syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 424
Parent subsystem(s): kernel (94)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in hidraw_report_event input usb 19 C error 4 9d17h 10d PATCH [9d09h]
KASAN: stack-out-of-bounds Write in carl9170_handle_command_response wireless usb prio:high 21 C 15 13h50m 13d PATCH [6d02h]
KASAN: slab-use-after-free Read in hiddev_disconnect (4) actionable input usb 19 1 40d 36d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed usb media -1 C error 91 9d13h 42d PATCH [41d]
WARNING in as102_dvb_dmx_start_feed usb media -1 C error 1138 1d00h 42d 💬 1 [5d00h]
KASAN: invalid-free in dev_free (3) usb 24 1 46d 42d PATCH [42d]
KMSAN: uninit-value in rtl8150_open (2) net usb 7 1 47d 43d PATCH [13d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer usb media 17 C error 9 10d 44d PATCH [4d08h]
KASAN: slab-use-after-free Read in v4l2_open usb media 19 C error 463 1h10m 49d PATCH [48d]
WARNING in igorplugusb_probe/usb_submit_urb usb media -1 C error 1901 3h36m 49d PATCH [2d20h]
memory leak in dvb_register_device media usb 3 C 1 66d 80d PATCH [79d]
KASAN: slab-use-after-free Read in event_handler usb 19 6 14d 107d
memory leak in ldisc_receive net usb 3 C 2 29d 109d PATCH [102d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error error 8 11d 115d 💬 10 [113d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 41d 122d 💬 1 [41d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 4 33d 123d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 6 1d04h 136d
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 12 17d 153d PATCH [14d]
WARNING in cm109_urb_irq_callback usb input -1 C 46 144d 157d
WARNING in usb_start_wait_urb usb -1 C error 79 144d 157d PATCH [136d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error error 9 7d05h 188d 💬 1 [122d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 559 20h35m 206d PATCH [169d]
general protection fault in count_matching_names (2) usb 2 syz 5 8d04h 208d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 259 11h36m 212d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 1828 31m 214d
WARNING in dev_shutdown (7) usb net -1 syz error error 24 7d13h 230d
general protection fault in su3000_i2c_transfer usb media 2 C done 247 1d08h 258d PATCH [69d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 492 11h26m 259d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 5 27d 264d PATCH [1d17h]
INFO: task hung in dvb_usbv2_exit usb 1 C error 85 2d06h 269d
INFO: task hung in console_callback (6) input usb 1 C error error 17 22d 295d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 136 2d02h 321d
INFO: task hung in dvb_usbv2_probe usb 1 C error 364 1d16h 341d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 85 13h08m 348d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 548 1d00h 350d PATCH [163d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 290 5d06h 368d PATCH [358d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 1016 4d04h 369d PATCH [366d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 239 1h02m 377d PATCH [332d]
BUG: corrupted list in az6007_i2c_xfer usb media 15 C error 12 12d 381d PATCH [171d]
INFO: task hung in usbnet_disconnect (3) net usb 1 84 70d 389d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 135d 403d PATCH [205d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 670 16h01m 408d PATCH [332d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 300d 434d
general protection fault in status_show usb 2 C 14 9d19h 475d PATCH [323d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 31 24d 494d
general protection fault in dummy_timer (2) usb 2 syz 80 6h04m 529d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 280d 568d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 227d 572d
possible deadlock in input_inject_event usb fs 4 C done 3392 6h57m 586d PATCH [201d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 15 11d 594d 💬 3 [35d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 209 2d18h 600d PATCH [180d]
WARNING in enable_work usb pm -1 C error 1810 17d 624d 💬 2 [16d]
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 110d 647d PATCH [625d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 22 74d 656d 💬 1 [656d]
possible deadlock in assign_fw usb 4 C done error 182 8d18h 668d
WARNING in usb_free_urb usb media -1 C inconclusive 7123 10h29m 704d PATCH [7d02h]
INFO: rcu detected stall in schedule (7) usb 1 C done error 66 32d 709d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 603 10h55m 729d 💬 3 [7d16h]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 158 3h53m 770d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 339 6d17h 775d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 114 17d 814d 💬 2 [741d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 120d 959d PATCH [944d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 21 57d 962d 💬 1 [78d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 393 4d17h 989d 💬 1 [727d]
INFO: rcu detected stall in console_callback usb input serial 1 C error error 18 108d 991d
INFO: task hung in usbdev_release (2) usb 1 C error error 118 15d 1001d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 591 1d01h 1062d 💬 4 [791d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 108d 1069d
INFO: task hung in hub_port_init (3) usb 1 C error 1006 3d19h 1136d 💬 16 [5d00h]
INFO: task hung in hub_event (3) usb 1 858 12d 1208d 💬 12 [727d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 410d 1232d 💬 14 [537d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 111d 1248d 💬 5 [192d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 177 2h51m 1313d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1437 5d04h 1498d 💬 3 [5d00h]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C error 35 15d 1703d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1130d 1751d PATCH [1519d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 4066 21d 1906d PATCH [1696d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3618 9h19m 1954d PATCH [1690d]
INFO: task hung in usbdev_open (2) usb 1 C error 2989 3h03m 1955d 💬 1 [5d00h]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 29d 1973d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 740d 1993d 💬 1 [1939d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 262d 2451d PATCH [730d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in mon_text_release usb 10 2 5d19h 27d
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 2 82d 116d