syzbot

 sign-in | mailing list | source | docs | 🏰
🐞 Open [1341]
≡ Subsystems
🐞 Fixed [7059]
🐞 Invalid [18505]
⬇ Missing Backports [222]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
✨ AI
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 420
Parent subsystem(s): kernel (83)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in hiddev_disconnect (4) input usb actionable 19 1 19d 14d
KASAN: invalid-free in dev_free (3) usb 24 1 25d 21d PATCH [20d]
KMSAN: uninit-value in rtl8150_open (2) usb net 7 1 26d 21d PATCH [7d14h]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer media usb 17 C error 9 3d15h 23d PATCH [2d00h]
KASAN: slab-use-after-free Read in v4l2_open media usb 19 C error 34 17h38m 27d PATCH [27d]
memory leak in dvb_register_device media usb 3 C 1 45d 59d PATCH [58d]
KASAN: slab-use-after-free Read in event_handler usb 19 5 85d 85d
memory leak in ldisc_receive net usb 3 C 2 8d01h 88d PATCH [81d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error error 8 4d07h 94d 💬 10 [92d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 19d 100d 💬 1 [19d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 4 12d 101d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 3 90d 115d
BUG: soft lockup in dummy_timer usb 1 344 57d 125d
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 12 10d 132d
WARNING in cm109_urb_irq_callback usb input -1 C 46 123d 136d
WARNING in usb_start_wait_urb usb -1 C error 79 123d 136d PATCH [115d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error error 6 14d 167d 💬 1 [100d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 522 13h59m 184d PATCH [148d]
general protection fault in count_matching_names (2) usb 2 syz 4 29d 187d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 230 17h57m 190d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 1581 8h36m 192d
WARNING in dev_shutdown (7) usb net -1 syz error error 24 15d 208d
general protection fault in su3000_i2c_transfer usb media 2 C done 222 8d18h 237d PATCH [47d]
INFO: rcu detected stall in hub_event (2) usb kernfs 1 C error 470 3h04m 238d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 5 6d06h 242d 💬 6 [241d]
INFO: task hung in lbs_remove_card usb libertas 1 C 9333 12m 244d PATCH [12h55m]
INFO: task hung in dvb_usbv2_exit usb 1 C error 82 1d06h 247d
INFO: task hung in console_callback (6) input usb 1 C error error 17 16h52m 274d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 131 6d04h 299d
INFO: task hung in dvb_usbv2_probe usb 1 C error 357 1d20h 319d
KASAN: slab-use-after-free Read in report_descriptor_read usb input 19 72 19h20m 326d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 513 2d07h 328d PATCH [142d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 254 2d07h 347d PATCH [337d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 1007 5d10h 348d PATCH [345d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 215 11h21m 356d PATCH [310d]
BUG: corrupted list in az6007_i2c_xfer usb media 15 C error 12 5d09h 360d PATCH [149d]
INFO: task hung in usbnet_disconnect (3) net usb 1 84 49d 368d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 113d 381d PATCH [183d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 582 1d00h 387d PATCH [310d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 279d 412d
general protection fault in status_show usb 2 C 14 2d09h 453d PATCH [301d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 31 2d21h 472d
general protection fault in dummy_timer (2) usb 2 syz 78 3d08h 507d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 259d 547d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 206d 550d
possible deadlock in input_inject_event usb fs 4 C done 3019 2h39m 565d PATCH [180d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 15 6d00h 573d 💬 3 [14d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 155 3d07h 579d PATCH [159d]
WARNING in enable_work usb pm -1 C error 1713 now 602d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 89d 626d PATCH [604d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 22 53d 634d 💬 1 [634d]
possible deadlock in assign_fw usb 4 C done error 181 1d19h 647d
WARNING in usb_free_urb usb media -1 C inconclusive 6584 now 683d PATCH [310d]
INFO: rcu detected stall in schedule (7) usb 1 C done error 66 10d 688d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2185 3d22h 700d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 594 22h12m 707d 💬 3 [15d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 128 2d08h 749d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 332 13h01m 754d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 113 5d13h 793d 💬 2 [719d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 98d 938d PATCH [922d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 21 35d 940d 💬 1 [57d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 391 10d 968d 💬 1 [705d]
INFO: rcu detected stall in console_callback input usb serial 1 C error error 18 87d 970d
INFO: task hung in usbdev_release (2) usb 1 C error error 117 7d09h 980d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 573 1d06h 1040d 💬 4 [769d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 86d 1048d
INFO: task hung in hub_port_init (3) usb 1 C error 1005 3d07h 1114d 💬 16 [139d]
INFO: task hung in hub_event (3) usb 1 856 5d10h 1187d 💬 12 [705d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 389d 1210d 💬 14 [516d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 89d 1227d 💬 5 [170d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 169 10d 1292d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1436 6d01h 1477d 💬 3 [14d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C error 35 7d16h 1682d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1108d 1730d PATCH [1497d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 4066 4h19m 1885d PATCH [1675d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3579 3h47m 1932d PATCH [1669d]
INFO: task hung in usbdev_open (2) usb 1 C error 2829 2h22m 1933d 💬 1 [14d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 8d11h 1952d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 718d 1972d 💬 1 [1918d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 241d 2429d PATCH [709d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in mon_text_release usb 2 1 9d20h 5d20h
KASAN: slab-use-after-free Read in usbtmc_read_bulk_cb usb 19 1 84d 80d
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 2 61d 94d
general protection fault in vhci_send_cmd_submit usb 2 2 78d 118d