syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 376
Parent subsystem(s): kernel (84)
Child subsystems: usb-storage (1)
open (85):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING in dib0700_i2c_xfer/usb_submit_urb usb C error 5 3d16h 6h40m 💬 2 [5h39m]
BUG: soft lockup in hci_cmd_timeout (2) bluetooth usb syz 1 8d16h 4d15h
WARNING in media_create_pad_link (2) media usb C 4 9d15h 5d17h
WARNING in hanwang_open/usb_submit_urb input usb C 3 20h42m 11d PATCH [8d09h]
KASAN: slab-use-after-free Write in steam_input_register input usb C 6 16d 30d
BUG: corrupted list in usb_hcd_link_urb_to_ep (4) usb syz 5 18d 32d
KMSAN: uninit-value in mii_nway_restart (2) usb C 76 15h45m 35d PATCH [4d11h]
KASAN: use-after-free Read in hid_hw_raw_request input usb 6 39d 40d
KASAN: slab-use-after-free Read in usbhid_raw_request usb C 6 40d 47d PATCH [46d]
general protection fault in count_matching_names usb syz 4 27d 52d
KASAN: slab-use-after-free Read in corsair_void_status_work_handler input usb C 27 36d 56d 💬 1 [48d]
WARNING: ODEBUG bug in release_nodes input usb C 667 17d 57d
WARNING: ODEBUG bug in devres_release_group input usb C done done 37 43d 60d PATCH [59d]
general protection fault in status_show usb C 5 56d 66d PATCH [61d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage syz 4 4d09h 85d
INFO: task hung in do_syscall_64 (3) usb syz error 5 24d 92d
WARNING in sched_show_task serial input usb C 1 98d 94d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb C 169 21h36m 108d
general protection fault in dummy_timer (2) usb syz 15 14d 120d
KASAN: slab-use-after-free Read in v4l2_release media usb C error inconclusive 1 62d 125d PATCH [32d]
UBSAN: shift-out-of-bounds in s32ton input usb 18 28d 133d PATCH [131d]
WARNING: bad unlock balance in elevator_init_mq block usb syz done 1 141d 137d
WARNING: bad unlock balance in sd_revalidate_disk scsi usb syz done 2 142d 138d 💬 1 [90d]
WARNING: bad unlock balance in blk_mq_update_tag_set_shared usb block syz done 11 140d 138d 💬 1 [90d]
BUG: workqueue leaked atomic, lock or RCU: kworker/NUM:NUM[NUM] usb media 5 69d 154d
WARNING: ODEBUG bug in __folio_put (2) usb mm syz 25 2d07h 160d
INFO: rcu detected stall in vma_link_file mm input usb syz 1 165d 161d 💬 6 [159d]
INFO: rcu detected stall in do_syscall_64 input usb syz 21 78d 163d
INFO: rcu detected stall in statfs (3) kernfs input usb syz 1 172d 168d
INFO: rcu detected stall in __fsnotify_parent input usb fs C 7 144d 172d
INFO: rcu detected stall in sys_pselect6 (2) usb input C 54 128d 174d
INFO: rcu detected stall in kernfs_fop_read_iter (4) usb syz 13 64d 177d
INFO: task hung in usb_deregister_dev (2) usb C 36 135d 196d
WARNING in enable_work input usb pm C error 658 42m 215d
WARNING: ODEBUG bug in get_taint usb C 26 120d 221d
WARNING in ath6kl_bmi_get_target_info (2) usb wireless C error 7515 3h11m 235d PATCH [210d]
WARNING in plfxlc_mac_release usb wireless C done 3070 3h02m 238d PATCH [237d]
KASAN: slab-use-after-free Read in hdm_disconnect usb C 13134 now 238d PATCH [237d]
WARNING in smsusb_init_device/usb_submit_urb usb media C error 221 1d20h 239d PATCH [216d]
WARNING: ODEBUG bug in netdev_release usb syz 2 246d 245d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 C error 13 5d04h 247d 💬 1 [247d]
possible deadlock in dpm_for_each_dev pm usb C error 2 7d13h 260d
possible deadlock in assign_fw usb C done 32 8d19h 260d
WARNING in usb_free_urb usb media C inconclusive 617 45m 295d 💬 1 [1d22h]
INFO: rcu detected stall in schedule (7) usb C done 49 7d07h 301d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 C error 1945 2h36m 313d
