syzbot

 sign-in | mailing list | source | docs
🐞 Open [1465]
≡ Subsystems
🐞 Fixed [6852]
🐞 Invalid [17773]
⬇ Missing Backports [225]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 409
Parent subsystem(s): kernel (82)
Child subsystems: usb-storage (2)
open (85):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-out-of-bounds Write in copy_to_urb (2) sound usb 23 C 5 2d10h 14h06m PATCH [1h32m]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error 7 5d00h 1d23h 💬 8 [now]
INFO: trying to register non-static key in i2c_register_adapter i2c usb -1 C 4 11d 8d07h 💬 1 [8d05h]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 9d03h 9d03h
INFO: task hung in hci_register_dev (2) usb 1 syz error 1 18d 17d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 2 13d 22d
BUG: soft lockup in dummy_timer usb 1 189 6h48m 33d
WARNING in __alloc_workqueue usb wireless -1 C 1834 38m 33d 💬 1 [15d]
WARNING in pvr2_send_request_ex pvrusb2 usb -1 C 2 30d 39d PATCH [23d]
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 5 1d19h 39d
WARNING in cm109_urb_irq_callback usb input -1 C 46 30d 43d
WARNING in usb_start_wait_urb usb -1 C error 79 30d 43d PATCH [22d]
memory leak in v4l2_ctrl_handler_init_class (2) usb media 3 C 3 34d 49d PATCH [45d]
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 52d 57d 💬 19 [50d]
memory leak in dualshock4_get_calibration_data input usb 3 C 1 61d 61d PATCH [46d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error 4 9d08h 75d 💬 1 [8d11h]
general protection fault in usb_gadget_udc_reset (4) usb 2 8 22h38m 80d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 308 4h53m 92d PATCH [55d]
general protection fault in count_matching_names (2) usb 2 syz 4 7d08h 94d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 105 1d17h 98d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 723 53m 100d
WARNING in dev_shutdown (7) usb net -1 syz error 20 15d 116d
WARNING: ODEBUG bug in trace_suspend_resume net usb -1 7 76d 127d
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C error 3 21d 142d PATCH [3d00h]
general protection fault in su3000_i2c_transfer usb media 2 C done 165 3d09h 144d PATCH [34d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 251 6h58m 145d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 53d 150d 💬 6 [149d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 52 7d21h 155d
INFO: task hung in console_callback (6) input usb 1 C error 13 4d10h 181d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 84 8h23m 207d
INFO: task hung in dvb_usbv2_probe usb 1 C error 284 8h11m 227d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 54 3d17h 234d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 345 5h59m 236d PATCH [49d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 194 14h26m 254d PATCH [244d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 843 5h06m 255d PATCH [252d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 49 21h12m 263d PATCH [218d]
INFO: task hung in usbnet_disconnect (3) net usb 1 82 26d 275d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 21d 289d PATCH [91d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 359 6h32m 294d PATCH [218d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 186d 320d
general protection fault in status_show usb 2 C 12 5d17h 361d PATCH [209d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 26 12d 380d
general protection fault in dummy_timer (2) usb 2 syz 62 2d22h 415d
WARNING in kcov_remote_start (6) wireless usb -1 6188 29m 434d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 166d 455d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 113d 458d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 55 93d 469d
possible deadlock in input_inject_event usb fs 4 C done 2213 6h51m 473d PATCH [88d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 10 13d 481d 💬 3 [64d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 104 19m 487d PATCH [66d]
WARNING in enable_work usb pm -1 C error 1271 5h02m 510d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 26d 533d PATCH [511d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 21 40d 542d 💬 1 [542d]
possible deadlock in assign_fw usb 4 C done 170 7d06h 555d
WARNING in usb_free_urb usb media -1 C inconclusive 4439 1h10m 590d PATCH [218d]
INFO: rcu detected stall in schedule (7) usb 1 C done 60 7d01h 596d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2156 3h44m 608d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 571 4d23h 615d 💬 3 [18d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 24 4d20h 651d 💬 1 [651d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 112 6d08h 657d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 304 11h56m 661d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 100 4d05h 700d 💬 2 [627d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 6d12h 845d PATCH [830d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 19 9d20h 848d 💬 1 [120d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 377 2d17h 875d 💬 1 [613d]
INFO: rcu detected stall in console_callback input usb serial 1 C error 18 24d 877d
INFO: task hung in usbdev_release (2) usb 1 C error error 108 2h55m 887d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 492 14h50m 948d 💬 4 [677d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 64d 955d
INFO: task hung in hub_port_init (3) usb 1 C error 942 4h52m 1022d 💬 16 [47d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 551 20d 1063d 💬 3 [78d]
INFO: task hung in hub_event (3) usb 1 724 1d07h 1094d 💬 12 [613d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 296d 1118d 💬 14 [424d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 27d 1134d 💬 5 [78d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 140 3d01h 1200d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1415 9d03h 1384d 💬 3 [15d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 32 9d00h 1589d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1016d 1637d PATCH [1405d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3320 12h23m 1793d PATCH [1583d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3364 5h21m 1840d PATCH [1576d]
INFO: task hung in usbdev_open (2) usb 1 C error 2139 now 1841d 💬 1 [15d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 7d01h 1860d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 626d 1880d 💬 1 [1825d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 148d 2337d PATCH [616d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 6893 1h47m 2461d 💬 4 [15d]
moderation (8):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 1 6d09h 2d08h
general protection fault in set_link_state usb 2 1 19d 15d
BUG: unable to handle kernel NULL pointer dereference in mon_text_release usb 10 1 23d 19d
general protection fault in vhci_send_cmd_submit usb 2 1 30d 26d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (14) usb 6 3 3d23h 28d
KASAN: slab-use-after-free Read in usb_unanchor_urb usb 19 1 49d 45d
KASAN: slab-use-after-free Read in ld_usb_release (2) usb 19 1 74d 70d
KASAN: slab-use-after-free Read in event_handler usb 19 4 10d 102d