syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 393
Parent subsystem(s): kernel (91)
Child subsystems: usb-storage (2)
open (86):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: sleeping function called from invalid context in mon_complete usb 5 4 2d05h 8d03h PATCH [3d12h]
WARNING: ODEBUG bug in trace_suspend_resume net usb -1 5 12d 12d
KMSAN: uninit-value in lan78xx_reset net usb 7 5 9d03h 16d
WARNING in rtl8150_start_xmit/usb_submit_urb net usb -1 C 5 2d05h 22d PATCH [10h52m]
KMSAN: uninit-value in rtl8150_open net usb 7 3 10d 24d PATCH [24d]
WARNING in __alloc_skb (4) mm usb -1 C 5 5d03h 24d PATCH [8h52m]
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C error 2 13d 27d PATCH [16d]
general protection fault in su3000_i2c_transfer usb media 2 C done 55 1d08h 30d PATCH [30d]
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 21d 36d 💬 6 [34d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 31 18m 41d
BUG: sleeping function called from invalid context in kcov_remote_start usb 5 1 52d 48d
upstream test error: BUG: sleeping function called from invalid context in kcov_remote_start usb -1 101 28d 50d 💬 1 [50d]
INFO: task hung in console_callback (6) input usb 1 C error 7 17d 67d
KMSAN: kernel-usb-infoleak-after-free in usb_start_wait_urb usb 18 C 3 73d 77d
KASAN: slab-use-after-free Read in btusb_disconnect usb bluetooth 19 C 5 38d 78d 💬 1 [78d]
KASAN: slab-out-of-bounds Read in mon_bin_event usb 17 C 21 66d 80d PATCH [60d]
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 13 12d 93d
WARNING: refcount bug in hdm_disconnect usb 13 C 13 55d 98d PATCH [96d]
KASAN: invalid-free in dev_free (2) usb 22 3 57d 98d
INFO: task hung in dvb_usbv2_probe usb 1 C error 127 8h48m 112d
KASAN: slab-use-after-free Read in report_descriptor_read usb input 19 28 1d18h 119d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 79 1d05h 121d 💬 2 [115d]
WARNING: ODEBUG bug in usb_unbind_interface (3) usb -1 5 20d 138d
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 103 19h12m 140d PATCH [130d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 10 36d 149d PATCH [103d]
INFO: task hung in usbnet_disconnect (3) net usb 1 71 5d06h 161d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 3 12d 174d PATCH [38d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 92 15h13m 180d PATCH [103d]
WARNING in media_create_pad_link (2) usb media -1 C error 10 7d06h 185d PATCH [163d]
WARNING in hanwang_open/usb_submit_urb usb input -1 C error 6 41d 191d PATCH [188d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 72d 206d
general protection fault in status_show usb 2 C 8 9d00h 246d PATCH [94d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz 20 13d 265d
general protection fault in dummy_timer (2) usb 2 syz 46 6d13h 301d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 52d 340d
INFO: rcu detected stall in do_syscall_64 usb input 1 syz 22 165d 343d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 54 309d 354d
possible deadlock in input_inject_event usb fs 4 C done 1557 21h54m 358d
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 9 1d06h 366d 💬 2 [88d]
INFO: task hung in usb_deregister_dev (2) usb 1 C 36 315d 376d
WARNING in enable_work input usb pm -1 C error 939 1d15h 395d
WARNING: ODEBUG bug in get_taint usb -1 C 26 300d 401d
KASAN: slab-use-after-free Read in hdm_disconnect usb 19 C error 17683 7m 418d PATCH [96d]
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 9d21h 419d PATCH [397d]
WARNING: ODEBUG bug in netdev_release usb -1 syz 12 54d 425d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 18 27d 428d 💬 1 [427d]
possible deadlock in dpm_for_each_dev pm usb 4 C error 8 7d08h 440d
possible deadlock in assign_fw usb 4 C done 155 4d23h 440d
WARNING in usb_free_urb usb media -1 C inconclusive 2968 8h05m 476d PATCH [103d]
INFO: task hung in kernfs_add_one usb kernfs 1 C error done 71 8d21h 480d
INFO: rcu detected stall in schedule (7) usb 1 C done 54 1d01h 481d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 467 3d17h 500d 💬 3 [28d]
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input -1 C unreliable done 28 50d 524d 💬 1 [7d23h]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 16 8d02h 537d 💬 1 [537d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 87 1h05m 542d
WARNING: ODEBUG bug in netdev_freemem (3) usb -1 C 90 431d 546d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 267 3d08h 547d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 96 10d 586d 💬 2 [512d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 9d03h 731d PATCH [715d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 18 6d14h 733d 💬 1 [5d22h]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 364 7d07h 761d 💬 1 [498d]
INFO: rcu detected stall in console_callback input usb serial 1 C error 18 8d08h 763d
INFO: task hung in usbdev_release (2) usb 1 C error error 100 2d00h 773d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 409 9h25m 833d 💬 4 [562d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 20d 841d
WARNING in amradio_set_mute/usb_submit_urb usb -1 C 4 84d 863d
INFO: task hung in hub_port_init (3) usb 1 C error 748 12h35m 907d 💬 16 [26d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 533 13h58m 948d 💬 3 [947d]
INFO: task hung in hub_event (3) usb 1 444 2d11h 980d 💬 12 [498d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 182d 1003d 💬 14 [309d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 8d22h 1020d 💬 5 [121d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 122 12d 1085d
INFO: rcu detected stall in dummy_timer (4) usb 1 C inconclusive 25 8d15h 1170d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1402 4h54m 1270d 💬 3 [26d]
memory leak in __lookup_slow ext4 usb 3 C 2 1118d 1438d
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 28 1d07h 1475d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 901d 1523d PATCH [1291d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 2435 2h09m 1678d PATCH [1468d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 2811 15m 1726d PATCH [1462d]
INFO: task hung in usbdev_open (2) usb 1 C error 1482 11h53m 1726d 💬 1 [26d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 12d 1745d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 511d 1765d 💬 1 [1711d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media -1 C 6 1992d 2119d
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 34d 2222d PATCH [502d]
WARNING in amradio_send_cmd/usb_submit_urb usb -1 C error inconclusive 138 55d 2252d 💬 4 [2133d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 5623 5h09m 2346d 💬 4 [26d]
moderation (4):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in usb_gadget_udc_reset (4) usb 2 1 15d 11d
general protection fault in rtlock_slowlock_locked ntfs3 usb 19 2 23d 30d
KCSAN: data-race in data_push_tail / vsnprintf (9) usb 6 106 3h37m 211d
KCSAN: data-race in _prb_read_valid / prb_reserve usb 6 3721 2d00h 1776d