syzbot

 sign-in | mailing list | source | docs
🐞 Open [1562]
≡ Subsystems
🐞 Fixed [6185]
🐞 Invalid [15506]
⬇ Missing Backports [177]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 376
Parent subsystem(s): kernel (86)
Child subsystems: usb-storage (1)
open (90):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
INFO: task hung in usbnet_disconnect (3) net usb 30 5d04h 1d03h
UBSAN: shift-out-of-bounds in __kfifo_alloc input usb C 8489 now 13d PATCH [11d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) media usb C 2 15d 14d
WARNING in dib0700_rc_setup/usb_submit_urb media usb C 13 8d07h 17d
KASAN: slab-out-of-bounds Read in ucan_probe can usb C 2 19d 18d PATCH [17d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb C error 5 9d04h 20d PATCH [15d]
BUG: soft lockup in hci_cmd_timeout (2) bluetooth usb syz 1 28d 24d
WARNING in media_create_pad_link (2) media usb C 4 14d 25d PATCH [2d20h]
WARNING in hanwang_open/usb_submit_urb input usb C 4 12d 31d PATCH [28d]
INFO: rcu detected stall in call_timer_fn (5) input usb net C 1 49d 45d
KASAN: slab-use-after-free Write in steam_input_register input usb C 6 36d 50d
BUG: corrupted list in usb_hcd_link_urb_to_ep (4) usb syz 5 38d 52d
KMSAN: uninit-value in mii_nway_restart (2) usb C 112 5d16h 55d PATCH [1d06h]
KASAN: use-after-free Read in hid_hw_raw_request input usb 6 59d 60d
KASAN: slab-use-after-free Read in usbhid_raw_request usb C 6 60d 67d PATCH [66d]
general protection fault in count_matching_names usb syz 5 2d11h 72d
KASAN: slab-use-after-free Read in corsair_void_status_work_handler input usb C 27 56d 76d 💬 1 [68d]
WARNING: ODEBUG bug in release_nodes input usb C 667 37d 77d
WARNING: ODEBUG bug in devres_release_group input usb C done done 37 63d 80d PATCH [79d]
general protection fault in status_show usb C 5 6d16h 86d PATCH [81d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage syz 6 1d17h 105d
INFO: task hung in do_syscall_64 (3) usb syz error 5 14d 112d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb C 282 40m 128d
general protection fault in dummy_timer (2) usb syz 18 10d 140d
KASAN: slab-use-after-free Read in v4l2_release media usb C error inconclusive 1 82d 145d PATCH [52d]
UBSAN: shift-out-of-bounds in s32ton input usb 18 48d 153d PATCH [151d]
WARNING: bad unlock balance in elevator_init_mq usb block syz done 1 161d 157d
WARNING: bad unlock balance in sd_revalidate_disk scsi usb syz done 2 162d 158d 💬 1 [110d]
WARNING: bad unlock balance in blk_mq_update_tag_set_shared usb block syz done 11 160d 158d 💬 1 [110d]
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] usb media 5 89d 174d
WARNING: ODEBUG bug in __folio_put (2) usb mm syz 26 4h34m 180d
INFO: rcu detected stall in vma_link_file mm input usb syz 1 185d 181d 💬 6 [179d]
INFO: rcu detected stall in do_syscall_64 input usb syz 22 5d01h 183d
INFO: rcu detected stall in statfs (3) kernfs input usb syz 1 192d 188d
INFO: rcu detected stall in __fsnotify_parent usb input fs C 7 164d 192d
INFO: rcu detected stall in sys_pselect6 (2) usb input C 54 148d 194d
INFO: rcu detected stall in kernfs_fop_read_iter (4) usb syz 13 84d 197d
INFO: task hung in usb_deregister_dev (2) usb C 36 155d 216d
WARNING in enable_work input usb pm C error 682 1d21h 235d
WARNING: ODEBUG bug in get_taint usb C 26 140d 241d
WARNING in ath6kl_bmi_get_target_info (2) usb wireless C error 8069 1h03m 255d PATCH [230d]
WARNING in plfxlc_mac_release usb wireless C done 3304 12m 258d PATCH [257d]
KASAN: slab-use-after-free Read in hdm_disconnect usb C error 13635 1h12m 258d PATCH [257d]
WARNING in smsusb_init_device/usb_submit_urb usb media C error 231 17h19m 259d PATCH [236d]
WARNING: ODEBUG bug in netdev_release usb syz 2 266d 265d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 C error 14 11d 267d 💬 1 [267d]
