syzbot


fixed (67):
Title Repro Bisected Count Last Reported Closed Patch
WARNING in em28xx_usb_disconnect C 8 39d 72d 4d22h 46e4a266 media: em28xx: modules workqueue not inited for 2nd device
KASAN: use-after-free Read in si470x_int_in_callback C 25 14d 103d 4d22h 0d616f2a media: radio/si470x: kill urb on error
general protection fault in ath6kl_usb_alloc_urb_from_pipe C 1160 31d 191d 4d22h 39d170b3 ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
KASAN: use-after-free Read in atusb_disconnect C 112 6d09h 47d 4d22h 7fd25e6f ieee802154: atusb: fix use-after-free at disconnect
KASAN: slab-out-of-bounds Read in hdpvr_probe C 10 41d 116d 4d22h 8b8900b7 media: hdpvr: add terminating 0 at end of string
KASAN: global-out-of-bounds Read in load_next_firmware_from_table C 5 53d 103d 4d22h 764f3f1e libertas: Add missing sentinel at end of if_usb.c fw_table
divide error in usbnet_update_max_qlen C 17 21d 34d 4d22h 280ceaed usbnet: sanity checking of packet sizes and device mtu
KASAN: slab-out-of-bounds Read in technisat_usb2_rc_query C 2236 50d 189d 4d22h 0c4df39e media: technisat-usb2: break out of loop at end of buffer
KASAN: global-out-of-bounds Read in dvb_pll_attach C 2 42d 102d 4d22h c268e7ad media: dvb-frontends: use ida for pll number
general protection fault in pk_probe C 2 51d 47d 4d22h 98375b86 HID: prodikeys: Fix general protection fault during probe
KASAN: global-out-of-bounds Read in hdpvr_probe C 15 58d 171d 4d22h d4a6a953 media: hdpvr: Add device num check and handling
WARNING: ODEBUG bug in usbhid_disconnect (2) C 48 25d 47d 4d22h 2bcdacb7 HID: sony: Fix memory corruption issue on cleanup.
KASAN: slab-out-of-bounds Read in usb_reset_and_verify_device syz 1 55d 47d 4d22h 3dd550a2 USB: usbcore: Fix slab-out-of-bounds bug during device reset
BUG: MAX_STACK_TRACE_ENTRIES too low! (2) C cause 5045 36d 205d 4d22h 12593b74 locking/lockdep: Reduce space occupied by stack traces
possible deadlock in open_rio (3) C 169 31d 33d 4d22h 9472aff1 USB: rio500: Fix lockdep violation
WARNING in zd_mac_clear C 13194 31d 191d 4d22h 7a2eb736 zd1211rw: remove false assertion from zd_mac_clear()
WARNING in iguanair_probe/usb_submit_urb C 3 35d 86d 4d22h ab1cbdf1 media: iguanair: add sanity checks
general protection fault in __pm_runtime_resume C 197 25d 88d 4d22h 5f924277 HID: logitech: Fix general protection fault caused by Logitech driver
divide error in cdc_ncm_update_rxtx_max C 5 20d 34d 4d22h 3fe4b335 cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
KASAN: slab-out-of-bounds Read in hidraw_ioctl C 104 32d 82d 4d22h 416dacb8 HID: hidraw: Fix invalid read in hidraw_ioctl
possible deadlock in open_rio 1107 43d 80d 43d 2ca359f4 Revert "USB: rio500: simplify locking"
possible deadlock in usb_deregister_dev C 82 69d 76d 44d c468a8aa usb: iowarrior: fix deadlock on disconnect
WARNING in __iforce_usb_xmit/usb_submit_urb C 3 72d 76d 44d 849f5ae3 Input: iforce - add sanity checks
WARNING in kbtab_open/usb_submit_urb C 5 71d 89d 44d c88090df Input: kbtab - sanity check for endpoint type
WARNING in usbtouch_open C 768 69d 83d 44d b55d996f Input: usbtouchscreen - initialize PM mutex before using it
KASAN: use-after-free Read in usb_free_coherent 310 69d 80d 44d fc05481b usb: yurex: Fix use-after-free in yurex_delete
KASAN: use-after-free Read in ld_usb_release C 14 63d 72d 44d 303911cf USB: core: Fix races in character device registration and deregistraion
KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind C 2 67d 69d 44d 54364278 USB: CDC: fix sanity checks in CDC union parser
KASAN: use-after-free Read in device_release_driver_internal C 5 65d 89d 44d c52873e5 usb: cdc-acm: make sure a refcount is taken early enough
WARNING in wdm_write/usb_submit_urb C 15 47d 62d 44d 1426bd2c USB: cdc-wdm: fix race between write and disconnect due to flag abuse
WARNING in mark_lock syz cause 2 62d 117d 54d 95fa1454 bpf: sockmap/tls, close can race with map free
general protection fault in holtek_kbd_input_event C 67 74d 87d 54d 01ec0a5f HID: holtek: test for sanity of intfdata
KASAN: use-after-free Read in hiddev_release C 11 64d 80d 54d 9c09b214 HID: hiddev: avoid opening a disconnected device 6d4472d7 HID: hiddev: do cleanup in failure of opening a device
WARNING in gpio_to_desc C 3 71d 102d 54d c3953a3c NFC: nfcmrvl: fix gpio-handling regression
usb-fuzzer boot error: general protection fault in dma_direct_max_mapping_size 21 85d 89d 67d 1b5d9a6e scsi: core: fix the dma_max_mapping_size call
