syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 346
Parent subsystem(s): kernel (86)
Child subsystems: usb-storage (0)
open (76):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: use-after-free Read in rtw_load_firmware_cb wireless usb C 24 5h02m 1d14h PATCH [20h33m]
KMSAN: kernel-usb-infoleak in usbtmc_write usb 4 19h16m 1d23h
KMSAN: uninit-value in skb_put net usb 1 6d08h 2d08h
KMSAN: kernel-infoleak in raw_ioctl (2) usb C 1560 now 3d11h 💬 1 [2d15h]
WARNING: ODEBUG bug in netdev_release usb syz 2 5d12h 5d00h
WARNING in kcov_remote_start (5) usb 2843 8m 12d
possible deadlock in dpm_for_each_dev pm usb C error 2 7d21h 19d
KMSAN: uninit-value in rtl8150_get_link_ksettings net usb 1 45d 41d
INFO: task hung in uevent_show usb C done 2840 18m 44d 💬 2 [3d16h]
INFO: rcu detected stall in process_one_work (9) usb C 5 6d11h 53d
INFO: rcu detected stall in __mod_timer (5) usb C error 7 4d17h 54d
WARNING in usb_free_urb media usb C 1 45d 55d 💬 1 [55d]
INFO: rcu detected stall in addrconf_rs_timer (6) lsm usb netfilter syz 339 9h48m 55d
INFO: task hung in kernfs_add_one usb kernfs C error 19 10h45m 60d
INFO: rcu detected stall in schedule (7) usb block C done 40 3d16h 60d
INFO: rcu detected stall in sendmsg (4) net input usb C error 7 10d 64d
INFO: rcu detected stall in schedule_timeout (6) usb C done 26 25d 71d PATCH [30d]
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 C error 262 4h15m 73d
INFO: rcu detected stall in aoecmd_cfg (2) usb block C done 7 37d 79d PATCH [30d]
INFO: rcu detected stall in sys_close (7) fs input usb C error 1 103d 99d
INFO: rcu detected stall in __run_timer_base usb C done 10 36d 104d PATCH [84d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb C error 4 22d 116d 💬 1 [116d]
WARNING: ODEBUG bug in netdev_freemem (3) usb C 90 10d 125d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 103 4d19h 126d
WARNING: ODEBUG bug in usb_unbind_interface (2) usb 21 32d 128d PATCH [117d]
WARNING in usbnet_start_xmit/usb_submit_urb (2) usb C error 6 22h38m 131d
INFO: rcu detected stall in asm_exc_page_fault mm input usb syz 2 4d08h 139d 💬 3 [137d]
WARNING in __input_unregister_device input usb C 4 68d 150d
INFO: rcu detected stall in sys_syslog (2) input usb syz 8 31d 157d
WARNING in wdm_rxwork/usb_submit_urb (2) usb C unreliable 28 17h27m 165d 💬 2 [91d]
WARNING in input_register_device (2) input usb C 5 146d 170d PATCH [164d]
WARNING in input_unregister_device (2) input usb C error done 4 70d 199d 💬 1 [4d02h]
UBSAN: array-index-out-of-bounds in usbhid_parse usb C error 25 9d15h 284d PATCH [52d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial C 156 139d 310d PATCH [294d]
INFO: task hung in __input_unregister_device (5) usb input C done 14 21d 312d 💬 1 [52d]
INFO: task hung in get_bMaxPacketSize0 usb C error 261 33d 340d 💬 1 [77d]
INFO: rcu detected stall in console_callback serial input usb C 1 346d 342d
INFO: task hung in usbdev_release (2) usb C error 77 15d 352d
INFO: rcu detected stall in newfstatat (3) usb C done 69 1d01h 412d 💬 4 [141d]
kernel BUG in cdc_ncm_fill_tx_frame usb syz error 5 20d 420d
kernel BUG in __page_table_check_zero usb C error 204 55m 432d
INFO: rcu detected stall in vfs_readlink fs usb C 1 438d 434d 💬 2 [431d]
