syzbot

 sign-in | mailing list | source | docs
🐞 Open [1575]
≡ Subsystems
🐞 Fixed [6346]
🐞 Invalid [16182]
⬇ Missing Backports [193]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 383
Parent subsystem(s): kernel (80)
Child subsystems: usb-storage (1)
open (92):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-out-of-bounds Read in mon_bin_event usb C 2 23h47m 14h36m PATCH [2h38m]
KMSAN: kernel-usb-infoleak in usbhid_raw_request usb 17 1h55m 18h16m
INFO: task hung in hub_activate (3) usb 177 21h44m 1d07h 💬 5 [6h29m]
WARNING in flush_delayed_work usb C 704 22h42m 5d10h 💬 1 [5d01h]
WARNING in dib0700_ctrl_rd/usb_submit_urb usb C error 3 1d05h 13d
WARNING: refcount bug in hdm_disconnect usb C 9 2h03m 18d PATCH [16d]
KASAN: invalid-free in dev_free (2) usb 2 10d 19d
stack segment fault in __usb_hcd_giveback_urb usb C done 6 26d 26d PATCH [15d]
KASAN: slab-use-after-free Read in raw_event_queue_add usb 1 34d 29d 💬 1 [27d]
INFO: task hung in dvb_usbv2_probe usb C error 33 21h32m 33d
KASAN: slab-use-after-free Read in report_descriptor_read usb input 8 4d00h 39d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb C error 22 12h35m 42d 💬 2 [35d]
BUG: unable to handle kernel NULL pointer dereference in module_kobj_release usb syz 19 50d 55d 💬 1 [52d]
WARNING: ODEBUG bug in usb_unbind_interface (3) usb 3 29d 58d
WARNING in osif_xfer/usb_submit_urb usb C error 18 11d 59d
INFO: task hung in dvb_usb_i2c_exit usb C error 44 1d11h 60d PATCH [50d]
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return net usb 1 64d 60d
WARNING in gl861_ctrl_msg/usb_submit_urb usb C error 6 27d 69d PATCH [23d]
UBSAN: shift-out-of-bounds in wacom_parse_and_register input usb 1 79d 75d
INFO: task hung in usbnet_disconnect (3) net usb 46 3d05h 81d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media C 3 2d22h 95d
WARNING in dib0700_rc_setup/usb_submit_urb usb media C 19 29d 97d
KASAN: slab-out-of-bounds Read in ucan_probe can usb C 2 99d 98d PATCH [98d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb C error 29 2d05h 100d PATCH [23d]
WARNING in media_create_pad_link (2) usb media C error 7 8d07h 106d PATCH [83d]
WARNING in hanwang_open/usb_submit_urb input usb C 4 30d 111d PATCH [108d]
INFO: rcu detected stall in call_timer_fn (5) net input usb C 8 3d15h 126d
BUG: corrupted list in usb_hcd_link_urb_to_ep (4) usb syz 7 39d 133d 💬 1 [77d]
general protection fault in count_matching_names usb syz 5 82d 152d
general protection fault in status_show usb C 8 13d 167d PATCH [14d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage syz 11 4d16h 185d
INFO: task hung in do_syscall_64 (3) usb syz error error 5 94d 192d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb C 668 12h09m 208d
general protection fault in dummy_timer (2) usb syz 24 7d12h 221d
KASAN: slab-use-after-free Read in v4l2_release media usb C error inconclusive 1 162d 225d PATCH [132d]
WARNING: ODEBUG bug in __folio_put (2) usb mm syz 27 79d 260d
INFO: rcu detected stall in vma_link_file mm input usb syz 1 265d 261d 💬 6 [259d]
INFO: rcu detected stall in do_syscall_64 input usb syz 22 85d 263d
INFO: rcu detected stall in sys_pselect6 (2) usb input C 54 229d 274d
INFO: rcu detected stall in kernfs_fop_read_iter (4) usb syz 14 74d 277d
possible deadlock in input_inject_event usb fs C done 1065 8h40m 278d
KASAN: use-after-free Read in em28xx_close_extension (2) usb media C error 9 11d 286d 💬 2 [8d18h]
INFO: task hung in usb_deregister_dev (2) usb C 36 235d 296d
WARNING in enable_work input usb pm C error 837 3h21m 315d
WARNING: ODEBUG bug in get_taint usb C 26 220d 322d
KASAN: slab-use-after-free Read in hdm_disconnect usb C error 15673 1h12m 338d PATCH [16d]
WARNING in smsusb_init_device/usb_submit_urb usb media C error 421 5h59m 339d PATCH [317d]
