syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 409
Parent subsystem(s): kernel (82)
Child subsystems: usb-storage (2)
open (84):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error 7 3d11h 9h58m
INFO: trying to register non-static key in i2c_register_adapter i2c usb -1 C 4 9d19h 6d17h 💬 1 [6d16h]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 7d14h 7d14h
INFO: task hung in hci_register_dev (2) usb 1 syz error 1 16d 15d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 2 12d 21d
BUG: soft lockup in dummy_timer usb 1 183 4h33m 31d
WARNING in __alloc_workqueue usb wireless -1 C 1742 13m 31d 💬 1 [13d]
WARNING in pvr2_send_request_ex pvrusb2 usb -1 C 2 28d 37d PATCH [22d]
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 5 6h09m 38d
WARNING in cm109_urb_irq_callback usb input -1 C 46 29d 42d
WARNING in usb_start_wait_urb usb -1 C error 79 29d 42d PATCH [21d]
memory leak in v4l2_ctrl_handler_init_class (2) usb media 3 C 3 33d 47d PATCH [43d]
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 50d 55d 💬 19 [49d]
memory leak in dualshock4_get_calibration_data input usb 3 C 1 59d 59d PATCH [45d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error 4 7d19h 73d 💬 1 [6d21h]
general protection fault in usb_gadget_udc_reset (4) usb 2 7 32d 78d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 305 13h05m 90d PATCH [54d]
general protection fault in count_matching_names (2) usb 2 syz 4 5d18h 93d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 105 4h21m 96d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 710 49m 98d
WARNING in dev_shutdown (7) usb net -1 syz error 20 14d 114d
WARNING: ODEBUG bug in trace_suspend_resume net usb -1 7 74d 125d
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C error 3 20d 140d PATCH [1d11h]
general protection fault in su3000_i2c_transfer usb media 2 C done 165 1d19h 143d PATCH [32d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 244 13h42m 144d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 52d 148d 💬 6 [147d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 52 6d08h 153d
INFO: task hung in console_callback (6) input usb 1 C error 13 2d21h 180d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 80 3d23h 205d
INFO: task hung in dvb_usbv2_probe usb 1 C error 279 1h13m 225d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 54 2d04h 232d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 333 1h44m 234d PATCH [48d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 192 1d00h 253d PATCH [243d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 835 2d08h 254d PATCH [251d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 48 1h12m 262d PATCH [216d]
INFO: task hung in usbnet_disconnect (3) net usb 1 82 24d 274d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 19d 287d PATCH [89d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 352 32m 293d PATCH [216d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 185d 318d
general protection fault in status_show usb 2 C 12 4d04h 359d PATCH [207d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 26 10d 378d
general protection fault in dummy_timer (2) usb 2 syz 62 1d09h 413d
WARNING in kcov_remote_start (6) wireless usb -1 6100 45m 433d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 165d 453d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 112d 456d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 55 92d 467d
possible deadlock in input_inject_event usb fs 4 C done 2201 1h35m 471d PATCH [86d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 10 12d 479d 💬 3 [62d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 102 9d22h 485d PATCH [65d]
WARNING in enable_work usb pm -1 C error 1262 4h58m 508d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 25d 532d PATCH [509d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 21 39d 540d 💬 1 [540d]
possible deadlock in assign_fw usb 4 C done 170 5d16h 553d
WARNING in usb_free_urb usb media -1 C inconclusive 4423 2h08m 589d PATCH [216d]
INFO: rcu detected stall in schedule (7) usb 1 C done 60 5d12h 594d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2154 7h27m 606d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 571 3d10h 613d 💬 3 [16d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 24 3d07h 650d 💬 1 [649d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 112 4d19h 655d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 301 4d01h 660d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 100 2d16h 699d 💬 2 [625d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 4d22h 844d PATCH [828d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 19 8d07h 846d 💬 1 [118d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 377 1d04h 874d 💬 1 [611d]
INFO: rcu detected stall in console_callback input usb serial 1 C error 18 23d 876d
INFO: task hung in usbdev_release (2) usb 1 C error error 107 5d10h 886d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 491 15h55m 946d 💬 4 [675d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 62d 954d
INFO: task hung in hub_port_init (3) usb 1 C error 941 20h17m 1020d 💬 16 [45d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 551 18d 1061d 💬 3 [76d]
INFO: task hung in hub_event (3) usb 1 722 1d11h 1093d 💬 12 [611d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 295d 1116d 💬 14 [422d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 25d 1133d 💬 5 [76d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 140 1d11h 1198d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1415 7d13h 1383d 💬 3 [13d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 32 7d10h 1588d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1014d 1636d PATCH [1403d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3315 2h55m 1791d PATCH [1581d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3358 23m 1838d PATCH [1575d]
INFO: task hung in usbdev_open (2) usb 1 C error 2127 11m 1839d 💬 1 [13d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 5d12h 1858d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 624d 1878d 💬 1 [1824d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 147d 2335d PATCH [615d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 6872 3h53m 2459d 💬 4 [13d]
moderation (9):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 1 4d19h 19h52m
general protection fault in set_link_state usb 2 1 17d 13d
BUG: unable to handle kernel NULL pointer dereference in mon_text_release usb 10 1 22d 18d
general protection fault in vhci_send_cmd_submit usb 2 1 28d 24d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (14) usb 6 3 2d09h 27d
KASAN: slab-use-after-free Read in usb_unanchor_urb usb 19 1 47d 43d
KASAN: slab-use-after-free Read in ld_usb_release (2) usb 19 1 72d 68d
KASAN: slab-use-after-free Read in event_handler usb 19 4 9d09h 100d
BUG: workqueue leaked atomic, lock or RCU: syz.NUM.NUM[NUM] (2) usb lsm -1 3 89d 216d