syzbot

 sign-in | mailing list | source | docs
🐞 Open [1475]
≡ Subsystems
🐞 Fixed [6785]
🐞 Invalid [17511]
⬇ Missing Backports [221]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 404
Parent subsystem(s): kernel (92)
Child subsystems: usb-storage (2)
open (76):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING in pvr2_send_request_ex pvrusb2 usb -1 C 1 8d21h 4d20h
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 1 9d11h 5d10h
WARNING in cm109_urb_irq_callback input usb -1 C 36 3h12m 9d13h
WARNING in usb_start_wait_urb usb -1 C error 61 1h44m 9d16h 💬 1 [5d15h]
memory leak in v4l2_ctrl_handler_init_class (2) media usb 3 C 3 13h27m 15d PATCH [11d]
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 17d 22d 💬 19 [16d]
memory leak in dualshock4_get_calibration_data input usb 3 C 1 27d 27d PATCH [12d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 3 14d 40d
INFO: rcu detected stall in sys_symlink (6) lsm input usb 1 C error 2 24d 43d
general protection fault in usb_gadget_udc_reset (4) usb 2 7 4h15m 46d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 218 5h49m 58d PATCH [21d]
general protection fault in count_matching_names (2) usb 2 syz 4 38d 60d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 68 1d13h 64d
WARNING: ODEBUG bug in trace_suspend_resume net usb -1 7 42d 92d
KMSAN: uninit-value in rtl8150_open net usb 7 3 91d 104d PATCH [34d]
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C error 2 25d 108d PATCH [57d]
general protection fault in su3000_i2c_transfer usb media 2 C done 112 2d05h 110d PATCH [6h05m]
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 19d 116d 💬 6 [115d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 48 12d 121d
WARNING: refcount bug in trace_suspend_resume usb 13 C 44 55d 127d
INFO: task hung in console_callback (6) usb input 1 C error 13 16h14m 147d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 60 13d 173d
WARNING: refcount bug in hdm_disconnect usb 13 C 13 135d 178d PATCH [176d]
INFO: task hung in dvb_usbv2_probe usb 1 C error 198 1d23h 193d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 45 1d00h 200d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 264 8d02h 202d PATCH [15d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 158 2d21h 220d PATCH [210d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 15 11d 229d PATCH [184d]
INFO: task hung in usbnet_disconnect (3) net usb 1 81 5d17h 241d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 1d05h 255d PATCH [57d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 290 8d08h 260d PATCH [184d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 152d 286d
general protection fault in status_show usb 2 C 10 9d07h 327d PATCH [175d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 26 7d15h 346d
general protection fault in dummy_timer (2) usb 2 syz 58 1d06h 381d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 132d 420d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 79d 424d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 55 59d 435d
possible deadlock in input_inject_event usb fs 4 C done 1954 7h29m 438d PATCH [53d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 10 9d15h 446d 💬 3 [30d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 67 2d01h 452d PATCH [32d]
WARNING in enable_work usb pm -1 C error 1115 7h32m 476d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 24d 499d PATCH [477d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 21 6d19h 508d 💬 1 [508d]
possible deadlock in assign_fw usb 4 C done 168 21d 520d
WARNING in usb_free_urb usb media -1 C inconclusive 3977 16m 556d PATCH [184d]
INFO: rcu detected stall in schedule (7) usb 1 C done 57 23d 561d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2141 23d 574d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 533 6h55m 581d 💬 3 [15d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 24 13d 617d 💬 1 [617d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 106 8d07h 622d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 288 6h09m 627d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 98 13d 666d 💬 2 [593d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 19d 811d PATCH [796d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 18 86d 813d 💬 1 [86d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 370 13h30m 841d 💬 1 [579d]
INFO: rcu detected stall in console_callback input usb serial 1 C error 18 21d 843d
INFO: task hung in usbdev_release (2) usb 1 C error error 105 34d 853d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 469 2d13h 914d 💬 4 [643d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 30d 921d
INFO: task hung in hub_port_init (3) usb 1 C error 884 1d08h 987d 💬 16 [12d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 548 17d 1029d 💬 3 [44d]
INFO: task hung in hub_event (3) usb 1 654 6h54m 1060d 💬 12 [579d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 262d 1084d 💬 14 [389d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 24d 1100d 💬 5 [44d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 132 2d21h 1165d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1411 1d13h 1350d 💬 3 [12d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 31 11d 1555d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 982d 1603d PATCH [1371d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3094 1h13m 1758d PATCH [1548d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3181 8d04h 1806d PATCH [1542d]
INFO: task hung in usbdev_open (2) usb 1 C error 1739 52m 1807d 💬 1 [12d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 22d 1825d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 592d 1845d 💬 1 [1791d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 114d 2302d PATCH [582d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 6536 2h19m 2426d 💬 4 [12d]
moderation (4):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in usb_unanchor_urb usb 19 1 15d 11d
KASAN: slab-use-after-free Read in ld_usb_release (2) usb 19 1 40d 36d
KASAN: slab-use-after-free Read in event_handler usb 19 3 35d 68d
BUG: workqueue leaked atomic, lock or RCU: syz.NUM.NUM[NUM] (2) usb lsm -1 3 57d 184d