WARNING in amradio_set_mute/usb_submit_urb usb C 3 8d02h 442d
INFO: task hung in hub_port_init (3) usb C error 648 6d08h 486d 💬 16 [16d]
INFO: task hung in hub_event (3) usb 279 4d00h 559d 💬 12 [77d]
INFO: task hung in usb_get_descriptor (2) usb C inconclusive 862 36d 583d 💬 14 [172d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb C inconclusive 409 14h28m 599d 💬 5 [16d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 62 15d 664d
INFO: rcu detected stall in watchdog bpf usb C error 4 3d22h 708d
inconsistent lock state in find_vmap_area input usb kernfs C done inconclusive 49 427d 745d
INFO: rcu detected stall in dummy_timer (4) usb C inconclusive 20 43d 749d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media C 3 32d 849d 💬 2 [41d]
INFO: task hung in r871xu_dev_remove usb staging C error 410 23h42m 961d 💬 1 [16d]
WARNING in carl9170_usb_init_device/usb_submit_urb wireless usb C error error 2 135d 999d PATCH [88d]
memory leak in __lookup_slow ext4 usb C 2 697d 1018d
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 C 16 2d13h 1054d
INFO: task hung in pn533_finalize_setup nfc usb C unreliable error 8 481d 1102d PATCH [870d]
WARNING in fw_load_sysfs_fallback usb fs C unreliable inconclusive 241 540d 1210d
KASAN: use-after-free Read in v4l2_fh_open usb media C unreliable inconclusive 3 34d 1257d PATCH [1047d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input C unreliable 324 4d07h 1305d PATCH [1041d]
INFO: task hung in usbdev_open (2) usb C error 747 2h20m 1305d 💬 1 [16d]
memory leak in r8712_init_recv_priv usb staging C 50 415d 1314d PATCH [1162d]
possible deadlock in zd_chip_disable_rxtx usb wireless C 44 23d 1324d
WARNING in corrupted/usb_submit_urb (2) usb C error done 69 90d 1344d 💬 1 [1290d]
KMSAN: uninit-value in dib3000mb_attach (2) usb media C 3568 42d 1373d PATCH [70d]
INFO: rcu detected stall in corrupted (4) usb C done inconclusive 486 4d04h 1421d 💬 7 [16d]
WARNING in carl9170_usb_submit_cmd_urb/usb_submit_urb usb wireless C done error 48 74d 1534d PATCH [88d]
WARNING in media_create_pad_link usb media C done done 101 6d07h 1534d
general protection fault in ir_raw_event_store_with_filter usb media C error 873 4d03h 1598d
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media C 6 1571d 1698d
INFO: rcu detected stall in hub_event usb C done 738 1h33m 1709d 💬 9 [16d]
WARNING in implement input usb C error done 960 45d 1775d 💬 7 [9h23m]
WARNING in smsusb_start_streaming/usb_submit_urb usb media C error inconclusive 90 19d 1801d PATCH [81d]
WARNING in amradio_send_cmd/usb_submit_urb usb C error inconclusive 80 3h41m 1831d 💬 4 [1712d]
WARNING in ar5523_submit_rx_cmd/usb_submit_urb usb wireless C error inconclusive 883 58d 1880d 💬 13 [46d]
KASAN: use-after-free Read in v4l2_fh_init usb media C error inconclusive 309 15h07m 1925d 💬 4 [16d]
moderation (6):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING: ODEBUG bug in get_taint net usb 2 3d03h 18h01m
WARNING: refcount bug in usb_get_dev usb 1 13d 9d18h
KASAN: slab-use-after-free Read in raw_queue_event usb 1 19d 15d
BUG: corrupted list in usb_hcd_link_urb_to_ep (3) usb 1 54d 50d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (9) usb 3 5d10h 52d
KASAN: slab-use-after-free Read in hiddev_disconnect (2) input usb 2 40d 63d