syzbot

 sign-in | mailing list | source | docs
🐞 Open [1577]
≡ Subsystems
🐞 Fixed [6251]
🐞 Invalid [15832]
⬇ Missing Backports [185]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 380
Parent subsystem(s): kernel (84)
Child subsystems: usb-storage (1)
open (93):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in report_descriptor_read input usb 3 2d11h 7h25m
WARNING in dtv5100_i2c_msg/usb_submit_urb usb 3 18h09m 2d10h
KMSAN: uninit-value in usbnet_probe (3) usb C 147 2d11h 14d PATCH [3d03h]
BUG: unable to handle kernel NULL pointer dereference in module_kobj_release usb syz 19 10d 15d 💬 1 [13d]
WARNING: ODEBUG bug in usb_unbind_interface (3) usb 1 23d 19d
WARNING in osif_xfer/usb_submit_urb usb C error 6 1d04h 19d
INFO: task hung in dvb_usb_i2c_exit usb C error 12 8d06h 20d PATCH [10d]
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return usb net 1 25d 21d
WARNING in gl861_ctrl_msg/usb_submit_urb usb C error 6 18d 29d PATCH [3d03h]
UBSAN: shift-out-of-bounds in wacom_parse_and_register input usb 1 39d 35d
INFO: task hung in usbnet_disconnect (3) net usb 35 7d03h 41d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media C 2 56d 55d
WARNING in dib0700_rc_setup/usb_submit_urb usb media C 19 3d23h 58d
KASAN: slab-out-of-bounds Read in ucan_probe can usb C 2 60d 58d PATCH [58d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb C error 10 15h25m 60d PATCH [3d03h]
BUG: soft lockup in hci_cmd_timeout (2) bluetooth usb syz 1 69d 65d
WARNING in media_create_pad_link (2) usb media C error 6 13h27m 66d PATCH [43d]
WARNING in hanwang_open/usb_submit_urb usb input C 4 53d 72d PATCH [69d]
INFO: rcu detected stall in call_timer_fn (5) net input usb C 6 3d21h 86d
KASAN: slab-use-after-free Write in steam_input_register input usb C 6 76d 90d
BUG: corrupted list in usb_hcd_link_urb_to_ep (4) usb syz 6 11d 93d 💬 1 [38d]
KMSAN: uninit-value in mii_nway_restart (2) usb C 170 6h16m 96d PATCH [5d07h]
general protection fault in count_matching_names usb syz 5 43d 112d
general protection fault in status_show usb C 6 5d08h 127d PATCH [122d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage syz 6 28d 146d
INFO: task hung in do_syscall_64 (3) usb syz error error 5 54d 152d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb C 453 1h42m 168d
general protection fault in dummy_timer (2) usb syz 21 3d11h 181d
KASAN: slab-use-after-free Read in v4l2_release media usb C error inconclusive 1 123d 185d PATCH [93d]
WARNING: bad unlock balance in elevator_init_mq block usb syz done 1 202d 198d
WARNING: bad unlock balance in sd_revalidate_disk usb scsi syz done 2 202d 199d 💬 1 [151d]
WARNING: bad unlock balance in blk_mq_update_tag_set_shared usb block syz done 11 201d 199d 💬 1 [150d]
WARNING: ODEBUG bug in __folio_put (2) usb mm syz 27 40d 221d
INFO: rcu detected stall in vma_link_file mm input usb syz 1 226d 222d 💬 6 [220d]
INFO: rcu detected stall in do_syscall_64 input usb syz 22 45d 224d
INFO: rcu detected stall in __fsnotify_parent usb input fs C 7 205d 233d
INFO: rcu detected stall in sys_pselect6 (2) usb input C 54 189d 235d
INFO: rcu detected stall in kernfs_fop_read_iter (4) usb syz 14 35d 237d
KASAN: use-after-free Read in em28xx_close_extension (2) usb media C error 6 12d 247d 💬 2 [94d]
INFO: task hung in usb_deregister_dev (2) usb C 36 196d 256d
WARNING in enable_work input usb pm C error 756 3h31m 276d
WARNING: ODEBUG bug in get_taint usb C 26 181d 282d
WARNING in ath6kl_bmi_get_target_info (2) usb wireless C error 9216 7m 296d PATCH [270d]
WARNING in plfxlc_mac_release usb wireless C done 3644 11d 298d PATCH [298d]
KASAN: slab-use-after-free Read in hdm_disconnect usb C error 14737 1h24m 299d PATCH [298d]
WARNING in smsusb_init_device/usb_submit_urb usb media C error 339 1d07h 299d PATCH [277d]
WARNING: ODEBUG bug in netdev_release usb syz 4 9d23h 306d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 C error 16 3d18h 308d 💬 1 [308d]
