syzbot


Out of 123 bugs, 110 were automatically obsoleted (34 due to revoked reproducers), 13 were invalidated by users.
Applied filters: Label=subsystems:media (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
KASAN: slab-use-after-free Read in v4l2_ioctl (2) media 19 1 113d 112d
KASAN: slab-out-of-bounds Read in __vb2_queue_cancel media 17 1 125d 121d
memory leak in get_sg_table dri media 3 C 1 136d 849d
KASAN: slab-use-after-free Read in vb2_fop_release media 19 2 137d 181d
WARNING in dtv5100_i2c_msg media -1 4 152d 188d
INFO: task hung in vivid_fop_release (3) media 1 1 118d 118d
INFO: rcu detected stall in v4l2_ioctl (4) media 1 1 118d 118d
WARNING: refcount bug in dvb_device_open (2) media 13 1 180d 176d
INFO: rcu detected stall in dvb_usb_read_remote_control (3) mm media 1 5 209d 355d
WARNING in az6007_i2c_xfer media -1 5 229d 335d
INFO: rcu detected stall in v4l2_release (3) media 1 1 233d 233d
KASAN: slab-use-after-free Read in _vb2_fop_release media 19 1 235d 231d
KASAN: slab-use-after-free Read in vb2_core_queue_release media 19 1 249d 245d
KASAN: slab-use-after-free Read in dvb_frontend_release (2) media 19 3 249d 245d
KASAN: use-after-free Read in em28xx_v4l2_open media 19 5 295d 474d
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media -1 C 6 2213d 2340d
WARNING in dib0700_rc_setup/usb_submit_urb media -1 C 19 330d 398d
KASAN: slab-use-after-free Read in v4l2_ioctl media 19 1 358d 354d
WARNING: refcount bug in dvb_device_open media 13 1 382d 378d
KASAN: slab-use-after-free Read in dvb_frontend_release media 19 2 373d 382d
KASAN: slab-use-after-free Read in v4l2_release media usb 19 C error inconclusive 1 463d 526d
INFO: task hung in em28xx_usb_disconnect (2) media 1 5 414d 617d
INFO: rcu detected stall in legacy_dvb_usb_read_remote_control (2) media 1 4 426d 493d
KASAN: slab-use-after-free Read in lookup_object_or_alloc (2) mm media 19 syz error unreliable 8 437d 518d
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] usb media -1 5 470d 555d
WARNING in uvc_unregister_video media -1 2 470d 495d
KASAN: slab-use-after-free Read in send_packet media 19 1 474d 462d
INFO: rcu detected stall in dvb_usb_read_remote_control (2) media 1 251 458d 632d
WARNING in iguanair_get_features/usb_submit_urb media -1 C done done 12 468d 525d
general protection fault in em28xx_resolution_set media 2 2 501d 531d
INFO: rcu detected stall in v4l2_release media mm 1 3 520d 580d
INFO: task hung in vivid_fop_release (2) media 1 1 531d 531d
KASAN: slab-use-after-free Write in as102_release media 22 9 551d 555d
KASAN: slab-use-after-free Read in __video_register_device media 19 2 554d 562d
KASAN: slab-use-after-free Read in load_firmware_cb media 19 4 581d 636d
KASAN: use-after-free Read in send_packet media 19 C 57 744d 1367d
inconsistent lock state in sync_timeline_debug_remove dri media 4 C inconclusive inconclusive 335 693d 1535d
inconsistent lock state in sync_info_debugfs_show dri media 4 C done unreliable 277 695d 1553d
possible deadlock in v4l2_ctrl_handler_log_status media 4 C done done 13428 694d 811d
general protection fault in udmabuf_create (2) dri media 2 C error 12 683d 701d
INFO: task hung in cec_claim_log_addrs media 1 C inconclusive done 6 751d 798d
INFO: rcu detected stall in vivid_thread_vid_cap media 1 1 718d 718d
possible deadlock in vb2_video_unregister_device media usb 4 C done done 3 786d 812d
INFO: task hung in vb2_video_unregister_device usb media 1 C 1 795d 791d
WARNING in cec_data_cancel media -1 1 802d 798d
WARNING in unsafe_follow_pfn media io-uring -1 C done 33 1808d 1856d
KASAN: slab-use-after-free Read in ir_raw_event_store media 19 5 940d 940d
INFO: rcu detected stall in legacy_dvb_usb_read_remote_control media 1 3 946d 965d
WARNING in get_vaddr_frames media -1 C done done 1596 947d 1241d
KASAN: use-after-free Read in load_firmware_cb usb media 19 C 12 1337d 2253d
WARNING in smsusb_start_streaming usb media -1 C done done 4 1027d 1027d
INFO: rcu detected stall in chrdev_open (4) media 1 1 1024d 1024d
WARNING in smsusb_term_device usb media -1 C done 983 1012d 1162d
INFO: rcu detected stall in dvb_usb_read_remote_control media 1 1 1075d 1075d
KASAN: slab-out-of-bounds Read in v4l2_compat_put_array_args (2) media 17 1 1110d 1106d
WARNING: ODEBUG bug in smsusb_term_device usb media -1 C unreliable inconclusive 35 1172d 2472d
BUG: unable to handle kernel paging request in tpg_fill_plane_buffer (2) media 8 1 1115d 1111d
KASAN: use-after-free Read in v4l2_release (3) usb media 19 C error error 34 1746d 2302d