possible deadlock in dpm_for_each_dev pm usb C error 2 27d 280d
possible deadlock in assign_fw usb C done 34 15d 280d
WARNING in usb_free_urb usb media C inconclusive 656 4d13h 315d 💬 1 [21d]
INFO: rcu detected stall in schedule (7) usb C done 49 27d 321d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 C error 1974 5h02m 333d
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input C unreliable 19 3d21h 363d 💬 1 [4d18h]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb C error 10 5d21h 377d 💬 1 [376d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input syz error 51 9d18h 382d
WARNING: ODEBUG bug in netdev_freemem (3) usb C 90 271d 386d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 210 1d23h 387d
WARNING: ODEBUG bug in usb_unbind_interface (2) usb 41 97d 388d PATCH [378d]
WARNING in wdm_rxwork/usb_submit_urb (2) usb C unreliable 94 9d08h 426d 💬 2 [352d]
UBSAN: array-index-out-of-bounds in usbhid_parse usb C error 65 1d21h 545d PATCH [31d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial C 166 12d 571d PATCH [555d]
INFO: task hung in __input_unregister_device (5) usb input C done error 17 186d 573d 💬 1 [192d]
INFO: task hung in get_bMaxPacketSize0 usb C error 283 7d21h 601d 💬 1 [338d]
INFO: rcu detected stall in console_callback usb input serial C error 18 19d 603d
INFO: task hung in usbdev_release (2) usb C error 94 23d 613d
INFO: rcu detected stall in newfstatat (3) usb C done 331 20h00m 673d 💬 4 [402d]
kernel BUG in cdc_ncm_fill_tx_frame usb syz error error 5 23d 681d
WARNING in amradio_set_mute/usb_submit_urb usb C 3 71d 702d
INFO: task hung in hub_port_init (3) usb C error 684 1h01m 747d 💬 16 [24d]
WARNING in usb_tx_block/usb_submit_urb usb libertas C 513 19h02m 788d 💬 3 [787d]
INFO: task hung in hub_event (3) usb 365 3d22h 820d 💬 12 [338d]
INFO: task hung in usb_get_descriptor (2) usb C inconclusive 862 22d 843d 💬 14 [149d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb C inconclusive 750 23h56m 860d 💬 5 [24d]
INFO: rcu detected stall in kernfs_fop_release kernfs usb C error 5 174d 925d 💬 1 [925d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 102 5h08m 925d
INFO: rcu detected stall in watchdog usb C error 13 14d 969d
INFO: rcu detected stall in dummy_timer (4) usb C inconclusive 24 23d 1009d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media C 1387 9d01h 1110d 💬 2 [24d]
INFO: task hung in r871xu_dev_remove usb staging C error inconclusive 561 134d 1221d 💬 1 [276d]
memory leak in __lookup_slow ext4 usb C 2 958d 1278d
WARNING in pvr2_send_request_ex/usb_submit_urb pvrusb2 usb C 16 28d 1315d
INFO: task hung in pn533_finalize_setup usb nfc C unreliable error 8 741d 1362d PATCH [1130d]
KASAN: use-after-free Read in v4l2_fh_open usb media C unreliable inconclusive 1214 1h43m 1518d PATCH [1308d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input C unreliable 1717 2h13m 1565d PATCH [1302d]
INFO: task hung in usbdev_open (2) usb C error 1104 4d17h 1566d 💬 1 [24d]
possible deadlock in zd_chip_disable_rxtx usb wireless C 44 1d13h 1585d
WARNING in corrupted/usb_submit_urb (2) usb C error done 69 351d 1605d 💬 1 [1551d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media C 6 1832d 1959d
WARNING in smsusb_start_streaming/usb_submit_urb usb media C error inconclusive 128 4d07h 2062d PATCH [342d]
WARNING in amradio_send_cmd/usb_submit_urb usb C error inconclusive 123 5d03h 2092d 💬 4 [1972d]
KASAN: use-after-free Read in v4l2_fh_init usb media C error inconclusive 3687 1h38m 2186d 💬 4 [24d]
moderation (3):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb (5) usb 1 25d 25d
KASAN: slab-use-after-free Read in steam_input_close input usb 2 34d 50d
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_del usb 4 47d 144d