syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 414
Parent subsystem(s): kernel (80)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
INFO: task hung in usb_bulk_msg (2) usb 1 C 4 3h50m 9h19m 💬 4 [now]
memory leak in prepare_creds (6) lsm input usb 3 C 1 3d17h 15d
KASAN: slab-use-after-free Read in event_handler usb 19 5 19d 19d
memory leak in ldisc_receive net usb input 3 C 1 11d 21d PATCH [14d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error 8 7d22h 27d 💬 10 [25d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 23d 34d 💬 1 [20d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 35d 35d
INFO: task hung in hci_register_dev (2) usb 1 syz error error 1 44d 43d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 3 24d 48d
BUG: soft lockup in dummy_timer usb 1 306 2h21m 59d
WARNING in __alloc_workqueue usb wireless -1 C 2111 20d 59d 💬 1 [10d]
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 6 2h40m 65d
WARNING in cm109_urb_irq_callback usb input -1 C 46 56d 69d
WARNING in usb_start_wait_urb usb -1 C error 79 56d 69d PATCH [48d]
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 78d 83d 💬 19 [76d]
memory leak in dualshock4_get_calibration_data input usb 3 C 1 87d 87d PATCH [72d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error 4 21d 101d 💬 1 [34d]
general protection fault in usb_gadget_udc_reset (4) usb 2 10 1d17h 106d
INFO: task hung in rpm_resume (2) usb pm 1 C 17 6d22h 117d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 406 5h05m 118d PATCH [81d]
general protection fault in count_matching_names (2) usb 2 syz 4 33d 120d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 134 1d09h 124d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start bluetooth usb 17 900 17h26m 126d
WARNING in dev_shutdown (7) usb net -1 syz error 22 20d 142d
general protection fault in su3000_i2c_transfer usb media 2 C done 194 1d03h 170d PATCH [60d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 387 3h05m 171d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 9d20h 176d 💬 6 [175d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 55 4d10h 181d
INFO: task hung in console_callback (6) input usb 1 C error error 13 30d 207d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 105 2d05h 233d
INFO: task hung in dvb_usbv2_probe usb 1 C error 306 1d04h 253d
KASAN: slab-use-after-free Read in report_descriptor_read usb input 19 56 14d 260d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 396 21h34m 262d PATCH [75d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 210 2d23h 280d PATCH [270d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 874 21h01m 281d PATCH [278d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 112 6h00m 289d PATCH [244d]
BUG: corrupted list in az6007_i2c_xfer usb media 15 C error 8 1d08h 293d PATCH [83d]
INFO: task hung in usbnet_disconnect (3) net usb 1 83 24d 301d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 47d 315d PATCH [117d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 420 4d03h 320d PATCH [244d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 212d 346d
general protection fault in status_show usb 2 C 14 5d23h 387d PATCH [235d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 29 5d15h 406d
general protection fault in dummy_timer (2) usb 2 syz 65 14d 441d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 192d 481d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 139d 484d
possible deadlock in input_inject_event usb fs 4 C done 2305 21h09m 499d PATCH [114d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 11 11d 507d 💬 3 [10d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 115 10d 513d PATCH [92d]
WARNING in enable_work usb pm -1 C error 1313 1d02h 536d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 22d 559d PATCH [537d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 21 66d 568d 💬 1 [568d]
possible deadlock in assign_fw usb 4 C done error 170 33d 581d
WARNING in usb_free_urb usb media -1 C inconclusive 4714 46m 616d PATCH [244d]
INFO: rcu detected stall in schedule (7) usb 1 C done error 60 33d 622d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2164 2d10h 634d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 574 19d 641d 💬 3 [13d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 22 C error 27 3d11h 677d 💬 1 [677d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 113 14d 683d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 310 9d04h 687d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 101 7d08h 726d 💬 2 [653d]
KASAN: stack-out-of-bounds Read in sched_show_task usb input serial 17 C 166 32d 871d PATCH [856d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 19 35d 874d 💬 1 [20d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 382 5h18m 901d 💬 1 [639d]
INFO: rcu detected stall in console_callback usb input serial 1 C error 18 20d 903d
INFO: task hung in usbdev_release (2) usb 1 C error error 110 13d 914d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 505 7h35m 974d 💬 4 [703d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 20d 981d
INFO: task hung in hub_port_init (3) usb 1 C error 985 23h37m 1048d 💬 16 [73d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 1343 44m 1089d 💬 3 [104d]
INFO: task hung in hub_event (3) usb 1 826 7h25m 1120d 💬 12 [639d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 322d 1144d 💬 14 [450d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 23d 1160d 💬 5 [104d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 158 1d17h 1226d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1417 5d10h 1410d 💬 3 [10d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 33 3d08h 1615d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1042d 1663d PATCH [1431d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3468 4h09m 1819d PATCH [1609d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3426 2h23m 1866d PATCH [1602d]
INFO: task hung in usbdev_open (2) usb 1 C error 2319 3h58m 1867d 💬 1 [10d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 12d 1886d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 652d 1906d 💬 1 [1851d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 174d 2363d PATCH [642d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 7156 4h30m 2487d 💬 4 [10d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in usbtmc_read_bulk_cb usb 19 1 18d 14d
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 1 32d 28d
general protection fault in set_link_state usb 2 1 45d 41d
BUG: unable to handle kernel NULL pointer dereference in mon_text_release usb 10 1 49d 45d
general protection fault in vhci_send_cmd_submit usb 2 2 11d 52d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (14) usb 6 3 29d 54d
KASAN: slab-use-after-free Read in usb_unanchor_urb usb 19 1 75d 71d