syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 365
Parent subsystem(s): kernel (72)
Child subsystems: usb-storage (1)
open (101):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING in iguanair_get_features/usb_submit_urb media usb C done 3 14h27m 16h46m
KASAN: slab-use-after-free Read in v4l2_release media usb C error 1 5d11h 1d11h
UBSAN: shift-out-of-bounds in s32ton input usb 2 12d 9d15h PATCH [7d20h]
KASAN: slab-use-after-free Read in ld_usb_release usb 1 15d 9d20h 💬 4 [2d15h]
INFO: task hung in uevent_show (2) usb C 2351 12m 11d
KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb (4) usb 1 13d 13d
WARNING: bad unlock balance in elevator_init_mq block usb syz done 1 18d 14d
KASAN: slab-use-after-free Read in sg_release scsi usb syz 1 4d18h 14d PATCH [17h31m]
WARNING: bad unlock balance in sd_revalidate_disk usb scsi syz 2 18d 15d 💬 1 [14d]
WARNING: bad unlock balance in blk_mq_update_tag_set_shared block usb syz 11 17d 15d 💬 1 [15d]
WARNING in io_get_cqe_overflow (2) io-uring usb C done 9 16d 16d 💬 9 [16d]
INFO: rcu detected stall in brk (2) mm input usb syz 1 24d 20d 💬 8 [19d]
INFO: rcu detected stall in __virt_addr_valid fs usb input syz 1 25d 21d
WARNING: ODEBUG bug in __folio_put (2) usb mm syz 10 4d13h 36d
INFO: rcu detected stall in sys_rt_sigprocmask (2) input usb syz 8 22d 37d
INFO: rcu detected stall in vma_link_file mm input usb syz 1 41d 37d 💬 6 [35d]
KASAN: slab-use-after-free Read in usbnet_deferred_kevent net usb 2 15h42m 38d
INFO: task hung in chaoskey_release usb 47 36d 38d
WARNING in thrustmaster_probe/usb_submit_urb usb C 8 1d14h 39d PATCH [7d09h]
INFO: rcu detected stall in do_syscall_64 input usb syz 19 13d 39d
INFO: task hung in usblp_open usb 32 36d 40d
WARNING: ODEBUG bug in corrupted (3) usb syz 1 27d 40d PATCH [39d]
INFO: rcu detected stall in statfs (3) usb kernfs input syz 1 48d 44d
INFO: rcu detected stall in kswapd (3) mm fs usb C 2 34d 45d
INFO: rcu detected stall in __fsnotify_parent usb input fs C 7 20d 48d
INFO: rcu detected stall in sys_utimensat (3) usb C 9 30d 50d 💬 1 [49d]
INFO: task hung in usblp_disconnect usb syz 4 43d 50d
INFO: rcu detected stall in sys_pselect6 (2) input usb ext4 C 54 5d01h 50d
INFO: rcu detected stall in kernfs_fop_read_iter (4) usb syz 12 20d 53d
INFO: task hung in usb_register_dev (2) usb syz inconclusive 108 31d 54d 💬 2 [44d]
KASAN: slab-use-after-free Read in hiddev_disconnect (3) input usb 1 61d 54d 💬 1 [49d]
INFO: task hung in yurex_write usb 50 54d 59d
INFO: task hung in adu_disconnect usb 215 30d 65d
KMSAN: kernel-infoleak in iowarrior_read usb C 4 66d 70d PATCH [69d]
INFO: task hung in adu_release usb syz inconclusive 6 33d 70d
INFO: task hung in usb_deregister_dev (2) usb C 36 11d 72d
INFO: rcu detected stall in x64_sys_call input usb mm syz 136 2h03m 72d
WARNING in rtl8150_open/usb_submit_urb usb C 4 68d 79d 💬 1 [75d]
KMSAN: kernel-infoleak in wdm_read usb 1 96d 92d PATCH [7d00h]
KASAN: invalid-free in dev_free usb C 1249 15d 96d PATCH [14d]
WARNING: ODEBUG bug in get_taint usb C 25 3d11h 98d
KMSAN: uninit-value in bcmp (3) usb C 35 2d10h 101d 💬 1 [45d]
WARNING in r8712_usb_write_mem/usb_submit_urb (2) usb staging C 6 29d 110d 💬 3 [109d]
KMSAN: kernel-usb-infoleak in usbtmc_generic_write usb C 16 58d 110d PATCH [47d]
WARNING in ath6kl_bmi_get_target_info (2) usb wireless C error 4002 37m 112d PATCH [86d]
KASAN: slab-use-after-free Read in hdm_disconnect usb C 9432 43m 114d PATCH [114d]
WARNING in smsusb_init_device/usb_submit_urb usb media C 118 7d02h 115d PATCH [93d]
WARNING: ODEBUG bug in netdev_release usb syz 2 122d 121d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 C error 13 8d22h 124d 💬 1 [124d]
possible deadlock in dpm_for_each_dev pm usb C error 2 30d 136d
possible deadlock in assign_fw usb C done 17 22h45m 136d
INFO: rcu detected stall in process_one_work (9) usb C 13 20d 170d
WARNING in usb_free_urb usb media C inconclusive 282 14h23m 172d 💬 1 [2d19h]
INFO: rcu detected stall in addrconf_rs_timer (6) usb syz error 392 5d05h 172d
INFO: task hung in kernfs_add_one usb kernfs C error 54 7d21h 177d
