syzbot

 sign-in | mailing list | source | docs
🐞 Open [1592]
≡ Subsystems
🐞 Fixed [6233]
🐞 Invalid [15780]
⬇ Missing Backports [183]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 378
Parent subsystem(s): kernel (86)
Child subsystems: usb-storage (1)
open (95):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KMSAN: uninit-value in usbnet_probe (3) usb C 103 1h29m 6d20h
BUG: unable to handle kernel NULL pointer dereference in module_kobj_release usb syz 19 3d03h 8d08h 💬 1 [5d16h]
WARNING: ODEBUG bug in snd_rawmidi_free sound usb C error 1 12d 8d22h
WARNING: ODEBUG bug in usb_unbind_interface (3) usb 1 16d 11d
WARNING in osif_xfer/usb_submit_urb usb C error 5 3d13h 12d
INFO: task hung in dvb_usb_i2c_exit usb C error 12 20h05m 13d PATCH [3d08h]
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return usb net 1 17d 13d
WARNING in gl861_ctrl_msg/usb_submit_urb usb C error 6 11d 22d 💬 1 [20d]
UBSAN: shift-out-of-bounds in wacom_parse_and_register input usb 1 32d 28d
INFO: task hung in usbnet_disconnect (3) usb net 34 2d12h 34d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media C 2 48d 47d
WARNING in dib0700_rc_setup/usb_submit_urb usb media C 18 9d15h 50d
KASAN: slab-out-of-bounds Read in ucan_probe usb can C 2 52d 51d PATCH [51d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb C error 9 1d21h 53d PATCH [48d]
BUG: soft lockup in hci_cmd_timeout (2) bluetooth usb syz 1 61d 57d
WARNING in media_create_pad_link (2) usb media C error 5 10d 58d PATCH [36d]
WARNING in hanwang_open/usb_submit_urb usb input C 4 45d 64d PATCH [61d]
INFO: rcu detected stall in call_timer_fn (5) usb net input C 4 6d15h 79d
KASAN: slab-use-after-free Write in steam_input_register input usb C 6 69d 83d
BUG: corrupted list in usb_hcd_link_urb_to_ep (4) usb syz 6 4d08h 86d 💬 1 [30d]
KMSAN: uninit-value in mii_nway_restart (2) usb C 158 2d04h 88d PATCH [7d15h]
KASAN: use-after-free Read in hid_hw_raw_request input usb 6 92d 93d
KASAN: slab-use-after-free Read in usbhid_raw_request usb C 6 94d 100d PATCH [100d]
general protection fault in count_matching_names usb syz 5 35d 105d
general protection fault in status_show usb C 5 25d 120d PATCH [114d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage syz 6 20d 138d
INFO: task hung in do_syscall_64 (3) usb syz error 5 47d 145d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb C 419 1h47m 161d
general protection fault in dummy_timer (2) usb syz 19 19d 174d
KASAN: slab-use-after-free Read in v4l2_release media usb C error inconclusive 1 115d 178d PATCH [85d]
UBSAN: shift-out-of-bounds in s32ton input usb 18 82d 186d PATCH [184d]
WARNING: bad unlock balance in elevator_init_mq block usb syz done 1 195d 191d
WARNING: bad unlock balance in sd_revalidate_disk usb scsi syz done 2 195d 192d 💬 1 [144d]
WARNING: bad unlock balance in blk_mq_update_tag_set_shared usb block syz done 11 194d 192d 💬 1 [143d]
WARNING: ODEBUG bug in __folio_put (2) usb mm syz 27 32d 213d
INFO: rcu detected stall in vma_link_file mm input usb syz 1 218d 214d 💬 6 [212d]
INFO: rcu detected stall in do_syscall_64 input usb syz 22 38d 216d
INFO: rcu detected stall in __fsnotify_parent usb input fs C 7 197d 225d
INFO: rcu detected stall in sys_pselect6 (2) usb input C 54 182d 227d
INFO: rcu detected stall in kernfs_fop_read_iter (4) usb syz 14 27d 230d
KASAN: use-after-free Read in em28xx_close_extension (2) usb media C error 6 5d00h 239d 💬 2 [86d]
INFO: task hung in usb_deregister_dev (2) usb C 36 188d 249d
WARNING in enable_work input usb pm C error 738 18h15m 268d
WARNING: ODEBUG bug in get_taint usb C 26 173d 275d
WARNING in ath6kl_bmi_get_target_info (2) usb wireless C error 9023 41m 289d PATCH [263d]
WARNING in plfxlc_mac_release usb wireless C done 3644 4d01h 291d PATCH [290d]
KASAN: slab-use-after-free Read in hdm_disconnect usb C error 14609 35m 291d PATCH [291d]
WARNING in smsusb_init_device/usb_submit_urb usb media C error 327 4h10m 292d PATCH [270d]
