syzbot

 sign-in | mailing list | source | docs
🐞 Open [1456]
≡ Subsystems
🐞 Fixed [6830]
🐞 Invalid [17702]
⬇ Missing Backports [227]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 407
Parent subsystem(s): kernel (87)
Child subsystems: usb-storage (2)
open (83):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
INFO: trying to register non-static key in i2c_register_adapter i2c usb -1 C 4 3d22h 20h53m 💬 1 [19h38m]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 1d16h 1d16h
INFO: task hung in hci_register_dev (2) usb 1 syz error 1 11d 10d
memory leak in es58x_open usb 3 syz 1 4d08h 14d PATCH [12d]
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 2 6d04h 15d
WARNING in usb_tx_block libertas usb -1 C 6 22d 22d PATCH [15d]
BUG: soft lockup in dummy_timer usb 1 154 1d04h 25d
WARNING in pvr2_send_request_ex pvrusb2 usb -1 C 2 22d 31d PATCH [16d]
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 3 1d10h 32d
WARNING in cm109_urb_irq_callback usb input -1 C 46 23d 36d
WARNING in usb_start_wait_urb usb -1 C error 79 23d 36d PATCH [15d]
memory leak in v4l2_ctrl_handler_init_class (2) usb media 3 C 3 27d 41d PATCH [37d]
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 44d 49d 💬 19 [43d]
memory leak in dualshock4_get_calibration_data input usb 3 C 1 54d 54d PATCH [39d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error 4 1d22h 67d 💬 1 [1d00h]
general protection fault in usb_gadget_udc_reset (4) usb 2 7 26d 72d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 286 17m 85d PATCH [48d]
general protection fault in count_matching_names (2) usb 2 syz 4 64d 87d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 97 22h01m 91d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 655 5m 93d
WARNING: ODEBUG bug in trace_suspend_resume net usb -1 7 69d 119d
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C error 3 14d 134d PATCH [83d]
general protection fault in su3000_i2c_transfer usb media 2 C done 151 10h42m 137d PATCH [26d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 216 4h16m 138d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 46d 143d 💬 6 [141d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 52 11h19m 148d
INFO: task hung in console_callback (6) input usb 1 C error 13 27d 174d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 78 3d04h 200d
INFO: task hung in dvb_usbv2_probe usb 1 C error 270 9h45m 219d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 53 1d09h 226d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 316 4h38m 228d PATCH [42d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 189 23h43m 247d PATCH [237d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 827 1d22h 248d PATCH [245d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 41 2d01h 256d PATCH [210d]
INFO: task hung in usbnet_disconnect (3) net usb 1 82 19d 268d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 13d 281d PATCH [83d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 339 36m 287d PATCH [210d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 179d 313d
general protection fault in status_show usb 2 C 11 16d 353d PATCH [201d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 26 4d16h 372d
general protection fault in dummy_timer (2) usb 2 syz 61 2d04h 408d
WARNING in kcov_remote_start (6) wireless usb -1 5765 10m 427d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 159d 447d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 106d 450d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 55 86d 461d
possible deadlock in input_inject_event usb fs 4 C done 2102 1h18m 465d PATCH [80d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 10 6d05h 473d 💬 3 [56d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 102 4d01h 479d PATCH [59d]
WARNING in enable_work usb pm -1 C error 1226 1h33m 502d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 19d 526d PATCH [504d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 21 33d 535d 💬 1 [535d]
possible deadlock in assign_fw usb 4 C done 169 13d 547d
WARNING in usb_free_urb usb media -1 C inconclusive 4304 41m 583d PATCH [210d]
INFO: rcu detected stall in schedule (7) usb 1 C done 59 7d10h 588d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2152 4d20h 601d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 568 9h21m 607d 💬 3 [10d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 24 11d 644d 💬 1 [644d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 111 6d22h 649d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 299 12h32m 654d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 99 3d01h 693d 💬 2 [619d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 46d 838d PATCH [822d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 19 2d10h 840d 💬 1 [112d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 374 2d20h 868d 💬 1 [605d]
INFO: rcu detected stall in console_callback input usb serial 1 C error 18 17d 870d
INFO: task hung in usbdev_release (2) usb 1 C error error 106 6d10h 880d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 486 1d09h 940d 💬 4 [669d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 56d 948d
INFO: task hung in hub_port_init (3) usb 1 C error 933 18h24m 1014d 💬 16 [39d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 551 12d 1055d 💬 3 [70d]
INFO: task hung in hub_event (3) usb 1 707 3h09m 1087d 💬 12 [605d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 289d 1110d 💬 14 [416d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 20d 1127d 💬 5 [70d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 136 5d17h 1192d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1415 1d16h 1377d 💬 3 [7d18h]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 32 1d13h 1582d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1008d 1630d PATCH [1398d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3272 4h14m 1785d PATCH [1575d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3340 30m 1833d PATCH [1569d]
INFO: task hung in usbdev_open (2) usb 1 C error 2069 4h49m 1833d 💬 1 [7d21h]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 18d 1852d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 618d 1872d 💬 1 [1818d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 141d 2329d PATCH [609d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 6815 2h33m 2453d 💬 4 [7d18h]
moderation (8):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in set_link_state usb 2 1 11d 7d23h
BUG: unable to handle kernel NULL pointer dereference in mon_text_release usb 10 1 16d 12d
general protection fault in vhci_send_cmd_submit usb 2 1 22d 18d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (14) usb 6 2 9d22h 21d
KASAN: slab-use-after-free Read in usb_unanchor_urb usb 19 1 41d 37d
KASAN: slab-use-after-free Read in ld_usb_release (2) usb 19 1 67d 63d
KASAN: slab-use-after-free Read in event_handler usb 19 4 3d12h 95d
BUG: workqueue leaked atomic, lock or RCU: syz.NUM.NUM[NUM] (2) usb lsm -1 3 83d 210d