syzbot

 sign-in | mailing list | source | docs
🐞 Open [1605]
≡ Subsystems
🐞 Fixed [6295]
🐞 Invalid [16035]
⬇ Missing Backports [190]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 382
Parent subsystem(s): kernel (79)
Child subsystems: usb-storage (1)
open (93):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING: refcount bug in hdm_disconnect usb C 6 2d12h 2d14h PATCH [19h50m]
KASAN: invalid-free in dev_free (2) usb 1 3d18h 3d06h
stack segment fault in __usb_hcd_giveback_urb usb C done 6 10d 10d PATCH [6h25m]
KASAN: slab-use-after-free Read in raw_event_queue_add usb 1 19d 14d 💬 1 [11d]
INFO: task hung in dvb_usbv2_probe usb C error 25 13h03m 17d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 6 13d 24d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb C error 14 3d07h 26d 💬 2 [19d]
BUG: unable to handle kernel NULL pointer dereference in module_kobj_release usb syz 19 34d 39d 💬 1 [36d]
WARNING: ODEBUG bug in usb_unbind_interface (3) usb 3 13d 42d
WARNING in osif_xfer/usb_submit_urb usb C error 14 11d 43d
INFO: task hung in dvb_usb_i2c_exit usb C error 30 12h59m 44d PATCH [34d]
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return net usb 1 49d 45d
WARNING in gl861_ctrl_msg/usb_submit_urb usb C error 6 11d 53d PATCH [8d02h]
UBSAN: shift-out-of-bounds in wacom_parse_and_register input usb 1 63d 59d
INFO: task hung in usbnet_disconnect (3) net usb 40 2h05m 65d
KASAN: slab-use-after-free Read in load_firmware_cb (2) media usb C 3 1d09h 79d
WARNING in dib0700_rc_setup/usb_submit_urb usb media C 19 13d 81d
KASAN: slab-out-of-bounds Read in ucan_probe can usb C 2 83d 82d PATCH [82d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb C error 19 1d13h 84d PATCH [8d02h]
BUG: soft lockup in hci_cmd_timeout (2) bluetooth usb syz 1 93d 89d
WARNING in media_create_pad_link (2) usb media C error 7 8d07h 90d PATCH [67d]
WARNING in hanwang_open/usb_submit_urb input usb C 4 15d 95d PATCH [92d]
INFO: rcu detected stall in call_timer_fn (5) net input usb C 6 27d 110d
BUG: corrupted list in usb_hcd_link_urb_to_ep (4) usb syz 7 23d 117d 💬 1 [62d]
general protection fault in count_matching_names usb syz 5 66d 136d
general protection fault in status_show usb C 7 13d 151d PATCH [6d23h]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage syz 8 10d 170d
INFO: task hung in do_syscall_64 (3) usb syz error error 5 78d 176d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb C 553 2h39m 192d
general protection fault in dummy_timer (2) usb syz 23 9h44m 205d
KASAN: slab-use-after-free Read in v4l2_release media usb C error inconclusive 1 147d 209d PATCH [117d]
WARNING: ODEBUG bug in __folio_put (2) usb mm syz 27 64d 244d
INFO: rcu detected stall in vma_link_file mm input usb syz 1 249d 245d 💬 6 [244d]
INFO: rcu detected stall in do_syscall_64 input usb syz 22 69d 248d
INFO: rcu detected stall in __fsnotify_parent usb input fs C 7 229d 256d
INFO: rcu detected stall in sys_pselect6 (2) usb input C 54 213d 259d
INFO: rcu detected stall in kernfs_fop_read_iter (4) usb syz 14 58d 261d
possible deadlock in input_inject_event usb fs C done 1035 4h15m 262d
KASAN: use-after-free Read in em28xx_close_extension (2) usb media C error 9 9d20h 270d 💬 2 [118d]
INFO: task hung in usb_deregister_dev (2) usb C 36 219d 280d
WARNING in enable_work input usb pm C error 810 13h30m 300d
WARNING: ODEBUG bug in get_taint usb C 26 205d 306d
WARNING in ath6kl_bmi_get_target_info (2) usb wireless C error 9850 now 320d PATCH [2h13m]
WARNING in plfxlc_mac_release usb wireless C done 3644 35d 322d PATCH [322d]
KASAN: slab-use-after-free Read in hdm_disconnect usb C error 15217 1h01m 323d PATCH [19h50m]
WARNING in smsusb_init_device/usb_submit_urb usb media C error 420 15h23m 323d PATCH [301d]
WARNING: ODEBUG bug in netdev_release usb syz 8 1d09h 330d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 C error 17 13d 332d 💬 1 [332d]
