syzbot

 sign-in | mailing list | source | docs
🐞 Open [1410]
≡ Subsystems
🐞 Fixed [6987]
🐞 Invalid [18213]
⬇ Missing Backports [223]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
✨ AI
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 415
Parent subsystem(s): kernel (89)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: sleeping function called from invalid context in usb_tx_block usb 5 C 317 1d13h 17d PATCH [14h47m]
memory leak in dvb_register_device media usb 3 C 1 12d 26d PATCH [25d]
KASAN: slab-use-after-free Read in event_handler usb 19 5 53d 53d
memory leak in ldisc_receive net input usb 3 C 2 11d 55d PATCH [48d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error 8 27d 61d 💬 10 [59d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 57d 68d 💬 1 [53d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 68d 68d
INFO: task hung in hci_register_dev (2) usb 1 syz error error 1 78d 77d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 3 58d 82d
BUG: soft lockup in dummy_timer usb 1 344 24d 92d
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 8 24d 99d
WARNING in cm109_urb_irq_callback usb input -1 C 46 90d 103d
WARNING in usb_start_wait_urb usb -1 C error 79 90d 103d PATCH [82d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error error 5 19d 134d 💬 1 [68d]
general protection fault in usb_gadget_udc_reset (4) usb 2 C error 15 7d01h 140d 💬 11 [14h47m]
INFO: task hung in rpm_resume (2) usb pm 1 C 17 26d 151d PATCH [21h58m]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 453 1d06h 152d PATCH [115d]
general protection fault in count_matching_names (2) usb 2 syz 4 67d 154d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 186 56m 158d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb 17 1191 1h08m 160d
WARNING in dev_shutdown (7) usb net -1 syz error error 23 9d13h 176d
general protection fault in su3000_i2c_transfer usb media 2 C done 221 2d02h 204d PATCH [14d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 446 1d04h 205d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 5 5d08h 210d 💬 6 [209d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 77 5d10h 215d
INFO: task hung in console_callback (6) input usb 1 C error error 14 19d 241d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 116 1d23h 267d
INFO: task hung in dvb_usbv2_probe usb 1 C error 338 1d22h 287d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 64 4d13h 294d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 457 2h48m 296d PATCH [109d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 231 1d00h 314d PATCH [304d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 947 1d02h 315d PATCH [312d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 163 46m 323d PATCH [278d]
BUG: corrupted list in az6007_i2c_xfer usb media 15 C error 11 12d 327d PATCH [116d]
INFO: task hung in usbnet_disconnect (3) net usb 1 84 16d 335d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 81d 349d PATCH [151d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 493 1d11h 354d PATCH [278d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 246d 380d
general protection fault in status_show usb 2 C 14 19d 421d PATCH [269d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 31 12d 440d
general protection fault in dummy_timer (2) usb 2 syz 73 6d22h 475d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 226d 514d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 173d 518d
possible deadlock in input_inject_event usb fs 4 C done 2475 1d12h 532d PATCH [147d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 11 3d11h 540d 💬 3 [44d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 127 17h19m 546d PATCH [126d]
WARNING in enable_work usb pm -1 C error 1403 13d 570d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 56d 593d PATCH [571d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 22 20d 602d 💬 1 [602d]
possible deadlock in assign_fw usb 4 C done error 174 4h18m 614d
WARNING in usb_free_urb usb media -1 C inconclusive 5185 2h59m 650d PATCH [278d]
INFO: rcu detected stall in schedule (7) usb 1 C done error 64 5d20h 655d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2173 1d20h 668d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 581 11d 675d 💬 3 [15d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 22 C error 27 2d00h 711d PATCH [1d23h]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 120 7d08h 716d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 317 2d11h 721d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 107 2d01h 760d 💬 2 [687d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 66d 905d PATCH [890d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 21 3d02h 907d 💬 1 [24d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 389 1d20h 935d 💬 1 [673d]
INFO: rcu detected stall in console_callback usb input serial 1 C error error 18 54d 937d
INFO: task hung in usbdev_release (2) usb 1 C error error 113 12d 947d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 539 12h17m 1008d 💬 4 [737d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 54d 1015d
INFO: task hung in hub_port_init (3) usb 1 C error 999 7d15h 1081d 💬 16 [106d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 1865 24d 1123d 💬 3 [13d]
INFO: task hung in hub_event (3) usb 1 840 9d05h 1154d 💬 12 [673d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 356d 1178d 💬 14 [483d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 57d 1194d 💬 5 [138d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 164 13d 1259d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1417 11d 1444d 💬 3 [13d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C error 35 3d05h 1649d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1076d 1697d PATCH [1465d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3763 8m 1852d PATCH [1642d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3489 1d10h 1900d PATCH [1636d]
INFO: task hung in usbdev_open (2) usb 1 C error 2580 18h30m 1901d 💬 1 [13d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 15d 1919d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 686d 1939d 💬 1 [1885d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 208d 2396d PATCH [676d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 7552 12h20m 2520d PATCH [3d19h]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in usbtmc_read_bulk_cb usb 19 1 52d 48d
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 2 28d 62d
general protection fault in set_link_state usb 2 1 79d 75d
BUG: unable to handle kernel NULL pointer dereference in mon_text_release usb 10 1 83d 79d
general protection fault in vhci_send_cmd_submit usb 2 2 45d 86d