syzbot

 sign-in | mailing list | source | docs
🐞 Open [1542]
≡ Subsystems
🐞 Fixed [6205]
🐞 Invalid [15595]
⬇ Missing Backports [182]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 376
Parent subsystem(s): kernel (88)
Child subsystems: usb-storage (1)
open (89):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
UBSAN: shift-out-of-bounds in wacom_parse_and_register input usb 1 9d00h 5d00h
INFO: task hung in usbnet_disconnect (3) usb net 30 15d 11d
UBSAN: shift-out-of-bounds in __kfifo_alloc input usb C 14237 now 23d PATCH [9d06h]
KASAN: slab-use-after-free Read in load_firmware_cb (2) media usb C 2 25d 24d
WARNING in dib0700_rc_setup/usb_submit_urb usb media C 14 9d08h 27d
KASAN: slab-out-of-bounds Read in ucan_probe can usb C 2 29d 28d PATCH [27d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb C error 5 19d 30d PATCH [25d]
BUG: soft lockup in hci_cmd_timeout (2) bluetooth usb syz 1 38d 34d
WARNING in media_create_pad_link (2) usb media C 5 1d05h 35d PATCH [12d]
WARNING in hanwang_open/usb_submit_urb input usb C 4 22d 41d PATCH [38d]
INFO: rcu detected stall in call_timer_fn (5) input usb net C 2 7d10h 55d
KASAN: slab-use-after-free Write in steam_input_register input usb C 6 46d 60d
BUG: corrupted list in usb_hcd_link_urb_to_ep (4) usb syz 5 48d 62d 💬 1 [7d13h]
KMSAN: uninit-value in mii_nway_restart (2) usb C 114 2d12h 65d PATCH [6d07h]
KASAN: use-after-free Read in hid_hw_raw_request input usb 6 69d 70d
KASAN: slab-use-after-free Read in usbhid_raw_request usb C 6 70d 77d PATCH [76d]
general protection fault in count_matching_names usb syz 5 12d 82d
KASAN: slab-use-after-free Read in corsair_void_status_work_handler input usb C 27 66d 86d 💬 1 [78d]
WARNING: ODEBUG bug in release_nodes input usb C 667 47d 87d
general protection fault in status_show usb C 5 2d15h 96d PATCH [91d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage syz 6 11d 115d
INFO: task hung in do_syscall_64 (3) usb syz error 5 24d 122d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb C 315 7h32m 138d
general protection fault in dummy_timer (2) usb syz 18 5d21h 150d
KASAN: slab-use-after-free Read in v4l2_release media usb C error inconclusive 1 92d 155d PATCH [62d]
UBSAN: shift-out-of-bounds in s32ton input usb 18 58d 163d PATCH [161d]
WARNING: bad unlock balance in elevator_init_mq usb block syz done 1 171d 167d
WARNING: bad unlock balance in sd_revalidate_disk scsi usb syz done 2 172d 168d 💬 1 [120d]
WARNING: bad unlock balance in blk_mq_update_tag_set_shared usb block syz done 11 170d 168d 💬 1 [120d]
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] usb media 5 99d 184d
WARNING: ODEBUG bug in __folio_put (2) usb mm syz 27 9d16h 190d
INFO: rcu detected stall in vma_link_file mm input usb syz 1 195d 191d 💬 6 [189d]
INFO: rcu detected stall in do_syscall_64 input usb syz 22 15d 193d
INFO: rcu detected stall in statfs (3) kernfs input usb syz 1 202d 198d
INFO: rcu detected stall in __fsnotify_parent usb input fs C 7 174d 202d
INFO: rcu detected stall in sys_pselect6 (2) usb input C 54 158d 204d
INFO: rcu detected stall in kernfs_fop_read_iter (4) usb syz 14 4d10h 207d
INFO: task hung in usb_deregister_dev (2) usb C 36 165d 226d
WARNING in enable_work input usb pm C error 703 47m 245d
WARNING: ODEBUG bug in get_taint usb C 26 150d 251d
WARNING in ath6kl_bmi_get_target_info (2) usb wireless C error 8346 5m 265d PATCH [240d]
WARNING in plfxlc_mac_release usb wireless C done 3418 5h48m 268d PATCH [267d]
KASAN: slab-use-after-free Read in hdm_disconnect usb C error 14032 14m 268d PATCH [267d]
WARNING in smsusb_init_device/usb_submit_urb usb media C error 246 6h57m 269d PATCH [246d]