possible deadlock in dpm_for_each_dev pm usb C error 2 14h35m 344d
possible deadlock in assign_fw usb C done 75 4d03h 344d
WARNING in usb_free_urb usb media C inconclusive 1657 21m 380d PATCH [8d02h]
INFO: rcu detected stall in addrconf_rs_timer (6) netfilter usb syz error error 507 1d05h 380d
INFO: task hung in kernfs_add_one usb kernfs C error done 65 40d 385d
INFO: rcu detected stall in schedule (7) usb C done 51 10d 385d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 C error 2128 6d19h 398d
WARNING in kernfs_get (5) usb kernfs syz inconclusive 376 1d08h 405d 💬 3 [26d]
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input C unreliable 26 10d 428d 💬 1 [4d00h]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb C error 15 1d00h 441d 💬 1 [441d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input C error 67 11h42m 446d
WARNING: ODEBUG bug in netdev_freemem (3) usb C 90 335d 450d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 236 11h52m 451d
WARNING in wdm_rxwork/usb_submit_urb (2) usb C unreliable 94 6d19h 490d 💬 2 [417d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial C 166 6d11h 635d PATCH [620d]
INFO: task hung in __input_unregister_device (5) usb input C done error 17 250d 637d 💬 1 [257d]
INFO: task hung in get_bMaxPacketSize0 usb C error 302 1h27m 665d 💬 1 [403d]
INFO: rcu detected stall in console_callback usb input serial C error 18 8d23h 667d
INFO: task hung in usbdev_release (2) usb C error error 95 36d 677d
INFO: rcu detected stall in newfstatat (3) usb C done 353 2h37m 738d 💬 4 [467d]
kernel BUG in cdc_ncm_fill_tx_frame usb syz error error 5 88d 745d
WARNING in amradio_set_mute/usb_submit_urb usb C 4 2d13h 767d
INFO: task hung in hub_port_init (3) usb C error 723 10h02m 812d 💬 16 [88d]
WARNING in usb_tx_block/usb_submit_urb usb libertas C 522 1d06h 853d 💬 3 [852d]
INFO: task hung in hub_event (3) usb 398 3d01h 884d 💬 12 [403d]
INFO: task hung in usb_get_descriptor (2) usb C inconclusive error 862 86d 908d 💬 14 [213d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb C inconclusive 807 19d 924d 💬 5 [25d]
INFO: rcu detected stall in kernfs_fop_release usb kernfs C error 6 10d 989d 💬 1 [989d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 113 23h31m 989d
INFO: rcu detected stall in watchdog usb C error 13 6d03h 1033d
INFO: rcu detected stall in dummy_timer (4) usb C inconclusive 24 27d 1074d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media C done 1391 4d04h 1174d 💬 3 [34d]
INFO: task hung in r871xu_dev_remove usb staging C error inconclusive 561 198d 1286d 💬 1 [341d]
memory leak in __lookup_slow usb ext4 C 2 1022d 1343d
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 C 22 12d 1379d
INFO: task hung in pn533_finalize_setup usb nfc C unreliable error 8 806d 1427d PATCH [1195d]
KASAN: use-after-free Read in v4l2_fh_open usb media C unreliable inconclusive 1580 7h41m 1582d PATCH [1372d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input C unreliable 2180 15m 1630d PATCH [1366d]
INFO: task hung in usbdev_open (2) usb C error 1204 1d00h 1631d 💬 1 [25d]
possible deadlock in zd_chip_disable_rxtx usb wireless C 44 10d 1649d
WARNING in corrupted/usb_submit_urb (2) usb C error done 69 416d 1669d 💬 1 [1615d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media C 6 1896d 2024d
WARNING in smsusb_start_streaming/usb_submit_urb usb media C error inconclusive 146 15h07m 2126d PATCH [406d]
WARNING in amradio_send_cmd/usb_submit_urb usb C error inconclusive 135 5d16h 2157d 💬 4 [2037d]
KASAN: use-after-free Read in v4l2_fh_init usb media C error inconclusive 4378 10m 2250d 💬 4 [25d]
moderation (3):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Write in iowarrior_write_callback usb 1 6d09h 2d09h
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (12) usb 1 40d 40d
KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb (5) usb 2 44d 90d