syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 335
Parent subsystem(s): kernel (71)
Child subsystems: usb-storage (0)
open (73):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
INFO: rcu detected stall in schedule_timeout (6) usb C done 3 7d14h 6d09h 💬 1 [6d04h]
INFO: rcu detected stall in aoecmd_cfg (2) block usb C done 1 18d 14d 💬 2 [10d]
WARNING in kernfs_get (5) kernfs usb syz 2 8d12h 14d 💬 3 [6d13h]
WARNING in hid_output_report input usb C error 2 11d 17d PATCH [5d13h]
INFO: trying to register non-static key in skb_dequeue (3) wireless usb C 9 1d19h 22d 💬 1 [22d]
INFO: rcu detected stall in sys_close (7) usb fs input C error 1 38d 34d
WARNING in __mod_timer (2) usb 2 41d 42d
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb C error 4 18d 51d 💬 1 [51d]
WARNING: ODEBUG bug in netdev_freemem (3) usb C 74 5d12h 60d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 82 5h21m 61d
WARNING: ODEBUG bug in usb_unbind_interface (2) usb 17 3d08h 63d PATCH [52d]
WARNING in usbnet_start_xmit/usb_submit_urb (2) usb C error 4 68d 66d
INFO: rcu detected stall in asm_exc_page_fault mm input usb syz 1 78d 74d 💬 3 [72d]
INFO: task hung in vb2_video_unregister_device media usb C 1 88d 84d PATCH [83d]
WARNING in __input_unregister_device usb input C 4 3d00h 85d
INFO: rcu detected stall in sys_syslog (2) input usb syz 1 96d 92d
WARNING in wdm_rxwork/usb_submit_urb (2) usb C 4 12d 100d 💬 2 [26d]
WARNING in input_register_device (2) input usb C 5 81d 105d PATCH [99d]
possible deadlock in vb2_video_unregister_device usb media C done 3 80d 105d 💬 4 [70d]
WARNING in input_unregister_device (2) usb input C error 4 5d04h 134d 💬 1 [64d]
memory leak in _r8712_init_xmit_priv (2) staging usb C 2 169d 185d 💬 3 [14h44m]
INFO: task hung in kernfs_remove_by_name_ns (2) kernfs usb C 2 26d 192d
INFO: rcu detected stall in nsim_dev_trap_report_work (2) net usb syz done 3 9d06h 203d
INFO: rcu detected stall in raw_ioctl usb 45 4d03h 204d
UBSAN: array-index-out-of-bounds in usbhid_parse usb C error 24 3d22h 219d PATCH [78d]
memory leak in hwsim_add_one (2) wpan input usb syz 1 248d 244d
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial C 156 74d 245d PATCH [229d]
INFO: task hung in get_bMaxPacketSize0 usb C error 261 13d 275d 💬 1 [12d]
INFO: rcu detected stall in console_callback serial input usb C 1 281d 277d
INFO: task hung in usbdev_release (2) usb C error 72 1d01h 287d
INFO: rcu detected stall in newfstatat (3) usb C done 51 5d22h 347d 💬 4 [76d]
memory leak in new_inode (2) usb fs syz 1 357d 353d
kernel BUG in cdc_ncm_fill_tx_frame usb syz error 5 14d 355d
kernel BUG in __page_table_check_zero usb C error 88 3d16h 367d
INFO: rcu detected stall in vfs_readlink fs usb C 1 373d 369d 💬 2 [366d]
WARNING in amradio_set_mute/usb_submit_urb usb C 3 13d 377d
INFO: task hung in hub_port_init (3) usb C error 645 10d 421d 💬 16 [12d]
INFO: task hung in hub_event (3) usb 276 5d17h 494d 💬 12 [12d]
INFO: task hung in usb_get_descriptor (2) usb C inconclusive 862 70d 517d 💬 14 [107d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb C inconclusive 263 17h35m 534d 💬 5 [75d]
INFO: rcu detected stall in kernfs_fop_release kernfs usb C error 3 41d 599d 💬 1 [599d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 51 2d05h 599d
INFO: rcu detected stall in watchdog usb C error 2 2d16h 643d
inconsistent lock state in find_vmap_area input usb kernfs C done inconclusive 49 362d 680d
INFO: rcu detected stall in dummy_timer (4) usb C inconclusive 20 72d 684d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media C 3 37d 784d 💬 2 [39d]
INFO: task hung in r871xu_dev_remove usb staging C error 405 2d21h 895d 💬 1 [12d]
WARNING in carl9170_usb_init_device/usb_submit_urb wireless usb C error 2 70d 934d PATCH [23d]
memory leak in __lookup_slow ext4 usb C 2 632d 952d
KASAN: use-after-free Read in kernfs_next_descendant_post (2) usb kernfs C inconclusive 57 66d 961d 💬 7 [77d]
WARNING in pvr2_send_request_ex/usb_submit_urb pvrusb2 usb C 16 7d09h 989d
INFO: task hung in pn533_finalize_setup nfc usb C unreliable error 8 415d 1037d PATCH [805d]
divide error in ath9k_htc_swba usb wireless C unreliable 16 74d 1069d 💬 1 [1069d]
WARNING in fw_load_sysfs_fallback usb fs C unreliable inconclusive 241 474d 1145d
WARNING in firmware_fallback_sysfs usb fs C error 3432 37d 1175d PATCH [197d]
KASAN: use-after-free Read in v4l2_fh_open usb media C unreliable inconclusive 3 120d 1192d PATCH [982d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input C unreliable 308 19h24m 1240d PATCH [976d]
INFO: task hung in usbdev_open (2) usb C error 644 6d11h 1240d 💬 1 [12d]
memory leak in r8712_init_recv_priv usb staging C 50 350d 1249d PATCH [1097d]
possible deadlock in zd_chip_disable_rxtx usb wireless C 44 104d 1259d
WARNING in corrupted/usb_submit_urb (2) usb C error done 69 25d 1279d 💬 1 [1225d]
KMSAN: uninit-value in dib3000mb_attach (2) usb media C 2955 18h41m 1307d PATCH [5d12h]
WARNING in carl9170_usb_submit_cmd_urb/usb_submit_urb usb wireless C done 48 9d02h 1469d PATCH [23d]
WARNING in media_create_pad_link usb media C done done 101 11d 1469d
general protection fault in ir_raw_event_store_with_filter usb media C error 870 11d 1533d
WARNING in cxacru_cm/usb_submit_urb usb C error inconclusive 14 5d12h 1539d
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media C 6 1506d 1633d
INFO: rcu detected stall in hub_event usb C done 358 1d11h 1644d 💬 9 [12d]
WARNING in implement input usb C error 958 5d18h 1710d 💬 7 [23d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media C error inconclusive 90 11d 1736d PATCH [16d]
WARNING in amradio_send_cmd/usb_submit_urb usb C error inconclusive 80 5d22h 1766d 💬 4 [1646d]
WARNING in ar5523_submit_rx_cmd/usb_submit_urb usb wireless C error inconclusive 883 8d07h 1815d 💬 13 [16d]
KASAN: use-after-free Read in v4l2_fh_init usb media C error inconclusive 304 11d 1860d 💬 4 [12d]
moderation (3):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb (2) usb 2 11d 15d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (8) usb 4 34d 40d
BUG: workqueue leaked atomic, lock or RCU: syz-executor[NUM] usb 1 45d 41d