syzbot

 sign-in | mailing list | source | docs
🐞 Open [1515]
≡ Subsystems
🐞 Fixed [6639]
🐞 Invalid [17013]
⬇ Missing Backports [214]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 398
Parent subsystem(s): kernel (93)
Child subsystems: usb-storage (2)
open (85):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in count_matching_names (2) usb 2 syz 2 2d00h 1d00h
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 11 1d17h 4d18h
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb 17 59 4h17m 6d17h
general protection fault in rtlock_slowlock_locked ntfs3 usb 19 8 5h10m 9d05h
WARNING: ODEBUG bug in trace_suspend_resume net usb -1 6 6d11h 33d
KMSAN: uninit-value in rtl8150_open usb net 7 3 31d 44d PATCH [44d]
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C error 2 21h23m 48d PATCH [37d]
general protection fault in su3000_i2c_transfer usb media 2 C done 66 5d11h 50d PATCH [50d]
INFO: rcu detected stall in hub_event (2) usb kernfs 1 C error 41 12d 51d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 42d 56d 💬 6 [55d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 36 4h28m 61d
BUG: sleeping function called from invalid context in kcov_remote_start usb 5 1 73d 69d
upstream test error: BUG: sleeping function called from invalid context in kcov_remote_start usb -1 101 49d 71d 💬 1 [70d]
INFO: task hung in console_callback (6) input usb 1 C error 8 2d11h 88d
KMSAN: kernel-usb-infoleak-after-free in usb_start_wait_urb usb 18 C 3 94d 98d
KASAN: slab-use-after-free Read in btusb_disconnect usb bluetooth 19 C 5 13d 99d 💬 1 [99d]
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 31 17h00m 113d
WARNING: refcount bug in hdm_disconnect usb 13 C 13 76d 118d PATCH [117d]
KASAN: invalid-free in dev_free (2) usb 22 3 77d 119d
INFO: task hung in dvb_usbv2_probe usb 1 C error 154 13h36m 133d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 30 16d 140d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 157 12h02m 142d 💬 2 [136d]
WARNING: ODEBUG bug in usb_unbind_interface (3) usb -1 5 41d 159d
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 112 5d21h 161d PATCH [150d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 12 12d 170d PATCH [124d]
INFO: task hung in usbnet_disconnect (3) net usb 1 77 2d16h 182d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 4 1d05h 195d PATCH [59d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 146 2h47m 201d PATCH [124d]
WARNING in media_create_pad_link (2) usb media -1 C error 11 3d14h 206d PATCH [183d]
WARNING in hanwang_open/usb_submit_urb usb input -1 C error done 6 62d 212d PATCH [209d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 93d 226d
general protection fault in status_show usb 2 C 8 29d 267d PATCH [115d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz 22 7d16h 286d
general protection fault in dummy_timer (2) usb 2 syz 47 6d10h 321d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 73d 361d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 20d 364d
INFO: task hung in netdev_run_todo (4) net usb 1 596 4d02h 367d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 55 4h59m 375d
possible deadlock in input_inject_event usb gfs2 4 C done 1588 22h58m 379d PATCH [4d02h]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 9 21d 387d 💬 2 [15d]
INFO: task hung in usb_deregister_dev (2) usb 1 C 36 336d 397d
WARNING in enable_work input usb pm -1 C error 961 6h53m 416d
WARNING: ODEBUG bug in get_taint usb -1 C 26 321d 422d
KASAN: slab-use-after-free Read in hdm_disconnect usb 19 C error 18280 53m 439d PATCH [1d10h]
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 30d 440d PATCH [417d]
WARNING: ODEBUG bug in netdev_release usb -1 syz 12 75d 446d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 19 6d10h 448d 💬 1 [448d]
possible deadlock in assign_fw usb 4 C done 166 3d00h 461d
WARNING in usb_free_urb usb media -1 C inconclusive 3170 3h09m 496d PATCH [124d]
INFO: task hung in kernfs_add_one usb kernfs 1 C error done 73 7d19h 501d
INFO: rcu detected stall in schedule (7) usb 1 C done 56 16d 502d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 494 1d08h 521d 💬 3 [18d]
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input -1 C unreliable done 28 70d 544d 💬 1 [28d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 18 2d03h 558d 💬 1 [557d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 98 2d14h 563d
WARNING: ODEBUG bug in netdev_freemem (3) usb -1 C 90 452d 567d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 272 3d07h 568d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 97 6d22h 607d 💬 2 [533d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 29d 752d PATCH [736d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 18 27d 754d 💬 1 [26d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 366 11d 782d 💬 1 [519d]
INFO: rcu detected stall in console_callback usb input serial 1 C error 18 29d 783d
INFO: task hung in usbdev_release (2) usb 1 C error error 100 22d 794d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 425 1d18h 854d 💬 4 [583d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 40d 862d
INFO: task hung in hub_port_init (3) usb 1 C error 764 3d12h 928d 💬 16 [47d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 538 1d04h 969d 💬 3 [968d]
INFO: task hung in hub_event (3) usb 1 452 13h15m 1001d 💬 12 [519d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 203d 1024d 💬 14 [330d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 29d 1041d 💬 5 [17d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 124 7d10h 1106d
INFO: rcu detected stall in dummy_timer (4) usb 1 C inconclusive 25 29d 1190d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1402 6d21h 1291d 💬 3 [17d]
memory leak in __lookup_slow ext4 usb 3 C 2 1139d 1459d
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 28 7d23h 1496d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 922d 1543d PATCH [1311d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 2626 13h40m 1699d PATCH [1489d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 2947 12h33m 1746d PATCH [1483d]
INFO: task hung in usbdev_open (2) usb 1 C error 1521 3h51m 1747d 💬 1 [17d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 2d18h 1766d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 532d 1786d 💬 1 [1732d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media -1 C 6 2013d 2140d
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 54d 2243d PATCH [523d]
WARNING in amradio_send_cmd/usb_submit_urb usb -1 C error inconclusive 138 76d 2273d 💬 4 [2153d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 5821 2h50m 2367d 💬 4 [17d]
moderation (5):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in event_handler usb 19 1 12d 8d18h
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (13) usb 6 1 18d 18d
general protection fault in usb_gadget_udc_reset (4) usb 2 2 9d08h 32d
KCSAN: data-race in data_push_tail / vsnprintf (9) usb 6 120 1d16h 232d
KCSAN: data-race in _prb_read_valid / prb_reserve usb 6 3736 1d00h 1797d