general protection fault in snd_usb_pipe_sanity_check C 72 69d 83d 67d 5d78e1c2 ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
KASAN: stack-out-of-bounds Read in hfcsusb_probe C 634 83d 189d 67d f384e62a ISDN: hfcsusb: checking idx of ep configuration
kernel BUG at drivers/usb/wusbcore/wusbhc.c:LINE! C 1 89d 89d 67d f90bf1ec usb: wusbcore: fix unbalanced get/put cluster_id
WARNING: Support for this device (Terratec Grabster AV400) is experimental. C 371 83d 173d 76d 1753c7c4 media: pvrusb2: use a different format for warnings
KASAN: use-after-free Read in cpia2_usb_disconnect C 3 103d 187d 76d eff73de2 media: cpia2_usb: first wake up, then free in disconnect
WARNING in __flush_work (3) C 1251 79d 189d 76d 11a087f4 media: uvcvideo: Fix access to uninitialized fields on probe error
KASAN: use-after-free Read in dvb_usb_device_exit C 825 76d 191d 76d 6cf97230 media: dvb: usb: fix use after free in dvb_usb_device_exit
KASAN: slab-out-of-bounds Read in au0828_rc_unregister (2) 11 147d 158d 76d 6d0d1ff9 media: au0828: fix null dereference in error path
INFO: trying to register non-static key in rtl_c2hcmd_launcher C 48950 83d 191d 76d 6c0ed66f rtlwifi: rtl8192cu: fix error handle when usb probe failed
KASAN: null-ptr-deref Read in zr364xx_vidioc_querycap C 76 83d 174d 76d 5d2e73a5 media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
WARNING: ath10k USB support is incomplete, don't expect anything to work! C 347 84d 164d 76d 265df32e ath10k: Change the warning message string
KASAN: use-after-free Read in v4l2_release C 275 84d 188d 76d c666355e media: radio-raremono: change devm_k*alloc to k*alloc
WARNING: Detected a wedged cx25840 chip; the device will not work. C 62 84d 173d 76d 1753c7c4 media: pvrusb2: use a different format for warnings
WARNING in snd_usb_motu_microbookii_communicate/usb_submit_urb C 3 93d 131d 76d 801ebf10 ALSA: usb-audio: Sanity checks for each pipe and EP types
KASAN: use-after-free Read in p54u_load_firmware_cb syz 40 84d 167d 76d 6e41e225 p54usb: Fix race between disconnect and firmware loading
KASAN: global-out-of-bounds Read in qmi_wwan_probe C 2 106d 118d 83d 904d88d7 qmi_wwan: Fix out-of-bounds read
KASAN: null-ptr-deref Write in submit_audio_out_urb (2) C 3423 83d 115d 83d 34501219 ALSA: line6: Fix write on zero-sized buffer
WARNING: proc registration bug in snd_info_card_register C 453 147d 191d 117d 0b074ab7 ALSA: line6: Assure canceling delayed work at disconnection
general protection fault in sisusb_probe C 3 161d 164d 122d 9a5729f6 USB: sisusbvga: fix oops in error path of sisusb_probe
KASAN: slab-out-of-bounds Write in usb_get_bos_descriptor syz 3 150d 163d 122d a03ff544 USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
KASAN: invalid-free in disconnect_rio C 180 146d 191d 122d 3864d339 USB: rio500: refuse more than one device at a time
general protection fault in smsusb_init_device C 23 146d 185d 122d 31e0456d media: usb: siano: Fix general protection fault in smsusb
KASAN: null-ptr-deref Write in submit_audio_out_urb C 185 131d 146d 124d 0b074ab7 ALSA: line6: Assure canceling delayed work at disconnection
INFO: task hung in usb_kill_urb C 1515 186d 191d 128d 50896c41 USB: dummy-hcd: Fix failure to give back unlinked URBs USB: dummy-hcd: Fix failure to give back unlinked URBs
BUG: sleeping function called from invalid context in line6_pcm_acquire 119 146d 165d 128d 7f84ff68 ALSA: line6: toneport: Fix broken usage of timer for delayed execution
general protection fault in __dev_printk C 300 173d 186d 146d ef61eb43 USB: yurex: Fix protection fault after device removal
INFO: trying to register non-static key in vmk80xx_detach C 1528 146d 191d 146d 08b7c2f9 staging: comedi: vmk80xx: Fix use of uninitialized semaphore
INFO: trying to register non-static key in ni6501_detach C 127 146d 189d 146d 660cf4ce staging: comedi: ni_usb6501: Fix use of uninitialized mutex
KASAN: use-after-free Read in snd_info_free_entry C 47 158d 189d 146d 2a3f7221 ALSA: core: Fix card races between register and disconnect 8c2f8708 ALSA: info: Fix racy addition/deletion of nodes
KASAN: slab-out-of-bounds Read in ds_probe C 5 148d 186d 146d c114944d USB: w1 ds2490: Fix bug caused by improper use of altsetting array
KASAN: stack-out-of-bounds Read in string C 46 179d 191d 157d c01c348e USB: core: Fix unterminated string returned by usb_string()
WARNING in usb_submit_urb (4) syz cause 46 159d 347d 157d c2b71462 USB: core: Fix bug caused by duplicate interface PM usage counter