syzbot

 sign-in | mailing list | source | docs
🐞 Open [1587]
≡ Subsystems
🐞 Fixed [6382]
🐞 Invalid [16245]
⬇ Missing Backports [195]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 385
Parent subsystem(s): kernel (84)
Child subsystems: usb-storage (1)
open (92):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING in usbnet_status_start usb -1 C 117 38m 3d13h 💬 4 [1d11h]
KASAN: slab-out-of-bounds Read in mon_copy_to_buff usb 17 C 6 3d17h 4d19h PATCH [1d17h]
KMSAN: kernel-usb-infoleak-after-free in usb_start_wait_urb usb 18 C 3 2d14h 6d15h
KASAN: slab-use-after-free Read in btusb_disconnect bluetooth usb 19 C 4 8d13h 7d23h 💬 1 [7d15h]
KASAN: slab-out-of-bounds Read in mon_bin_event usb 17 C 15 20h12m 9d13h PATCH [8d16h]
KMSAN: kernel-usb-infoleak in usbhid_raw_request usb 9 61 45m 9d17h
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 5 5d13h 22d
WARNING: refcount bug in hdm_disconnect usb 13 C 9 9d01h 27d PATCH [25d]
KASAN: invalid-free in dev_free (2) usb 22 2 19d 28d
stack segment fault in __usb_hcd_giveback_urb usb 2 C done 6 34d 35d PATCH [24d]
KASAN: slab-use-after-free Read in raw_event_queue_add usb 19 1 43d 38d 💬 1 [36d]
INFO: task hung in dvb_usbv2_probe usb 1 C error 59 6h06m 42d
KASAN: slab-use-after-free Read in report_descriptor_read usb input 19 9 10h57m 48d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 28 3d06h 51d 💬 2 [44d]
BUG: unable to handle kernel NULL pointer dereference in module_kobj_release usb 10 syz 19 59d 64d 💬 1 [61d]
WARNING: ODEBUG bug in usb_unbind_interface (3) usb -1 3 38d 67d
WARNING in osif_xfer/usb_submit_urb usb -1 C error 18 20d 68d
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 49 2h20m 69d PATCH [59d]
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return net usb 4 1 73d 69d
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 9 2d18h 78d PATCH [32d]
UBSAN: shift-out-of-bounds in wacom_parse_and_register input usb -1 1 88d 84d
INFO: task hung in usbnet_disconnect (3) net usb 1 49 2d22h 90d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 3 11d 104d
WARNING in dib0700_rc_setup/usb_submit_urb usb media -1 C 19 38d 106d
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 32 2d16h 109d PATCH [32d]
WARNING in media_create_pad_link (2) usb media -1 C error 8 1d01h 115d PATCH [92d]
WARNING in hanwang_open/usb_submit_urb input usb -1 C 4 39d 120d PATCH [117d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 1d15h 135d
BUG: corrupted list in usb_hcd_link_urb_to_ep (4) usb 8 syz 7 48d 142d 💬 1 [86d]
general protection fault in count_matching_names usb 2 syz 5 91d 161d
general protection fault in status_show usb 2 C 8 8d03h 176d PATCH [23d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz 14 1d09h 194d
INFO: task hung in do_syscall_64 (3) usb 1 syz error error 5 103d 201d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb 19 C 712 24m 217d
general protection fault in dummy_timer (2) usb 2 syz 27 4d11h 230d
KASAN: slab-use-after-free Read in v4l2_release media usb 19 C error inconclusive 1 171d 234d PATCH [141d]
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 27 88d 269d
INFO: rcu detected stall in vma_link_file mm usb input 1 syz 1 274d 270d 💬 6 [268d]
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 22 94d 272d
INFO: rcu detected stall in sys_pselect6 (2) usb input 1 C 54 238d 283d
INFO: rcu detected stall in kernfs_fop_read_iter (4) usb 1 syz 14 83d 286d
possible deadlock in input_inject_event usb fs 4 C done 1068 8d09h 287d
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 9 3d14h 295d 💬 2 [17d]
INFO: task hung in usb_deregister_dev (2) usb 1 C 36 244d 305d
WARNING in enable_work input usb pm -1 C error 853 15h08m 324d
WARNING: ODEBUG bug in get_taint usb -1 C 26 229d 331d
KASAN: slab-use-after-free Read in hdm_disconnect usb 19 C error 15889 14m 347d PATCH [25d]
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 422 4d14h 348d PATCH [326d]
WARNING: ODEBUG bug in netdev_release usb -1 syz 10 1d03h 354d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 17 38d 357d 💬 1 [357d]
possible deadlock in dpm_for_each_dev pm usb 4 C error 2 25d 369d
possible deadlock in assign_fw usb 4 C done 92 2d05h 369d
WARNING in usb_free_urb usb media -1 C inconclusive 2183 2h07m 405d PATCH [32d]
INFO: task hung in kernfs_add_one usb kernfs 1 C error done 66 22d 410d
INFO: rcu detected stall in schedule (7) usb 1 C done 52 23d 410d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 408 13h48m 429d 💬 3 [19d]
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input -1 C unreliable 27 8d02h 453d 💬 1 [28d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 16 7d07h 466d 💬 1 [466d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 72 3d07h 471d
WARNING: ODEBUG bug in netdev_freemem (3) usb -1 C 90 360d 475d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 246 4d05h 476d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 94 17d 515d 💬 2 [441d]
KASAN: stack-out-of-bounds Read in sched_show_task usb input serial 17 C 166 8d07h 660d PATCH [644d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 17 275d 662d 💬 1 [281d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 304 5d22h 690d 💬 1 [427d]
INFO: rcu detected stall in console_callback usb input serial 1 C error 18 33d 692d
INFO: task hung in usbdev_release (2) usb 1 C error error 96 18d 702d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 361 1d11h 762d 💬 4 [491d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 19d 770d
WARNING in amradio_set_mute/usb_submit_urb usb -1 C 4 13d 792d
INFO: task hung in hub_port_init (3) usb 1 C error 727 3d21h 836d 💬 16 [19d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 523 8d13h 878d 💬 3 [876d]
INFO: task hung in hub_event (3) usb 1 420 17h14m 909d 💬 12 [427d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 111d 933d 💬 14 [238d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 13d 949d 💬 5 [50d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 115 14h07m 1014d
INFO: rcu detected stall in watchdog usb 1 C error 13 1h25m 1058d
INFO: rcu detected stall in dummy_timer (4) usb 1 C inconclusive 25 15d 1099d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1392 2d14h 1199d 💬 3 [19d]
INFO: task hung in r871xu_dev_remove usb staging 1 C error inconclusive 561 223d 1311d 💬 1 [366d]
memory leak in __lookup_slow usb ext4 3 C 2 1047d 1368d
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 22 2d08h 1404d
INFO: task hung in pn533_finalize_setup usb nfc 1 C unreliable error 8 831d 1452d PATCH [1220d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 1743 4h23m 1607d PATCH [1397d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 2347 7h06m 1655d PATCH [1391d]
INFO: task hung in usbdev_open (2) usb 1 C error 1268 15h06m 1655d 💬 1 [19d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 20d 1674d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 440d 1694d 💬 1 [1640d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media -1 C 6 1921d 2048d
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 162 3d02h 2151d PATCH [431d]
WARNING in amradio_send_cmd/usb_submit_urb usb -1 C error inconclusive 136 6d08h 2181d 💬 4 [2062d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 4662 10m 2275d 💬 4 [19d]
moderation (2):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Write in iowarrior_write_callback usb 24 1 31d 27d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (12) usb 6 2 15d 65d