syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 400
Parent subsystem(s): kernel (85)
Child subsystems: usb-storage (1)
open (80):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 1 9d15h 3d13h
INFO: rcu detected stall in sys_symlink (6) lsm input usb 1 C error 1 7d11h 6d07h
general protection fault in usb_gadget_udc_reset (4) usb 2 5 8d21h 8d21h
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 105 6h13m 21d 💬 4 [2d19h]
general protection fault in count_matching_names (2) usb 2 syz 4 21h36m 23d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 36 13h16m 27d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start bluetooth usb 17 185 6h38m 29d
general protection fault in rtlock_slowlock_locked usb block 19 21 19h12m 31d
WARNING: ODEBUG bug in trace_suspend_resume net usb -1 7 5d00h 55d
KMSAN: uninit-value in rtl8150_open net usb 7 3 53d 67d PATCH [67d]
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C error 2 23d 70d PATCH [19d]
general protection fault in su3000_i2c_transfer usb media 2 C done 93 2h54m 73d PATCH [73d]
INFO: rcu detected stall in hub_event (2) usb kernfs 1 C error 44 3d13h 74d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 64d 79d 💬 6 [77d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 42 1d07h 84d
WARNING: refcount bug in trace_suspend_resume usb 13 C 44 17d 90d
BUG: sleeping function called from invalid context in kcov_remote_start usb 5 1 95d 91d
INFO: task hung in console_callback (6) input usb 1 C error 12 1d06h 110d
KASAN: slab-use-after-free Read in btusb_disconnect usb bluetooth 19 C 5 35d 121d 💬 1 [121d]
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 35 7d01h 136d
WARNING: refcount bug in hdm_disconnect usb 13 C 13 98d 141d PATCH [139d]
INFO: task hung in dvb_usbv2_probe usb 1 C error 177 12h46m 155d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 34 7d12h 162d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 206 13h18m 164d 💬 2 [158d]
WARNING: ODEBUG bug in usb_unbind_interface (3) usb -1 5 63d 181d
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 134 7h06m 183d PATCH [173d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 14 5d08h 192d PATCH [146d]
INFO: task hung in usbnet_disconnect (3) net usb 1 78 5d06h 204d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 4 23d 217d PATCH [19d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 206 20h25m 223d PATCH [146d]
WARNING in media_create_pad_link (2) usb media -1 C error 11 25d 228d PATCH [205d]
WARNING in hanwang_open/usb_submit_urb usb input -1 C error done 6 84d 234d PATCH [231d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 115d 249d
general protection fault in status_show usb 2 C 8 51d 289d PATCH [137d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 23 5d00h 308d
general protection fault in dummy_timer (2) usb 2 syz 50 5d06h 343d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 95d 383d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 42d 386d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 55 22d 397d
possible deadlock in input_inject_event usb fs 4 C done 1695 3h26m 401d PATCH [16d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 10 21d 409d 💬 2 [37d]
INFO: task hung in usb_deregister_dev (2) usb 1 C 36 358d 419d
WARNING in enable_work input usb pm -1 C error 1012 14h05m 438d
WARNING: ODEBUG bug in get_taint usb -1 C 26 343d 444d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 21d 462d PATCH [440d]
WARNING: ODEBUG bug in netdev_release usb -1 syz 12 97d 468d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 20 10d 471d 💬 1 [470d]
possible deadlock in assign_fw usb 4 C done 167 1h31m 483d
WARNING in usb_free_urb usb media -1 C inconclusive 3492 1h13m 519d PATCH [146d]
INFO: rcu detected stall in schedule (7) usb 1 C done 57 18d 524d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 502 22h08m 543d 💬 3 [9d09h]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 22 10d 580d 💬 1 [580d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 101 2d22h 585d
WARNING: ODEBUG bug in netdev_freemem (3) usb -1 C 90 474d 589d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 276 4d08h 590d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 98 5d11h 629d 💬 2 [555d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 5d01h 774d PATCH [758d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 18 49d 776d 💬 1 [48d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 367 5d22h 804d 💬 1 [541d]
INFO: rcu detected stall in console_callback input usb serial 1 C error 18 15d 806d
INFO: task hung in usbdev_release (2) usb 1 C error error 103 7h54m 816d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 441 2h34m 876d 💬 4 [605d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 63d 884d
INFO: task hung in hub_port_init (3) usb 1 C error 815 1d16h 950d 💬 16 [6d22h]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 544 3d08h 991d 💬 3 [6d22h]
INFO: task hung in hub_event (3) usb 1 530 5h21m 1023d 💬 12 [541d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 225d 1046d 💬 14 [352d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 21d 1063d 💬 5 [6d22h]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 126 10d 1128d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1407 4d04h 1313d 💬 3 [6d22h]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 28 5d02h 1518d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 944d 1566d PATCH [1334d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 2851 4h58m 1721d PATCH [1511d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3059 7h07m 1769d PATCH [1505d]
INFO: task hung in usbdev_open (2) usb 1 C error 1612 3h50m 1769d 💬 1 [6d22h]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 5d15h 1788d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 554d 1808d 💬 1 [1754d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 77d 2265d PATCH [545d]
WARNING in amradio_send_cmd/usb_submit_urb usb -1 C error inconclusive 138 98d 2295d 💬 4 [2176d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 6091 now 2389d 💬 4 [6d22h]
moderation (4):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in event_handler usb 19 2 12d 31d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (13) usb 6 1 40d 40d
BUG: workqueue leaked atomic, lock or RCU: syz.NUM.NUM[NUM] (2) usb lsm -1 3 19d 146d
KCSAN: data-race in data_push_tail / vsnprintf (9) usb 6 133 11h31m 254d