syzbot

 sign-in | mailing list | source | docs
🐞 Open [1457]
≡ Subsystems
🐞 Fixed [6865]
🐞 Invalid [17817]
⬇ Missing Backports [226]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 412
Parent subsystem(s): kernel (80)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
memory leak in ldisc_receive net input usb 3 C 1 4d23h 23h12m PATCH [1h44m]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error 8 1d03h 7d00h 💬 10 [5d00h]
INFO: trying to register non-static key in i2c_register_adapter i2c usb -1 C 4 2d09h 13d 💬 1 [13d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 14d 14d
INFO: task hung in hci_register_dev (2) usb 1 syz error 1 23d 22d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 3 3d09h 27d
BUG: soft lockup in dummy_timer usb 1 203 4h59m 38d
WARNING in __alloc_workqueue usb wireless -1 C 2072 9m 38d 💬 1 [20d]
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 5 6d20h 44d
WARNING in cm109_urb_irq_callback usb input -1 C 46 35d 48d
WARNING in usb_start_wait_urb usb -1 C error 79 35d 48d PATCH [27d]
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 57d 62d 💬 19 [56d]
memory leak in dualshock4_get_calibration_data input usb 3 C 1 66d 66d PATCH [51d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error 4 6h46m 80d 💬 1 [13d]
general protection fault in usb_gadget_udc_reset (4) usb 2 8 5d23h 85d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 326 3h32m 97d PATCH [60d]
general protection fault in count_matching_names (2) usb 2 syz 4 12d 99d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 108 11h54m 103d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 765 4h50m 105d
WARNING in dev_shutdown (7) usb net -1 syz error 20 20d 121d
WARNING: ODEBUG bug in trace_suspend_resume net usb -1 7 81d 132d
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C error 3 26d 147d PATCH [8d01h]
general protection fault in su3000_i2c_transfer usb media 2 C done 171 2d11h 149d PATCH [39d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 274 2h37m 150d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 2d22h 155d 💬 6 [154d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 52 12d 160d
INFO: task hung in console_callback (6) input usb 1 C error 13 9d11h 186d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 88 1d15h 212d
INFO: task hung in dvb_usbv2_probe usb 1 C error 289 14h30m 232d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 55 4d04h 239d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 357 1h24m 241d PATCH [54d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 201 10h35m 259d PATCH [249d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 848 5h32m 260d PATCH [257d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 57 1d11h 268d PATCH [223d]
INFO: task hung in usbnet_disconnect (3) net usb 1 83 3d03h 280d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 26d 294d PATCH [96d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 380 13h03m 299d PATCH [223d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 192d 325d
general protection fault in status_show usb 2 C 13 1d08h 366d PATCH [214d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 26 2d23h 385d
general protection fault in dummy_timer (2) usb 2 syz 63 4d21h 420d
WARNING in kcov_remote_start (6) wireless usb -1 6486 2h21m 439d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 171d 460d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 118d 463d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 55 99d 474d
possible deadlock in input_inject_event usb fs 4 C done 2234 1h56m 478d PATCH [93d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 11 4d04h 486d 💬 3 [69d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 107 3d01h 492d PATCH [71d]
WARNING in enable_work usb pm -1 C error 1291 7h42m 515d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 1d18h 538d PATCH [516d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 21 45d 547d 💬 1 [547d]
possible deadlock in assign_fw usb 4 C done 170 12d 560d
WARNING in usb_free_urb usb media -1 C inconclusive 4501 8m 595d PATCH [223d]
INFO: rcu detected stall in schedule (7) usb 1 C done 60 12d 601d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2158 1d10h 613d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 573 21h35m 620d 💬 3 [23d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 24 9d21h 656d 💬 1 [656d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 112 11d 662d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 306 15h43m 666d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 100 9d06h 705d 💬 2 [632d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 11d 851d PATCH [835d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 19 14d 853d 💬 1 [125d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 378 2d06h 880d 💬 1 [618d]
INFO: rcu detected stall in console_callback input usb serial 1 C error 18 29d 882d
INFO: task hung in usbdev_release (2) usb 1 C error error 108 5d04h 893d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 497 1d14h 953d 💬 4 [682d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 69d 960d
INFO: task hung in hub_port_init (3) usb 1 C error 946 1d04h 1027d 💬 16 [52d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 552 2d22h 1068d 💬 3 [83d]
INFO: task hung in hub_event (3) usb 1 727 17h26m 1099d 💬 12 [618d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 301d 1123d 💬 14 [429d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 2d05h 1139d 💬 5 [83d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 142 2d23h 1205d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1415 3h31m 1389d 💬 3 [20d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 32 27m 1594d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1021d 1642d PATCH [1410d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3354 3h11m 1798d PATCH [1588d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3379 4h29m 1845d PATCH [1581d]
INFO: task hung in usbdev_open (2) usb 1 C error 2182 1h35m 1846d 💬 1 [20d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 12d 1865d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 631d 1885d 💬 1 [1831d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 153d 2342d PATCH [622d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 6935 12m 2466d 💬 4 [20d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 1 11d 7d10h
general protection fault in set_link_state usb 2 1 24d 20d
BUG: unable to handle kernel NULL pointer dereference in mon_text_release usb 10 1 28d 24d
general protection fault in vhci_send_cmd_submit usb 2 1 35d 31d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (14) usb 6 3 9d00h 33d
KASAN: slab-use-after-free Read in usb_unanchor_urb usb 19 1 54d 50d
KASAN: slab-use-after-free Read in ld_usb_release (2) usb 19 1 79d 75d
KASAN: slab-use-after-free Read in event_handler usb 19 4 15d 107d