possible deadlock in dpm_for_each_dev pm usb C error 2 7d09h 321d
possible deadlock in assign_fw usb C done 51 1d04h 321d
WARNING in usb_free_urb usb media C inconclusive 1522 4h23m 356d PATCH [2d03h]
INFO: rcu detected stall in addrconf_rs_timer (6) netfilter usb syz error error 477 3h04m 357d
INFO: task hung in kernfs_add_one usb kernfs C error done 65 16d 361d
INFO: rcu detected stall in schedule (7) usb C done 50 6d19h 362d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 C error 2126 14h12m 374d
WARNING in kernfs_get (5) usb kernfs syz inconclusive 344 11h19m 381d 💬 3 [3d02h]
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input C unreliable 22 9d01h 404d 💬 1 [12d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb C error 12 2d07h 418d 💬 1 [417d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input syz error 56 6d09h 423d
WARNING: ODEBUG bug in netdev_freemem (3) usb C 90 312d 426d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 227 1d13h 428d
WARNING in wdm_rxwork/usb_submit_urb (2) usb C unreliable 94 18d 466d 💬 2 [393d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial C 166 52d 612d PATCH [596d]
INFO: task hung in __input_unregister_device (5) usb input C done error 17 227d 614d 💬 1 [233d]
INFO: task hung in get_bMaxPacketSize0 usb C error 302 5d02h 642d 💬 1 [379d]
INFO: rcu detected stall in console_callback input usb serial C error 18 15d 643d
INFO: task hung in usbdev_release (2) usb C error 95 12d 654d
INFO: rcu detected stall in newfstatat (3) usb C done 346 3d16h 714d 💬 4 [443d]
kernel BUG in cdc_ncm_fill_tx_frame usb syz error error 5 64d 721d
WARNING in amradio_set_mute/usb_submit_urb usb C 3 112d 743d
INFO: task hung in hub_port_init (3) usb C error 719 4d02h 788d 💬 16 [64d]
WARNING in usb_tx_block/usb_submit_urb usb libertas C 518 11d 829d 💬 3 [828d]
INFO: task hung in hub_event (3) usb 387 7h05m 860d 💬 12 [379d]
INFO: task hung in usb_get_descriptor (2) usb C inconclusive error 862 63d 884d 💬 14 [190d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb C inconclusive 802 16h31m 900d 💬 5 [2d04h]
INFO: rcu detected stall in kernfs_fop_release kernfs usb C error 5 214d 966d 💬 1 [966d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 111 3d21h 966d
INFO: rcu detected stall in watchdog usb C error 13 12d 1009d
INFO: rcu detected stall in dummy_timer (4) usb C inconclusive 24 3d19h 1050d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media C done 1390 2d18h 1150d 💬 3 [11d]
INFO: task hung in r871xu_dev_remove usb staging C error inconclusive 561 174d 1262d 💬 1 [317d]
memory leak in __lookup_slow ext4 usb C 2 998d 1319d
WARNING in pvr2_send_request_ex/usb_submit_urb pvrusb2 usb C 19 6d04h 1355d
INFO: task hung in pn533_finalize_setup nfc usb C unreliable error 8 782d 1403d PATCH [1171d]
KASAN: use-after-free Read in v4l2_fh_open usb media C unreliable inconclusive 1467 1d01h 1559d PATCH [1349d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input C unreliable 1955 10h00m 1606d PATCH [1343d]
INFO: task hung in usbdev_open (2) usb C error 1152 1h53m 1607d 💬 1 [2d04h]
possible deadlock in zd_chip_disable_rxtx usb wireless C 44 6d01h 1626d
WARNING in corrupted/usb_submit_urb (2) usb C error done 69 392d 1646d 💬 1 [1592d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media C 6 1873d 2000d
WARNING in smsusb_start_streaming/usb_submit_urb usb media C error inconclusive 137 2d19h 2103d PATCH [383d]
WARNING in amradio_send_cmd/usb_submit_urb usb C error inconclusive 129 5d00h 2133d 💬 4 [2013d]
KASAN: use-after-free Read in v4l2_fh_init usb media C error inconclusive 4180 2h10m 2227d 💬 4 [2d04h]
moderation (4):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (12) usb 1 16d 16d
KCSAN: data-race in _prb_read_valid / data_alloc usb 42 6h19m 28d
KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb (5) usb 2 20d 66d
KASAN: slab-use-after-free Read in steam_input_close input usb 2 75d 91d