syzbot

 sign-in | mailing list | source | docs
🐞 Open [1676]
≡ Subsystems
🐞 Fixed [6051]
🐞 Invalid [15015]
⬇ Missing Backports [150]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 373
Parent subsystem(s): kernel (89)
Child subsystems: usb-storage (1)
open (91):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: corrupted list in usb_hcd_link_urb_to_ep (4) usb syz 5 1d12h 1d12h
KMSAN: uninit-value in mii_nway_restart (2) usb C 17 23h53m 4d06h PATCH [3d16h]
KASAN: use-after-free Read in hid_hw_raw_request input usb 6 8d08h 9d01h
WARNING in cxacru_cm/usb_submit_urb (2) usb C 8 5d01h 15d PATCH [8d05h]
KASAN: slab-use-after-free Read in usbhid_raw_request usb C 6 9d11h 16d PATCH [15d]
general protection fault in count_matching_names usb syz 3 20d 20d
KASAN: slab-use-after-free Read in corsair_void_status_work_handler input usb C 27 5d10h 25d 💬 1 [17d]
WARNING: ODEBUG bug in release_nodes input usb C 665 4d11h 26d
WARNING: ODEBUG bug in devres_release_group input usb C done 37 12d 29d PATCH [28d]
general protection fault in status_show usb C 5 24d 35d PATCH [30d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage syz 4 43d 54d
INFO: task hung in do_syscall_64 (3) usb syz error 4 5d14h 60d
WARNING in sched_show_task serial input usb C 1 67d 63d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb C 91 1d07h 76d
general protection fault in dummy_timer (2) usb 10 12d 89d
KASAN: slab-use-after-free Read in v4l2_release media usb C error 1 31d 93d PATCH [1d06h]
UBSAN: shift-out-of-bounds in s32ton input usb 17 15d 102d PATCH [100d]
KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb (4) usb 4 32d 106d
WARNING: bad unlock balance in elevator_init_mq block usb syz done 1 110d 106d
WARNING: bad unlock balance in sd_revalidate_disk scsi usb syz done 2 110d 107d 💬 1 [59d]
possible deadlock in blk_mq_alloc_request usb block syz done 827 31d 107d 💬 1 [35d]
WARNING: bad unlock balance in blk_mq_update_tag_set_shared usb block syz done 11 109d 107d 💬 1 [58d]
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] usb media 5 38d 123d
WARNING: ODEBUG bug in __folio_put (2) usb mm syz 23 6d07h 129d
INFO: rcu detected stall in vma_link_file mm input usb syz 1 134d 130d 💬 6 [128d]
KASAN: slab-use-after-free Read in usbnet_deferred_kevent net usb 2 93d 130d
INFO: rcu detected stall in do_syscall_64 input usb syz 21 46d 132d
WARNING: ODEBUG bug in corrupted (3) usb syz 1 119d 133d PATCH [132d]
INFO: rcu detected stall in statfs (3) kernfs input usb syz 1 141d 137d
INFO: rcu detected stall in __fsnotify_parent usb input fs C 7 113d 141d
INFO: rcu detected stall in sys_pselect6 (2) input usb C 54 97d 143d
INFO: rcu detected stall in kernfs_fop_read_iter (4) usb syz 13 32d 145d
possible deadlock in input_inject_event fuse usb syz done 612 25m 147d
INFO: task hung in usb_deregister_dev (2) usb C 36 104d 164d
INFO: rcu detected stall in x64_sys_call usb input mm syz error 216 7d19h 164d
WARNING in enable_work input usb pm C error 587 6h47m 184d
KASAN: invalid-free in dev_free usb C 1250 42d 188d PATCH [107d]
WARNING: ODEBUG bug in get_taint usb C 26 89d 190d
WARNING in ath6kl_bmi_get_target_info (2) usb wireless C error 6638 33m 204d PATCH [178d]
WARNING in plfxlc_mac_release usb wireless C done 2680 24m 206d PATCH [206d]
KASAN: slab-use-after-free Read in hdm_disconnect usb C 12182 1h09m 207d PATCH [206d]
WARNING in smsusb_init_device/usb_submit_urb usb media C error 194 4h24m 207d PATCH [185d]
WARNING: ODEBUG bug in netdev_release usb syz 2 214d 214d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 C error 13 4d00h 216d 💬 1 [216d]
possible deadlock in dpm_for_each_dev pm usb C error 2 6d11h 229d
possible deadlock in assign_fw usb C done 28 13d 229d
WARNING in usb_free_urb usb media C inconclusive 547 14h36m 264d 💬 1 [2d05h]
INFO: rcu detected stall in addrconf_rs_timer (6) usb netfilter syz error error 395 52d 265d
INFO: task hung in kernfs_add_one usb kernfs C error 60 26d 269d
