syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 376
Parent subsystem(s): kernel (89)
Child subsystems: usb-storage (1)
open (91):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
INFO: task hung in dvb_usb_i2c_exit usb C error 7 18h19m 12h19m
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return usb net 1 4d21h 21h29m
WARNING in gl861_ctrl_msg/usb_submit_urb usb C error 6 13d 9d12h 💬 1 [7d20h]
UBSAN: shift-out-of-bounds in wacom_parse_and_register input usb 1 19d 15d
INFO: task hung in usbnet_disconnect (3) usb net 32 16h03m 21d
UBSAN: shift-out-of-bounds in __kfifo_alloc input usb C 20274 5m 34d PATCH [9d23h]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media C 2 36d 35d
WARNING in dib0700_rc_setup/usb_submit_urb usb media C 15 2d01h 37d
KASAN: slab-out-of-bounds Read in ucan_probe usb can C 2 39d 38d PATCH [38d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb C error 5 29d 40d PATCH [35d]
BUG: soft lockup in hci_cmd_timeout (2) bluetooth usb syz 1 49d 45d
WARNING in media_create_pad_link (2) usb media C error 5 11d 46d PATCH [23d]
WARNING in hanwang_open/usb_submit_urb input usb C 4 32d 51d PATCH [48d]
INFO: rcu detected stall in call_timer_fn (5) usb net input C 3 5h30m 66d
KASAN: slab-use-after-free Write in steam_input_register input usb C 6 56d 70d
BUG: corrupted list in usb_hcd_link_urb_to_ep (4) usb syz 5 59d 73d 💬 1 [17d]
KMSAN: uninit-value in mii_nway_restart (2) usb C 140 1d15h 75d PATCH [3d15h]
KASAN: use-after-free Read in hid_hw_raw_request input usb 6 79d 80d
KASAN: slab-use-after-free Read in usbhid_raw_request usb C 6 81d 87d PATCH [87d]
general protection fault in count_matching_names usb syz 5 22d 92d
WARNING: ODEBUG bug in release_nodes input usb C 667 57d 98d
general protection fault in status_show usb C 5 13d 107d PATCH [101d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage syz 6 7d17h 126d
INFO: task hung in do_syscall_64 (3) usb syz error 5 34d 132d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb C 340 1d01h 148d
general protection fault in dummy_timer (2) usb syz 19 6d20h 161d
KASAN: slab-use-after-free Read in v4l2_release media usb C error inconclusive 1 102d 165d PATCH [72d]
UBSAN: shift-out-of-bounds in s32ton input usb 18 69d 173d PATCH [171d]
WARNING: bad unlock balance in elevator_init_mq block usb syz done 1 182d 178d
WARNING: bad unlock balance in sd_revalidate_disk usb scsi syz done 2 182d 179d 💬 1 [131d]
WARNING: bad unlock balance in blk_mq_update_tag_set_shared usb block syz done 11 181d 179d 💬 1 [130d]
WARNING: ODEBUG bug in __folio_put (2) usb mm syz 27 20d 200d
INFO: rcu detected stall in vma_link_file mm input usb syz 1 205d 201d 💬 6 [200d]
INFO: rcu detected stall in do_syscall_64 input usb syz 22 25d 204d
INFO: rcu detected stall in statfs (3) kernfs input usb syz 1 212d 208d
INFO: rcu detected stall in __fsnotify_parent usb input fs C 7 184d 212d
INFO: rcu detected stall in sys_pselect6 (2) usb input C 54 169d 215d
INFO: rcu detected stall in kernfs_fop_read_iter (4) usb syz 14 14d 217d
INFO: task hung in usb_deregister_dev (2) usb C 36 175d 236d
WARNING in enable_work input usb pm C error 724 1d07h 255d
WARNING: ODEBUG bug in get_taint usb C 26 161d 262d
WARNING in ath6kl_bmi_get_target_info (2) usb wireless C error 8667 1h41m 276d PATCH [250d]
WARNING in plfxlc_mac_release usb wireless C done 3553 52m 278d PATCH [277d]
KASAN: slab-use-after-free Read in hdm_disconnect usb C error 14290 3h16m 278d PATCH [278d]
WARNING in smsusb_init_device/usb_submit_urb usb media C error 291 49m 279d PATCH [257d]
WARNING: ODEBUG bug in netdev_release usb syz 2 286d 286d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 C error 14 31d 288d 💬 1 [288d]
possible deadlock in dpm_for_each_dev pm usb C error 2 17d 300d
