syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 414
Parent subsystem(s): kernel (86)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: sleeping function called from invalid context in usb_tx_block usb 5 C 120 1h13m 3d23h 💬 1 [3d12h]
memory leak in dvb_register_device media usb 3 C 1 13d 12d PATCH [12d]
INFO: task hung in usb_bulk_msg (2) usb 1 C 8 5d05h 20d PATCH [10d]
KASAN: slab-use-after-free Read in event_handler usb 19 5 39d 39d
memory leak in ldisc_receive net input usb 3 C 1 31d 42d PATCH [34d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error 8 13d 48d 💬 10 [46d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 43d 54d 💬 1 [40d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 55d 55d
INFO: task hung in hci_register_dev (2) usb 1 syz error error 1 64d 63d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 3 44d 68d
BUG: soft lockup in dummy_timer usb 1 344 10d 79d
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 8 11d 85d
WARNING in cm109_urb_irq_callback usb input -1 C 46 76d 89d
WARNING in usb_start_wait_urb usb -1 C error 79 76d 89d PATCH [69d]
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 98d 103d 💬 19 [97d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error error 5 5d19h 121d 💬 1 [54d]
general protection fault in usb_gadget_udc_reset (4) usb 2 11 2d23h 126d
INFO: task hung in rpm_resume (2) usb pm 1 C 17 12d 137d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 453 1d14h 138d PATCH [102d]
general protection fault in count_matching_names (2) usb 2 syz 4 53d 140d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 153 6h27m 144d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb 17 1046 2h37m 146d
WARNING in dev_shutdown (7) usb net -1 syz error error 22 40d 162d
general protection fault in su3000_i2c_transfer usb media 2 C done 221 2d12h 190d PATCH [1d06h]
INFO: rcu detected stall in hub_event (2) usb 1 C error 436 6h48m 191d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 5 5d15h 196d 💬 6 [195d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 59 5d17h 201d
INFO: task hung in console_callback (6) input usb 1 C error error 14 5d09h 228d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 115 9d10h 253d
INFO: task hung in dvb_usbv2_probe usb 1 C error 320 5h56m 273d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 61 16h55m 280d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 432 23h17m 282d PATCH [96d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 219 2d20h 300d PATCH [290d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 899 1d06h 301d PATCH [298d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 148 1d08h 309d PATCH [264d]
BUG: corrupted list in az6007_i2c_xfer usb media 15 C error 10 7d06h 313d PATCH [103d]
INFO: task hung in usbnet_disconnect (3) net usb 1 84 2d20h 321d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 67d 335d PATCH [137d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 463 16h10m 341d PATCH [264d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 233d 366d
general protection fault in status_show usb 2 C 14 5d12h 407d PATCH [255d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 31 12d 426d
general protection fault in dummy_timer (2) usb 2 syz 71 1d11h 461d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 212d 501d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 159d 504d
possible deadlock in input_inject_event usb fs 4 C done 2455 3h00m 519d PATCH [134d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 11 17d 527d 💬 3 [30d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 124 23h19m 533d PATCH [113d]
WARNING in enable_work usb pm -1 C error 1402 12m 556d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 42d 579d PATCH [557d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 22 7d03h 588d 💬 1 [588d]
possible deadlock in assign_fw usb 4 C done error 171 13d 601d
WARNING in usb_free_urb usb media -1 C inconclusive 5142 11m 636d PATCH [264d]
INFO: rcu detected stall in schedule (7) usb 1 C done error 62 5d17h 642d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2169 1d14h 654d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 579 1d01h 661d 💬 3 [2d05h]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 22 C error 27 9d11h 698d 💬 1 [697d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 118 3d22h 703d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 314 6d06h 708d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 106 5h27m 746d 💬 2 [673d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 52d 892d PATCH [876d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 20 11d 894d 💬 1 [10d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 389 2d07h 922d 💬 1 [659d]
INFO: rcu detected stall in console_callback usb input serial 1 C error error 18 40d 923d
INFO: task hung in usbdev_release (2) usb 1 C error error 112 4d08h 934d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 522 1d12h 994d 💬 4 [723d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 40d 1001d
INFO: task hung in hub_port_init (3) usb 1 C error 995 1d09h 1068d 💬 16 [93d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 1865 10d 1109d 💬 3 [124d]
INFO: task hung in hub_event (3) usb 1 838 2d07h 1140d 💬 12 [659d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 343d 1164d 💬 14 [470d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 43d 1180d 💬 5 [124d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 164 4h07m 1246d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1417 11d 1431d 💬 3 [30d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 34 9d20h 1636d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1062d 1683d PATCH [1451d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3623 now 1839d PATCH [1629d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3471 7h05m 1886d PATCH [1623d]
INFO: task hung in usbdev_open (2) usb 1 C error 2459 6h25m 1887d 💬 1 [30d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 1d21h 1906d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 672d 1926d 💬 1 [1872d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 194d 2383d PATCH [663d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 7464 8h18m 2507d 💬 4 [30d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in usbtmc_read_bulk_cb usb 19 1 38d 34d
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 2 15d 48d
general protection fault in set_link_state usb 2 1 65d 61d
BUG: unable to handle kernel NULL pointer dereference in mon_text_release usb 10 1 70d 66d
general protection fault in vhci_send_cmd_submit usb 2 2 32d 72d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (14) usb 6 3 50d 74d