syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 408
Parent subsystem(s): kernel (83)
Child subsystems: usb-storage (2)
open (83):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
INFO: trying to register non-static key in i2c_register_adapter i2c usb -1 C 4 8d14h 5d13h 💬 1 [5d11h]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 6d09h 6d09h
INFO: task hung in hci_register_dev (2) usb 1 syz error 1 15d 14d
memory leak in es58x_open usb 3 syz 1 9d00h 19d PATCH [1d07h]
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 2 10d 19d
BUG: soft lockup in dummy_timer usb 1 173 2h43m 30d
WARNING in __alloc_workqueue usb wireless -1 C 1700 10m 30d 💬 1 [12d]
WARNING in pvr2_send_request_ex pvrusb2 usb -1 C 2 27d 36d PATCH [21d]
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 4 4d13h 36d
WARNING in cm109_urb_irq_callback usb input -1 C 46 28d 40d
WARNING in usb_start_wait_urb usb -1 C error 79 28d 41d PATCH [20d]
memory leak in v4l2_ctrl_handler_init_class (2) usb media 3 C 3 31d 46d PATCH [42d]
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 49d 54d 💬 19 [48d]
memory leak in dualshock4_get_calibration_data input usb 3 C 1 58d 58d PATCH [44d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error 4 6d14h 72d 💬 1 [5d17h]
general protection fault in usb_gadget_udc_reset (4) usb 2 7 31d 77d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 302 15h06m 89d PATCH [53d]
general protection fault in count_matching_names (2) usb 2 syz 4 4d14h 92d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 102 1d09h 95d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 703 39m 97d
WARNING: ODEBUG bug in trace_suspend_resume net usb -1 7 73d 124d
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C error 3 18d 139d PATCH [6h33m]
general protection fault in su3000_i2c_transfer usb media 2 C done 165 15h03m 141d PATCH [31d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 241 2h55m 142d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 51d 147d 💬 6 [146d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 52 5d03h 152d
INFO: task hung in console_callback (6) input usb 1 C error 13 1d16h 179d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 80 2d18h 204d
INFO: task hung in dvb_usbv2_probe usb 1 C error 276 1h42m 224d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 54 23h28m 231d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 332 2h43m 233d PATCH [47d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 191 12m 252d PATCH [241d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 835 1d03h 253d PATCH [249d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 47 15h11m 261d PATCH [215d]
INFO: task hung in usbnet_disconnect (3) net usb 1 82 23d 273d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 18d 286d PATCH [88d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 345 7h14m 292d PATCH [215d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 184d 317d
general protection fault in status_show usb 2 C 12 2d23h 358d PATCH [206d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 26 9d09h 377d
general protection fault in dummy_timer (2) usb 2 syz 62 4h53m 412d
WARNING in kcov_remote_start (6) wireless usb -1 6031 32m 432d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 164d 452d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 111d 455d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 55 91d 466d
possible deadlock in input_inject_event usb fs 4 C done 2195 8h12m 470d PATCH [85d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 10 10d 478d 💬 3 [61d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 102 8d17h 484d PATCH [64d]
WARNING in enable_work usb pm -1 C error 1255 5h11m 507d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 24d 531d PATCH [508d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 21 38d 539d 💬 1 [539d]
possible deadlock in assign_fw usb 4 C done 170 4d12h 552d
WARNING in usb_free_urb usb media -1 C inconclusive 4403 1h20m 587d PATCH [215d]
INFO: rcu detected stall in schedule (7) usb 1 C done 60 4d07h 593d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2153 3d19h 605d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 571 2d05h 612d 💬 3 [15d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 24 2d02h 649d 💬 1 [648d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 112 3d14h 654d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 301 2d21h 659d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 100 1d11h 698d 💬 2 [624d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 3d18h 843d PATCH [827d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 19 7d02h 845d 💬 1 [117d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 376 1d05h 873d 💬 1 [610d]
INFO: rcu detected stall in console_callback input usb serial 1 C error 18 22d 874d
INFO: task hung in usbdev_release (2) usb 1 C error error 107 4d05h 885d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 490 15h13m 945d 💬 4 [674d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 61d 953d
INFO: task hung in hub_port_init (3) usb 1 C error 940 20h16m 1019d 💬 16 [44d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 551 17d 1060d 💬 3 [75d]
INFO: task hung in hub_event (3) usb 1 722 7h01m 1092d 💬 12 [610d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 294d 1115d 💬 14 [421d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 24d 1132d 💬 5 [75d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 140 7h05m 1197d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1415 6d09h 1382d 💬 3 [12d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 32 6d06h 1587d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1013d 1634d PATCH [1402d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3304 6h00m 1790d PATCH [1580d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3351 4h28m 1837d PATCH [1574d]
INFO: task hung in usbdev_open (2) usb 1 C error 2118 1h09m 1838d 💬 1 [12d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 4d07h 1857d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 623d 1877d 💬 1 [1823d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 145d 2334d PATCH [614d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 6868 1h24m 2458d 💬 4 [12d]
moderation (8):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in set_link_state usb 2 1 16d 12d
BUG: unable to handle kernel NULL pointer dereference in mon_text_release usb 10 1 21d 17d
general protection fault in vhci_send_cmd_submit usb 2 1 27d 23d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (14) usb 6 3 1d05h 25d
KASAN: slab-use-after-free Read in usb_unanchor_urb usb 19 1 46d 42d
KASAN: slab-use-after-free Read in ld_usb_release (2) usb 19 1 71d 67d
KASAN: slab-use-after-free Read in event_handler usb 19 4 8d04h 99d
BUG: workqueue leaked atomic, lock or RCU: syz.NUM.NUM[NUM] (2) usb lsm -1 3 88d 215d