WARNING: ODEBUG bug in netdev_release usb syz 9 6d11h 346d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 C error 17 29d 348d 💬 1 [348d]
possible deadlock in dpm_for_each_dev pm usb C error 2 16d 360d
possible deadlock in assign_fw usb C done 87 1d10h 360d
WARNING in usb_free_urb usb media C inconclusive 1926 1h17m 396d PATCH [23d]
INFO: task hung in kernfs_add_one usb kernfs C error done 66 13d 401d
INFO: rcu detected stall in schedule (7) usb C done 52 14d 401d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 C error 2130 3d00h 414d
WARNING in kernfs_get (5) usb kernfs syz inconclusive 394 1d05h 420d 💬 3 [10d]
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input C unreliable 27 13d 444d 💬 1 [19d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb C error 16 12d 457d 💬 1 [457d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input C error 70 2d01h 462d
WARNING: ODEBUG bug in netdev_freemem (3) usb C 90 351d 466d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 245 1d20h 467d
WARNING in wdm_rxwork/usb_submit_urb (2) usb C unreliable 94 8d12h 506d 💬 2 [432d]
KASAN: stack-out-of-bounds Read in sched_show_task usb input serial C 166 22d 651d PATCH [635d]
INFO: task hung in __input_unregister_device (5) usb input C done error 17 266d 653d 💬 1 [272d]
INFO: task hung in get_bMaxPacketSize0 usb C error 303 10d 681d 💬 1 [418d]
INFO: rcu detected stall in console_callback usb input serial C error 18 24d 683d
INFO: task hung in usbdev_release (2) usb C error error 96 9d05h 693d
INFO: rcu detected stall in newfstatat (3) usb C done 359 1d08h 753d 💬 4 [482d]
kernel BUG in cdc_ncm_fill_tx_frame usb syz error error 5 10d 761d
WARNING in amradio_set_mute/usb_submit_urb usb C 4 4d08h 783d
INFO: task hung in hub_port_init (3) usb C error 726 20h48m 827d 💬 16 [10d]
WARNING in usb_tx_block/usb_submit_urb usb libertas C 522 2d12h 869d 💬 3 [867d]
INFO: task hung in hub_event (3) usb 409 1h39m 900d 💬 12 [418d]
INFO: task hung in usb_get_descriptor (2) usb C inconclusive error 862 102d 924d 💬 14 [229d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb C inconclusive 807 4d16h 940d 💬 5 [41d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 114 1d04h 1005d
INFO: rcu detected stall in watchdog usb C error 13 21d 1049d
INFO: rcu detected stall in dummy_timer (4) usb C inconclusive 25 6d20h 1090d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media C done 1391 5d07h 1190d 💬 3 [10d]
INFO: task hung in r871xu_dev_remove usb staging C error inconclusive 561 214d 1302d 💬 1 [357d]
memory leak in __lookup_slow usb ext4 C 2 1038d 1359d
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 C 22 13d 1395d
INFO: task hung in pn533_finalize_setup usb nfc C unreliable error 8 822d 1443d PATCH [1211d]
KASAN: use-after-free Read in v4l2_fh_open usb media C unreliable inconclusive 1684 3h13m 1598d PATCH [1388d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input C unreliable 2283 40m 1646d PATCH [1382d]
INFO: task hung in usbdev_open (2) usb C error 1251 1h53m 1646d 💬 1 [10d]
possible deadlock in zd_chip_disable_rxtx usb wireless C 44 11d 1665d
WARNING in corrupted/usb_submit_urb (2) usb C error done 69 431d 1685d 💬 1 [1631d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media C 6 1912d 2039d
WARNING in smsusb_start_streaming/usb_submit_urb usb media C error inconclusive 154 5d10h 2142d PATCH [422d]
WARNING in amradio_send_cmd/usb_submit_urb usb C error inconclusive 136 11d 2172d 💬 4 [2053d]
KASAN: use-after-free Read in v4l2_fh_init usb media C error inconclusive 4569 54m 2266d 💬 4 [10d]
moderation (2):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Write in iowarrior_write_callback usb 1 22d 18d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (12) usb 2 6d10h 56d