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input C unreliable 17 10h44m 343d 💬 1 [109d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb C error 10 11h45m 357d 💬 1 [356d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input syz error 50 1d21h 362d
WARNING: ODEBUG bug in netdev_freemem (3) usb C 90 251d 366d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 197 4d11h 367d
WARNING: ODEBUG bug in usb_unbind_interface (2) usb 41 77d 368d PATCH [358d]
WARNING in wdm_rxwork/usb_submit_urb (2) usb C unreliable 94 6d10h 406d 💬 2 [332d]
UBSAN: array-index-out-of-bounds in usbhid_parse usb C error 61 5d18h 525d PATCH [11d]
KASAN: stack-out-of-bounds Read in sched_show_task usb input serial C 166 14d 551d PATCH [535d]
INFO: task hung in __input_unregister_device (5) usb input C done error 17 166d 553d 💬 1 [172d]
INFO: task hung in get_bMaxPacketSize0 usb C error 272 9d13h 581d 💬 1 [318d]
INFO: rcu detected stall in console_callback input usb serial C error 18 30d 583d
INFO: task hung in usbdev_release (2) usb C error 94 3d18h 593d
INFO: rcu detected stall in newfstatat (3) usb C done 321 10h57m 653d 💬 4 [382d]
kernel BUG in cdc_ncm_fill_tx_frame usb syz error error 5 3d19h 661d
WARNING in amradio_set_mute/usb_submit_urb usb C 3 51d 682d
INFO: task hung in hub_port_init (3) usb C error 674 11d 727d 💬 16 [4d00h]
WARNING in usb_tx_block/usb_submit_urb usb libertas C 510 9d07h 768d 💬 3 [767d]
INFO: task hung in hub_event (3) usb 353 15d 800d 💬 12 [318d]
INFO: task hung in usb_get_descriptor (2) usb C inconclusive 862 2d08h 823d 💬 14 [129d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb C inconclusive 726 13h37m 840d 💬 5 [4d00h]
INFO: rcu detected stall in kernfs_fop_release kernfs usb C error 5 154d 905d 💬 1 [905d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 100 6d01h 905d
INFO: rcu detected stall in watchdog usb C error 13 24d 949d
INFO: rcu detected stall in dummy_timer (4) usb C inconclusive 24 3d11h 989d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media C 1385 4d16h 1090d 💬 2 [4d00h]
INFO: task hung in r871xu_dev_remove usb staging C error inconclusive 561 114d 1201d 💬 1 [256d]
memory leak in __lookup_slow ext4 usb C 2 938d 1258d
WARNING in pvr2_send_request_ex/usb_submit_urb pvrusb2 usb C 16 8d13h 1295d
INFO: task hung in pn533_finalize_setup nfc usb C unreliable error 8 721d 1342d PATCH [1110d]
KASAN: use-after-free Read in v4l2_fh_open usb media C unreliable inconclusive 1154 14h40m 1498d PATCH [1288d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input C unreliable 1540 3h57m 1545d PATCH [1282d]
INFO: task hung in usbdev_open (2) usb C error 1096 5d08h 1546d 💬 1 [4d00h]
possible deadlock in zd_chip_disable_rxtx usb wireless C 44 15d 1565d
WARNING in corrupted/usb_submit_urb (2) usb C error done 69 331d 1585d 💬 1 [1531d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media C 6 1812d 1939d
WARNING in smsusb_start_streaming/usb_submit_urb usb media C error inconclusive 127 3d18h 2042d PATCH [322d]
WARNING in amradio_send_cmd/usb_submit_urb usb C error inconclusive 122 1d20h 2072d 💬 4 [1952d]
KASAN: use-after-free Read in v4l2_fh_init usb media C error inconclusive 3390 23m 2166d 💬 4 [4d00h]
moderation (7):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb (5) usb 1 5d17h 5d17h
KASAN: slab-use-after-free Read in steam_input_close input usb 2 14d 30d
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add usb 1 52d 52d
general protection fault in vhci_tx_loop usb 1 86d 82d
general protection fault in defer_bh net usb 1 88d 84d
KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_del usb 4 27d 124d
BUG: workqueue leaked atomic, lock or RCU: syz.NUM.NUM[NUM] mm usb 4 82d 129d