syzbot

 sign-in | mailing list | source | docs
🐞 Open [1451]
≡ Subsystems
🐞 Fixed [6782]
🐞 Invalid [17489]
⬇ Missing Backports [220]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 404
Parent subsystem(s): kernel (92)
Child subsystems: usb-storage (1)
open (77):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING in pvr2_send_request_ex pvrusb2 usb -1 C 1 5d18h 1d18h
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 1 6d08h 2d08h
WARNING in cm109_urb_irq_callback input usb -1 C 24 3h21m 6d10h
WARNING in usb_start_wait_urb usb -1 C error 42 1h17m 6d13h 💬 1 [2d12h]
memory leak in v4l2_ctrl_handler_init_class (2) media usb 3 C 3 11d 12d PATCH [7d23h]
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 14d 19d 💬 19 [13d]
memory leak in dualshock4_get_calibration_data input usb 3 C 1 24d 24d PATCH [9d16h]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 3 11d 37d
INFO: rcu detected stall in sys_symlink (6) lsm input usb 1 C error 2 21d 40d
general protection fault in usb_gadget_udc_reset (4) usb 2 6 32d 43d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 211 14h15m 55d PATCH [18d]
general protection fault in count_matching_names (2) usb 2 syz 4 35d 57d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 64 11h55m 61d
WARNING: ODEBUG bug in trace_suspend_resume net usb -1 7 39d 89d
KMSAN: uninit-value in rtl8150_open net usb 7 3 87d 101d PATCH [31d]
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C error 2 22d 105d PATCH [53d]
general protection fault in su3000_i2c_transfer usb media 2 C done 111 9d09h 107d PATCH [107d]
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 16d 113d 💬 6 [112d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 48 9d05h 118d
WARNING: refcount bug in trace_suspend_resume usb 13 C 44 51d 124d
INFO: task hung in console_callback (6) usb input 1 C error 13 30d 144d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 60 10d 170d
WARNING: refcount bug in hdm_disconnect usb 13 C 13 132d 175d PATCH [173d]
INFO: task hung in dvb_usbv2_probe usb 1 C error 197 1d02h 190d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 43 1d23h 196d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 264 4d23h 199d PATCH [12d]
WARNING: ODEBUG bug in usb_unbind_interface (3) usb -1 5 97d 215d
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 157 21h33m 217d PATCH [207d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 15 8d07h 226d PATCH [180d]
INFO: task hung in usbnet_disconnect (3) net usb 1 81 2d15h 238d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 4 19d 252d PATCH [54d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 290 5d05h 257d PATCH [180d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 149d 283d
general protection fault in status_show usb 2 C 10 6d05h 324d PATCH [171d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 26 4d13h 343d
general protection fault in dummy_timer (2) usb 2 syz 56 5d18h 378d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 129d 417d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 76d 421d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 55 56d 432d
possible deadlock in input_inject_event usb fs 4 C done 1931 7h07m 435d PATCH [50d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 10 6d12h 443d 💬 3 [26d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 66 5d22h 449d PATCH [29d]
WARNING in enable_work usb pm -1 C error 1100 22h47m 472d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 21d 496d PATCH [474d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 21 3d16h 505d 💬 1 [505d]
possible deadlock in assign_fw usb 4 C done 168 17d 517d
WARNING in usb_free_urb usb media -1 C inconclusive 3940 3h12m 553d PATCH [180d]
INFO: rcu detected stall in schedule (7) usb 1 C done 57 19d 558d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2141 20d 571d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 527 10h14m 577d 💬 3 [12d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 24 10d 614d 💬 1 [614d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 106 5d04h 619d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 287 3d12h 624d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 98 10d 663d 💬 2 [589d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 16d 808d PATCH [792d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 18 83d 810d 💬 1 [83d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 369 14d 838d 💬 1 [576d]
INFO: rcu detected stall in console_callback input usb serial 1 C error 18 17d 840d
INFO: task hung in usbdev_release (2) usb 1 C error error 105 31d 850d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 468 1d17h 911d 💬 4 [639d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 27d 918d
INFO: task hung in hub_port_init (3) usb 1 C error 878 4h22m 984d 💬 16 [9d20h]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 548 14d 1026d 💬 3 [41d]
INFO: task hung in hub_event (3) usb 1 638 17h58m 1057d 💬 12 [576d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 259d 1081d 💬 14 [386d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 21d 1097d 💬 5 [41d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 131 10h25m 1162d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1411 12d 1347d 💬 3 [9d20h]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 31 8d12h 1552d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 979d 1600d PATCH [1368d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3073 1h10m 1755d PATCH [1545d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3181 5d01h 1803d PATCH [1539d]
INFO: task hung in usbdev_open (2) usb 1 C error 1703 4h10m 1803d 💬 1 [9d20h]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 18d 1822d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 588d 1842d 💬 1 [1788d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 111d 2299d PATCH [579d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 6500 29m 2423d 💬 4 [9d20h]
moderation (4):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in usb_unanchor_urb usb 19 1 11d 7d21h
KASAN: slab-use-after-free Read in ld_usb_release (2) usb 19 1 37d 33d
KASAN: slab-use-after-free Read in event_handler usb 19 3 32d 65d
BUG: workqueue leaked atomic, lock or RCU: syz.NUM.NUM[NUM] (2) usb lsm -1 3 54d 181d