syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 420
Parent subsystem(s): kernel (90)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in v4l2_open media usb 19 C error 4 53m 1d17h PATCH [1d07h]
memory leak in dvb_register_device media usb 3 C 1 19d 33d PATCH [32d]
KASAN: slab-use-after-free Read in event_handler usb 19 5 59d 59d
memory leak in ldisc_receive net input usb 3 C 2 3d11h 62d PATCH [55d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error error 8 34d 68d 💬 10 [66d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 63d 74d 💬 1 [60d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 75d 75d
INFO: task hung in hci_register_dev (2) usb 1 syz error error 1 84d 83d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 3 64d 88d
BUG: soft lockup in dummy_timer usb 1 344 30d 99d
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 9 1d06h 105d
WARNING in cm109_urb_irq_callback usb input -1 C 46 97d 110d
WARNING in usb_start_wait_urb usb -1 C error 79 97d 110d PATCH [89d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error error 5 26d 141d 💬 1 [74d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 453 7d19h 158d PATCH [122d]
general protection fault in count_matching_names (2) usb 2 syz 4 3d12h 161d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 195 1d02h 164d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb 17 1267 2h10m 166d
WARNING in dev_shutdown (7) usb net -1 syz error error 23 1d19h 182d
general protection fault in su3000_i2c_transfer usb media 2 C done 221 8d14h 211d PATCH [21d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 451 1d04h 211d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 5 11d 216d 💬 6 [215d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 77 11d 221d
INFO: task hung in console_callback (6) input usb 1 C error error 14 25d 248d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 119 5d21h 273d
INFO: task hung in dvb_usbv2_probe usb 1 C error 342 9h57m 293d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 65 3d10h 300d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 477 11h58m 302d PATCH [116d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 235 3d03h 321d PATCH [311d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 952 2d06h 322d PATCH [319d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 177 1d17h 330d PATCH [284d]
BUG: corrupted list in az6007_i2c_xfer usb media 15 C error 11 5d07h 333d PATCH [123d]
INFO: task hung in usbnet_disconnect (3) net usb 1 84 23d 342d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 87d 355d PATCH [157d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 504 1d16h 361d PATCH [284d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 253d 386d
general protection fault in status_show usb 2 C 14 25d 427d PATCH [275d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 31 4d21h 446d
general protection fault in dummy_timer (2) usb 2 syz 75 3d09h 481d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 233d 521d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 180d 524d
possible deadlock in input_inject_event usb fs 4 C done 2545 3h35m 539d PATCH [154d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 13 1d04h 547d 💬 3 [50d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 133 2h01m 553d PATCH [133d]
WARNING in enable_work usb pm -1 C error 1423 1d00h 576d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 63d 600d PATCH [577d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 22 27d 608d 💬 1 [608d]
possible deadlock in assign_fw usb 4 C done error 175 6d11h 621d
WARNING in usb_free_urb usb media -1 C inconclusive 5199 23h16m 656d PATCH [284d]
INFO: rcu detected stall in schedule (7) usb 1 C done error 64 12d 662d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2174 2d22h 674d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 581 18d 681d 💬 3 [22d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 120 13d 723d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 320 3d00h 728d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 108 1d00h 767d 💬 2 [693d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 72d 912d PATCH [896d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 21 9d14h 914d 💬 1 [31d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 389 8d08h 942d 💬 1 [679d]
INFO: rcu detected stall in console_callback usb input serial 1 C error error 18 61d 944d
INFO: task hung in usbdev_release (2) usb 1 C error error 113 18d 954d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 545 15h28m 1014d 💬 4 [743d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 60d 1022d
INFO: task hung in hub_port_init (3) usb 1 C error 1001 2d19h 1088d 💬 16 [113d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 1865 30d 1129d 💬 3 [19d]
INFO: task hung in hub_event (3) usb 1 842 4d08h 1161d 💬 12 [679d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 363d 1184d 💬 14 [490d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 63d 1201d 💬 5 [144d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 165 2d18h 1266d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1434 1d05h 1451d 💬 3 [19d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C error 35 9d17h 1656d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1082d 1703d PATCH [1471d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3825 1h10m 1859d PATCH [1649d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3511 2h40m 1906d PATCH [1643d]
INFO: task hung in usbdev_open (2) usb 1 C error 2604 3h16m 1907d 💬 1 [19d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 3d09h 1926d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 692d 1946d 💬 1 [1892d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 214d 2403d PATCH [683d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in usbtmc_read_bulk_cb usb 19 1 58d 54d
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 2 35d 68d
general protection fault in set_link_state usb 2 1 85d 81d
general protection fault in vhci_send_cmd_submit usb 2 2 52d 92d