WARNING: ODEBUG bug in netdev_release usb syz 4 2d12h 298d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 C error 15 10d 301d 💬 1 [301d]
possible deadlock in dpm_for_each_dev pm usb C error 2 30d 313d
possible deadlock in assign_fw usb C done 44 1d01h 313d
WARNING in usb_free_urb usb media C inconclusive 1492 now 349d 💬 1 [24d]
INFO: rcu detected stall in addrconf_rs_timer (6) netfilter usb syz error error 464 3h38m 349d
INFO: rcu detected stall in schedule (7) usb C done 50 30d 354d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 C error 2122 5h16m 367d
WARNING in kernfs_get (5) usb kernfs syz inconclusive 339 3h07m 373d 💬 3 [24d]
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input C unreliable 22 1d15h 397d 💬 1 [4d17h]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb C error 12 8d22h 410d 💬 1 [410d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input syz error 55 10h48m 415d
WARNING: ODEBUG bug in netdev_freemem (3) usb C 90 304d 419d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 222 4h15m 420d
WARNING in wdm_rxwork/usb_submit_urb (2) usb C unreliable 94 10d 459d 💬 2 [385d]
UBSAN: array-index-out-of-bounds in usbhid_parse usb C error 70 6d06h 578d PATCH [22d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial C 166 45d 604d PATCH [588d]
INFO: task hung in __input_unregister_device (5) usb input C done error 17 219d 606d 💬 1 [225d]
INFO: task hung in get_bMaxPacketSize0 usb C error 301 4d20h 634d 💬 1 [371d]
INFO: rcu detected stall in console_callback input usb serial C error 18 7d21h 636d
INFO: task hung in usbdev_release (2) usb C error 95 5d08h 646d
INFO: rcu detected stall in newfstatat (3) usb C done 344 1d00h 706d 💬 4 [435d]
kernel BUG in cdc_ncm_fill_tx_frame usb syz error error 5 57d 714d
WARNING in amradio_set_mute/usb_submit_urb usb C 3 104d 736d
INFO: task hung in hub_port_init (3) usb C error 718 3h48m 780d 💬 16 [57d]
WARNING in usb_tx_block/usb_submit_urb usb libertas C 518 4d00h 822d 💬 3 [820d]
INFO: task hung in hub_event (3) usb 385 5h13m 853d 💬 12 [371d]
INFO: task hung in usb_get_descriptor (2) usb C inconclusive error 862 55d 877d 💬 14 [182d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb C inconclusive 795 7h15m 893d 💬 5 [57d]
INFO: rcu detected stall in kernfs_fop_release kernfs usb C error 5 207d 958d 💬 1 [958d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 109 16d 958d
INFO: rcu detected stall in watchdog usb C error 13 5d08h 1002d
INFO: rcu detected stall in dummy_timer (4) usb C inconclusive 24 26d 1043d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media C done 1389 4d12h 1143d 💬 3 [3d15h]
INFO: task hung in r871xu_dev_remove usb staging C error inconclusive 561 167d 1255d 💬 1 [309d]
memory leak in __lookup_slow ext4 usb C 2 991d 1311d
WARNING in pvr2_send_request_ex/usb_submit_urb pvrusb2 usb C 18 4d17h 1348d
INFO: task hung in pn533_finalize_setup nfc usb C unreliable error 8 774d 1396d PATCH [1164d]
KASAN: use-after-free Read in v4l2_fh_open usb media C unreliable inconclusive 1412 1h26m 1551d PATCH [1341d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input C unreliable 1926 1h38m 1599d PATCH [1335d]
INFO: task hung in usbdev_open (2) usb C error 1141 13h25m 1599d 💬 1 [24d]
possible deadlock in zd_chip_disable_rxtx usb wireless C 44 34d 1618d
WARNING in corrupted/usb_submit_urb (2) usb C error done 69 384d 1638d 💬 1 [1584d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media C 6 1865d 1992d
WARNING in smsusb_start_streaming/usb_submit_urb usb media C error inconclusive 135 7h58m 2095d PATCH [375d]
WARNING in amradio_send_cmd/usb_submit_urb usb C error inconclusive 127 2d03h 2125d 💬 4 [2006d]
KASAN: use-after-free Read in v4l2_fh_init usb media C error inconclusive 4117 2h42m 2219d 💬 4 [24d]
moderation (4):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (12) usb 1 9d09h 9d09h
KCSAN: data-race in _prb_read_valid / data_alloc usb 34 23h34m 21d
KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb (5) usb 2 13d 58d
KASAN: slab-use-after-free Read in steam_input_close input usb 2 68d 83d