WARNING: ODEBUG bug in netdev_release usb syz 2 276d 275d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 C error 14 21d 277d 💬 1 [277d]
possible deadlock in dpm_for_each_dev pm usb C error 2 7d11h 290d
possible deadlock in assign_fw usb C done 36 4h30m 290d
WARNING in usb_free_urb usb media C inconclusive 1356 10h41m 325d 💬 1 [1d15h]
INFO: rcu detected stall in schedule (7) usb C done 50 7d09h 331d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 C error 2061 5h47m 343d
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input C unreliable 20 6d09h 373d 💬 1 [14d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb C error 10 15d 387d 💬 1 [386d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input syz error 53 2d04h 392d
WARNING: ODEBUG bug in netdev_freemem (3) usb C 90 281d 396d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 213 1d10h 397d
WARNING in wdm_rxwork/usb_submit_urb (2) usb C unreliable 94 19d 436d 💬 2 [362d]
UBSAN: array-index-out-of-bounds in usbhid_parse usb C error 65 11d 555d PATCH [41d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial C 166 22d 581d PATCH [565d]
INFO: task hung in __input_unregister_device (5) usb input C done error 17 196d 583d 💬 1 [202d]
INFO: task hung in get_bMaxPacketSize0 usb C error 291 3d17h 611d 💬 1 [348d]
INFO: rcu detected stall in console_callback usb input serial C error 18 29d 613d
INFO: task hung in usbdev_release (2) usb C error 94 3d16h 623d
INFO: rcu detected stall in newfstatat (3) usb C done 337 3d04h 683d 💬 4 [412d]
kernel BUG in cdc_ncm_fill_tx_frame usb syz error error 5 33d 691d
WARNING in amradio_set_mute/usb_submit_urb usb C 3 81d 712d
INFO: task hung in hub_port_init (3) usb C error 693 1d08h 757d 💬 16 [34d]
WARNING in usb_tx_block/usb_submit_urb usb libertas C 515 1d18h 798d 💬 3 [797d]
INFO: task hung in hub_event (3) usb 370 3d06h 830d 💬 12 [348d]
INFO: task hung in usb_get_descriptor (2) usb C inconclusive 862 32d 853d 💬 14 [159d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb C inconclusive 767 1d14h 870d 💬 5 [34d]
INFO: rcu detected stall in kernfs_fop_release kernfs usb C error 5 184d 935d 💬 1 [935d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 106 23h34m 935d
INFO: rcu detected stall in watchdog usb C error 13 24d 979d
INFO: rcu detected stall in dummy_timer (4) usb C inconclusive 24 3d09h 1019d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media C 1387 4d23h 1120d 💬 2 [1d15h]
INFO: task hung in r871xu_dev_remove usb staging C error inconclusive 561 144d 1231d 💬 1 [286d]
memory leak in __lookup_slow ext4 usb C 2 968d 1288d
WARNING in pvr2_send_request_ex/usb_submit_urb pvrusb2 usb C 16 38d 1325d
INFO: task hung in pn533_finalize_setup usb nfc C unreliable error 8 751d 1372d PATCH [1140d]
KASAN: use-after-free Read in v4l2_fh_open usb media C unreliable inconclusive 1261 3h58m 1528d PATCH [1318d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input C unreliable 1799 4h09m 1575d PATCH [1312d]
INFO: task hung in usbdev_open (2) usb C error 1110 6h37m 1576d 💬 1 [1d15h]
possible deadlock in zd_chip_disable_rxtx usb wireless C 44 11d 1595d
WARNING in corrupted/usb_submit_urb (2) usb C error done 69 361d 1615d 💬 1 [1561d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media C 6 1842d 1969d
WARNING in smsusb_start_streaming/usb_submit_urb usb media C error inconclusive 128 1h21m 2072d PATCH [352d]
WARNING in amradio_send_cmd/usb_submit_urb usb C error inconclusive 124 3d14h 2102d 💬 4 [1982d]
KASAN: use-after-free Read in v4l2_fh_init usb media C error inconclusive 3841 30m 2196d 💬 4 [1d15h]
moderation (2):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb (5) usb 1 35d 35d
KASAN: slab-use-after-free Read in steam_input_close input usb 2 44d 60d