INFO: rcu detected stall in schedule (7) usb block C done 46 23d 177d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 C error 1584 now 190d
WARNING in bcm5974_start_traffic/usb_submit_urb (2) input usb C unreliable 4 7d23h 220d 💬 1 [79d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb C error 6 1d22h 233d 💬 1 [233d]
WARNING: ODEBUG bug in netdev_freemem (3) usb C 90 127d 242d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 145 4d08h 243d
WARNING: ODEBUG bug in usb_unbind_interface (2) usb 30 14h32m 245d PATCH [234d]
WARNING in usbnet_start_xmit/usb_submit_urb (2) usb C error 8 8d03h 248d
WARNING in wdm_rxwork/usb_submit_urb (2) usb C unreliable 86 8d09h 282d 💬 2 [208d]
WARNING in input_register_device (2) input usb C 5 263d 287d PATCH [281d]
UBSAN: array-index-out-of-bounds in usbhid_parse usb C error 40 4d01h 401d PATCH [169d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial C 159 9h31m 427d PATCH [411d]
INFO: task hung in __input_unregister_device (5) usb input C done error 17 42d 429d 💬 1 [48d]
INFO: task hung in get_bMaxPacketSize0 usb C error 270 2d00h 457d 💬 1 [194d]
INFO: task hung in usbdev_release (2) usb C error 88 24d 469d
INFO: rcu detected stall in newfstatat (3) usb C done 195 6h21m 529d 💬 4 [258d]
kernel BUG in cdc_ncm_fill_tx_frame usb syz error error 5 23d 537d
INFO: rcu detected stall in vfs_readlink fs usb C 2 30d 551d 💬 2 [548d]
WARNING in amradio_set_mute/usb_submit_urb usb C 3 68d 559d
INFO: task hung in hub_port_init (3) usb C error 661 3d21h 603d 💬 16 [36d]
WARNING in usb_tx_block/usb_submit_urb usb libertas C 493 6d02h 644d 💬 3 [643d]
INFO: task hung in hub_event (3) usb 342 4d21h 676d 💬 12 [194d]
INFO: task hung in usb_get_descriptor (2) usb C inconclusive 862 9d18h 700d 💬 14 [5d15h]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb C inconclusive 581 54m 716d 💬 5 [99d]
INFO: rcu detected stall in kernfs_fop_release kernfs usb C error 5 30d 781d 💬 1 [781d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 82 1d13h 781d
INFO: rcu detected stall in watchdog bpf usb C error 7 15d 825d
INFO: rcu detected stall in dummy_timer (4) usb C inconclusive 21 14d 866d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media C 1335 5h16m 966d 💬 2 [2d19h]
INFO: task hung in r871xu_dev_remove usb staging C error 553 15h00m 1078d 💬 1 [132d]
memory leak in __lookup_slow ext4 usb C 2 814d 1134d
WARNING in pvr2_send_request_ex/usb_submit_urb pvrusb2 usb C 16 27d 1171d
INFO: task hung in pn533_finalize_setup nfc usb C unreliable error 8 597d 1219d PATCH [987d]
KASAN: use-after-free Read in v4l2_fh_open usb media C unreliable inconclusive 457 2h50m 1374d PATCH [1164d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input C unreliable 574 17m 1422d PATCH [1158d]
INFO: task hung in usbdev_open (2) usb C error 982 8h40m 1422d 💬 1 [5d15h]
memory leak in r8712_init_recv_priv usb staging C 50 532d 1431d PATCH [1279d]
possible deadlock in zd_chip_disable_rxtx usb wireless C 44 13d 1441d
WARNING in corrupted/usb_submit_urb (2) usb C error done 69 207d 1461d 💬 1 [1407d]
KMSAN: uninit-value in dib3000mb_attach (2) usb media C 4540 5h50m 1489d PATCH [86d]
general protection fault in ir_raw_event_store_with_filter usb media C error 879 3d15h 1715d
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media C 6 1688d 1815d
INFO: rcu detected stall in hub_event usb C done 1204 4d18h 1826d 💬 9 [5d15h]
WARNING in smsusb_start_streaming/usb_submit_urb usb media C error inconclusive 103 11d 1918d PATCH [198d]
WARNING in amradio_send_cmd/usb_submit_urb usb C error inconclusive 92 27m 1948d 💬 4 [1829d]
KASAN: use-after-free Read in v4l2_fh_init usb media C error inconclusive 1126 now 2042d 💬 4 [5d15h]
moderation (6):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_del usb 1 6h42m 6h42m
KCSAN: data-race in mon_reader_add / usb_hcd_submit_urb (2) usb 2 5h48m 5d15h
BUG: workqueue leaked atomic, lock or RCU: syz.NUM.NUM[NUM] usb 1 9d19h 5d19h
BUG: corrupted list in usb_hcd_link_urb_to_ep (4) usb 2 15d 19d
general protection fault in dummy_timer (2) usb 4 37d 68d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (10) usb 3 29d 74d