4edc random: fix possible sleeping allocation from irq context