syzbot

 sign-in | mailing list | source | docs | 🏰
🐞 Open [1368]
≡ Subsystems
🐞 Fixed [7042]
🐞 Invalid [18421]
⬇ Missing Backports [223]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
✨ AI
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 420
Parent subsystem(s): kernel (89)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in hiddev_disconnect (4) input usb actionable 19 1 11d 6d10h
KASAN: invalid-free in dev_free (3) usb 24 1 17d 13d PATCH [12d]
KMSAN: uninit-value in rtl8150_open (2) usb net 7 1 17d 13d PATCH [1d20h]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer media usb 17 C error 9 9d11h 14d PATCH [14d]
KASAN: slab-use-after-free Read in v4l2_open media usb 19 C error 27 23h45m 19d PATCH [19d]
memory leak in dvb_register_device media usb 3 C 1 37d 50d PATCH [50d]
KASAN: slab-use-after-free Read in event_handler usb 19 5 77d 77d
memory leak in ldisc_receive net usb 3 C 2 21d 80d PATCH [73d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error error 8 52d 86d 💬 10 [84d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 11d 92d 💬 1 [11d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 4 4d01h 93d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 3 82d 106d
BUG: soft lockup in dummy_timer usb 1 344 48d 117d
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 12 1d21h 123d
WARNING in cm109_urb_irq_callback usb input -1 C 46 115d 127d
WARNING in usb_start_wait_urb usb -1 C error 79 115d 128d PATCH [107d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error error 6 5d19h 159d 💬 1 [92d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 507 6h20m 176d PATCH [140d]
general protection fault in count_matching_names (2) usb 2 syz 4 21d 178d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 218 2h30m 182d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 1482 2h14m 184d
WARNING in dev_shutdown (7) usb net -1 syz error error 24 6d19h 200d
general protection fault in su3000_i2c_transfer usb media 2 C done 222 12h05m 228d PATCH [39d]
INFO: rcu detected stall in hub_event (2) usb kernfs 1 C error 463 2d01h 229d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 5 29d 234d 💬 6 [233d]
INFO: task hung in lbs_remove_card usb libertas 1 C 7952 8m 236d 💬 1 [6d12h]
INFO: task hung in dvb_usbv2_exit usb 1 C error 80 1d00h 239d
INFO: task hung in console_callback (6) input usb 1 C error error 15 19h39m 266d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 130 18h23m 291d
INFO: task hung in dvb_usbv2_probe usb 1 C error 350 18h22m 311d
KASAN: slab-use-after-free Read in report_descriptor_read usb input 19 70 3d09h 318d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 511 1h47m 320d PATCH [134d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 252 1d16h 338d PATCH [328d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 1001 22h49m 340d PATCH [336d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 201 3h25m 347d PATCH [302d]
BUG: corrupted list in az6007_i2c_xfer usb media 15 C error 12 11d 351d PATCH [141d]
INFO: task hung in usbnet_disconnect (3) net usb 1 84 40d 359d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 105d 373d PATCH [175d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 545 16h45m 379d PATCH [302d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 271d 404d
general protection fault in status_show usb 2 C 14 43d 445d PATCH [293d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 31 8d16h 464d
general protection fault in dummy_timer (2) usb 2 syz 76 10d 499d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 250d 539d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 197d 542d
possible deadlock in input_inject_event usb fs 4 C done 2800 2h00m 557d PATCH [172d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 15 11d 565d 💬 3 [6d06h]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 152 3h32m 571d PATCH [151d]
WARNING in enable_work usb pm -1 C error 1537 10m 594d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 80d 617d PATCH [595d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 22 45d 626d 💬 1 [626d]
possible deadlock in assign_fw usb 4 C done error 179 8d18h 639d
WARNING in usb_free_urb usb media -1 C inconclusive 5687 26m 674d PATCH [302d]
INFO: rcu detected stall in schedule (7) usb 1 C done error 66 2d10h 680d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2178 5d08h 692d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 587 1d13h 699d 💬 3 [7d11h]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 126 3d16h 741d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 327 9d01h 746d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 112 2d08h 785d 💬 2 [711d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 90d 930d PATCH [914d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 21 27d 932d 💬 1 [48d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 391 2d09h 960d 💬 1 [697d]
INFO: rcu detected stall in console_callback input usb serial 1 C error error 18 78d 961d
INFO: task hung in usbdev_release (2) usb 1 C error error 116 5h04m 972d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 565 3d13h 1032d 💬 4 [761d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 78d 1040d
INFO: task hung in hub_port_init (3) usb 1 C error 1003 2d13h 1106d 💬 16 [131d]
INFO: task hung in hub_event (3) usb 1 855 13h26m 1178d 💬 12 [697d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 381d 1202d 💬 14 [508d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 81d 1219d 💬 5 [162d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 169 2d11h 1284d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1436 11d 1469d 💬 3 [6d12h]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C error 35 13d 1674d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1100d 1721d PATCH [1489d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3998 17m 1877d PATCH [1667d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3565 9h29m 1924d PATCH [1661d]
INFO: task hung in usbdev_open (2) usb 1 C error 2764 9h37m 1925d 💬 1 [6d12h]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 4h49m 1944d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 710d 1964d 💬 1 [1910d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 232d 2421d PATCH [701d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in usbtmc_read_bulk_cb usb 19 1 76d 72d
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 2 53d 86d
general protection fault in vhci_send_cmd_submit usb 2 2 70d 110d