KASAN: use-after-free Read in v4l2_ioctl (2) media usb 19 C error 1 1773d 1769d
inconsistent lock state in mark_held_locks dri media 4 2 1261d 1258d
inconsistent lock state in trace_hardirqs_on media dri 4 1 1269d 1265d
KASAN: use-after-free Read in dvb_devnode media 19 1 1304d 1300d
KASAN: use-after-free Read in dvb_usb_device_exit (2) usb media 19 C error unreliable 2393 1820d 2458d
KASAN: null-ptr-deref Write in video_usercopy media 12 C done 2 2302d 2303d
BUG: unable to handle kernel paging request in tpg_fill_plane_buffer media ntfs3 8 syz done 17 2340d 2710d
INFO: task hung in em28xx_usb_disconnect media 1 1 1334d 1334d
upstream boot error: BUG: unable to handle kernel paging request in media_entity_pads_init media -1 12 1351d 1352d
KASAN: use-after-free Read in em28xx_close_extension usb media 19 C done done 20 1548d 1750d
general protection fault in dma_buf_release dri media 2 C done 81 2045d 2120d
KMSAN: uninit-value in gp8psk_power_ctrl usb media 7 C 191 1911d 2445d
KMSAN: kernel-infoleak in video_usercopy (2) media 9 C 922 2055d 2260d
KMSAN: uninit-value in tda8083_attach media usb 7 C 8 2077d 2087d
KMSAN: uninit-value in friio_power_ctrl usb media 7 C 38 2374d 2485d
KMSAN: uninit-value in cxusb_rc_query usb media 7 C 86 2381d 2400d
WARNING in vb2_core_reqbufs media -1 C done 219 2493d 2737d
possible deadlock in v4l2_release media 4 C done unreliable 181 2681d 2720d
general protection fault in __media_entity_remove_link media 8 5 1472d 1534d
BUG: unable to handle kernel paging request in media_gobj_destroy media 8 2 1470d 1515d
general protection fault in dvb_create_media_graph media 2 1 1565d 1561d
WARNING in dvb_media_device_free media -1 4 1568d 1600d
INFO: task hung in imon_probe (3) media 1 1 1538d 1538d
WARNING in vivid_cap_update_frame_period media -1 1 1627d 1623d
BUG: unable to handle kernel paging request in dvb_media_device_free media 8 1 1599d 1595d
INFO: task hung in imon_probe (2) media 1 1 1581d 1581d
KASAN: slab-out-of-bounds Read in v4l2_compat_put_array_args media 17 1 1685d 1681d
INFO: task hung in imon_disconnect media 1 1 1674d 1674d
INFO: task hung in imon_probe media 1 3 1676d 1677d
KMSAN: uninit-value in __vb2_perform_fileio media 7 C 21 2512d 2734d
KASAN: null-ptr-deref Read in ida_free media 11 1 1966d 1966d
KASAN: out-of-bounds Read in v4l2_fh_init media 17 1 2026d 2025d
INFO: task hung in mxl5007t_attach media 1 1 2030d 2030d
KASAN: slab-out-of-bounds Read in mxl5007t_attach media 17 1 2079d 2079d
BUG: corrupted list in media_gobj_destroy media 8 1 2084d 2084d
INFO: task hung in dvb_ca_en50221_release (2) media 1 1 2085d 2085d
INFO: task hung in _vb2_fop_release (2) media 1 1 2101d 2101d
KCSAN: data-race in vidioc_s_fmt / vim2m_queue_setup media 6 1 2062d 2062d
KASAN: use-after-free Read in em28xx_release_resources media 19 1 2171d 2171d
INFO: task hung in mxl5007t_release media 1 1 2146d 2146d
KASAN: use-after-free Write in as102_release media 22 9 2259d 2340d
KASAN: use-after-free Read in uvc_probe media usb 19 C 2 2289d 2298d
general protection fault in vidioc_querycap usb media 2 C 84 2354d 2486d
KASAN: slab-out-of-bounds Read in mceusb_dev_recv usb media 17 C 245 2395d 2452d
possible deadlock in media_devnode_release media usb 4 C done 3 2166d 2167d
INFO: task hung in vivid_fop_release media 1 1 2246d 2246d
WARNING: ODEBUG bug in corrupted usb media -1 C 3 2329d 2364d
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer media 21 1 2293d 2292d
INFO: task hung in dvb_ca_en50221_release media 1 15 2278d 2348d
KASAN: use-after-free Read in usbvision_v4l2_open media 19 1 2333d 2332d
KASAN: use-after-free Read in as102_release media 19 1 2377d 2375d
KMSAN: uninit-value in bsearch media 7 1 2396d 2394d
KCSAN: data-race in __cec_s_phys_addr / cec_thread_func media 6 1 2350d 2350d
KMSAN: use-after-free in usbvision_v4l2_open media 18 1 2389d 2389d
KMSAN: uninit-value in vb2_mmap media 7 C 4 2668d 2734d
KMSAN: uninit-value in worker_thread (2) usb media 7 C 1 2441d 2441d
WARNING in __flush_work (4) media usb -1 C 1 2457d 2456d
divide error in vivid_thread_vid_cap media 2 1 2642d 2641d
KMSAN: uninit-value in rb_erase (2) media 7 1 2653d 2653d
INFO: task hung in _vb2_fop_release media 1 2 2665d 2703d
KMSAN: uninit-value in dib3000mb_attach usb media 7 C 3 2501d 2501d
INFO: task hung in v4l2_release media 1 2 2696d 2730d
possible deadlock in v4l2_m2m_fop_poll media 4 3 2701d 2728d
KASAN: null-ptr-deref Read in read_word_at_a_time media usb 11 C 4 2567d 2568d
KASAN: slab-out-of-bounds Read in string (3) usb media 17 syz 3 2555d 2555d