INFO: rcu detected stall in schedule (7) usb C done 49 6d05h 270d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 C error 1920 1d15h 282d
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input C unreliable 12 10d 312d 💬 1 [78d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb C error 10 11d 326d 💬 1 [325d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input syz error 45 1d13h 331d
WARNING: ODEBUG bug in netdev_freemem (3) usb C 90 220d 334d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 184 4h39m 336d
WARNING: ODEBUG bug in usb_unbind_interface (2) usb 41 46d 337d PATCH [327d]
WARNING in usbnet_start_xmit/usb_submit_urb (2) usb C error 10 2d15h 341d 💬 3 [3d00h]
WARNING in wdm_rxwork/usb_submit_urb (2) usb C unreliable 92 11d 374d 💬 2 [301d]
UBSAN: array-index-out-of-bounds in usbhid_parse usb C error 56 13h40m 494d PATCH [15d]
KASAN: stack-out-of-bounds Read in sched_show_task usb input serial C 164 7d19h 520d PATCH [504d]
INFO: task hung in __input_unregister_device (5) usb input C done error 17 135d 522d 💬 1 [141d]
INFO: task hung in get_bMaxPacketSize0 usb C error 271 12d 550d 💬 1 [287d]
INFO: rcu detected stall in console_callback usb input serial C error 18 31d 551d
INFO: task hung in usbdev_release (2) usb C error 91 9d05h 562d
INFO: rcu detected stall in newfstatat (3) usb C done 306 1d08h 622d 💬 4 [351d]
kernel BUG in cdc_ncm_fill_tx_frame usb syz error error 5 19d 629d
WARNING in amradio_set_mute/usb_submit_urb usb C 3 20d 651d
INFO: task hung in hub_port_init (3) usb C error 670 2d13h 696d 💬 16 [4d05h]
WARNING in usb_tx_block/usb_submit_urb usb libertas C 504 4d09h 737d 💬 3 [736d]
INFO: task hung in hub_event (3) usb 351 10d 768d 💬 12 [287d]
INFO: task hung in usb_get_descriptor (2) usb C inconclusive 862 3d00h 792d 💬 14 [98d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb C inconclusive 702 2d18h 808d 💬 5 [4d05h]
INFO: rcu detected stall in kernfs_fop_release kernfs usb C error 5 122d 874d 💬 1 [874d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 95 9d06h 874d
INFO: rcu detected stall in watchdog usb C error 12 3d05h 917d
INFO: rcu detected stall in dummy_timer (4) usb C inconclusive 22 21d 958d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media C 1370 7d05h 1059d 💬 2 [4d05h]
INFO: task hung in r871xu_dev_remove usb staging C error inconclusive 561 83d 1170d 💬 1 [225d]
memory leak in __lookup_slow ext4 usb C 2 906d 1227d
WARNING in pvr2_send_request_ex/usb_submit_urb pvrusb2 usb C 16 1d22h 1263d
INFO: task hung in pn533_finalize_setup nfc usb C unreliable error 8 690d 1311d PATCH [1079d]
KASAN: use-after-free Read in v4l2_fh_open usb media C unreliable inconclusive 947 5h57m 1467d PATCH [1257d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input C unreliable 1306 3h45m 1514d PATCH [1251d]
INFO: task hung in usbdev_open (2) usb C error 1069 2d09h 1515d 💬 1 [4d05h]
possible deadlock in zd_chip_disable_rxtx usb wireless C 44 20d 1534d
WARNING in corrupted/usb_submit_urb (2) usb C error done 69 300d 1554d 💬 1 [1500d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media C 6 1781d 1908d
WARNING in smsusb_start_streaming/usb_submit_urb usb media C error inconclusive 126 12d 2011d PATCH [291d]
WARNING in amradio_send_cmd/usb_submit_urb usb C error inconclusive 115 2d04h 2041d 💬 4 [1921d]
KASAN: use-after-free Read in v4l2_fh_init usb media C error inconclusive 2731 1h00m 2135d 💬 4 [4d05h]
moderation (7):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add usb 1 21d 21d
KCSAN: data-race in vhci_hub_control / vhci_shutdown_connection (2) usb 1 28d 28d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (11) usb 2 29d 48d
general protection fault in vhci_tx_loop usb 1 55d 51d
general protection fault in defer_bh net usb 1 57d 53d
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_del usb 3 22d 92d
BUG: workqueue leaked atomic, lock or RCU: syz.NUM.NUM[NUM] mm usb 4 51d 98d