possible deadlock in assign_fw usb C done 38 7d17h 300d
WARNING in usb_free_urb usb media C inconclusive 1414 6h42m 336d 💬 1 [11d]
INFO: rcu detected stall in addrconf_rs_timer (6) netfilter usb syz error error 448 1d13h 336d
INFO: rcu detected stall in schedule (7) usb C done 50 17d 341d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 C error 2119 10h15m 354d
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input C unreliable 20 1d02h 384d 💬 1 [25d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb C error 11 4d08h 397d 💬 1 [397d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input syz error 53 12d 402d
WARNING: ODEBUG bug in netdev_freemem (3) usb C 90 291d 406d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 215 3d00h 407d
WARNING in wdm_rxwork/usb_submit_urb (2) usb C unreliable 94 29d 446d 💬 2 [372d]
UBSAN: array-index-out-of-bounds in usbhid_parse usb C error 67 2d12h 565d PATCH [10d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial C 166 32d 591d PATCH [575d]
INFO: task hung in __input_unregister_device (5) usb input C done error 17 206d 593d 💬 1 [213d]
INFO: task hung in get_bMaxPacketSize0 usb C error 299 21h10m 621d 💬 1 [359d]
INFO: rcu detected stall in console_callback input usb serial C error 18 40d 623d
INFO: task hung in usbdev_release (2) usb C error 94 14d 633d
INFO: rcu detected stall in newfstatat (3) usb C done 339 7d11h 694d 💬 4 [422d]
kernel BUG in cdc_ncm_fill_tx_frame usb syz error error 5 44d 701d
WARNING in amradio_set_mute/usb_submit_urb usb C 3 92d 723d
INFO: task hung in hub_port_init (3) usb C error 709 1h01m 767d 💬 16 [44d]
WARNING in usb_tx_block/usb_submit_urb usb libertas C 516 9d10h 809d 💬 3 [808d]
INFO: task hung in hub_event (3) usb 380 14h02m 840d 💬 12 [359d]
INFO: task hung in usb_get_descriptor (2) usb C inconclusive error 862 42d 864d 💬 14 [169d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb C inconclusive 779 4h18m 880d 💬 5 [44d]
INFO: rcu detected stall in kernfs_fop_release kernfs usb C error 5 194d 945d 💬 1 [945d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 109 3d15h 945d
INFO: rcu detected stall in watchdog usb C error 13 34d 989d
INFO: rcu detected stall in dummy_timer (4) usb C inconclusive 24 13d 1030d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media C 1387 1d07h 1130d 💬 2 [11d]
INFO: task hung in r871xu_dev_remove usb staging C error inconclusive 561 154d 1242d 💬 1 [297d]
memory leak in __lookup_slow ext4 usb C 2 978d 1299d
WARNING in pvr2_send_request_ex/usb_submit_urb pvrusb2 usb C 16 3d13h 1335d
INFO: task hung in pn533_finalize_setup nfc usb C unreliable error 8 762d 1383d PATCH [1151d]
KASAN: use-after-free Read in v4l2_fh_open usb media C unreliable inconclusive 1310 13h34m 1538d PATCH [1328d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input C unreliable 1869 2h28m 1586d PATCH [1322d]
INFO: task hung in usbdev_open (2) usb C error 1129 9h51m 1586d 💬 1 [11d]
possible deadlock in zd_chip_disable_rxtx usb wireless C 44 21d 1605d
WARNING in corrupted/usb_submit_urb (2) usb C error done 69 371d 1625d 💬 1 [1571d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media C 6 1852d 1980d
WARNING in smsusb_start_streaming/usb_submit_urb usb media C error inconclusive 131 5d17h 2082d PATCH [362d]
WARNING in amradio_send_cmd/usb_submit_urb usb C error inconclusive 125 9d17h 2112d 💬 4 [1993d]
KASAN: use-after-free Read in v4l2_fh_init usb media C error inconclusive 3983 3h46m 2206d 💬 4 [11d]
moderation (3):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in _prb_read_valid / data_alloc usb 13 11h04m 8d10h
KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb (5) usb 2 14h45m 46d
KASAN: slab-use-after-free Read in steam_input_close input usb 2 55d 70d