syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 391
Parent subsystem(s): kernel (73)
Child subsystems: usb-storage (2)
open (83):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: sleeping function called from invalid context in dummy_dequeue usb 5 C 680 54m 15h25m PATCH [8h12m]
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C 2 1d18h 1d17h PATCH [2d12h]
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 11d 9d21h 💬 6 [8d17h]
INFO: task hung in dvb_usbv2_exit usb 1 C error 24 4d11h 14d
BUG: sleeping function called from invalid context in kcov_remote_start usb 5 1 26d 22d
upstream test error: BUG: sleeping function called from invalid context in kcov_remote_start usb -1 101 2d09h 24d 💬 1 [23d]
INFO: task hung in console_callback (6) input usb 1 C error 6 9d11h 41d
KMSAN: kernel-usb-infoleak-after-free in usb_start_wait_urb usb 18 C 3 47d 51d
KASAN: slab-use-after-free Read in btusb_disconnect usb bluetooth 19 C 5 12d 52d 💬 1 [52d]
KASAN: slab-out-of-bounds Read in mon_bin_event usb 17 C 21 40d 54d PATCH [34d]
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 12 9d07h 66d
WARNING: refcount bug in hdm_disconnect usb 13 C 13 29d 72d PATCH [70d]
KASAN: invalid-free in dev_free (2) usb 22 3 30d 72d
stack segment fault in __usb_hcd_giveback_urb usb 2 C done done 6 79d 79d PATCH [69d]
KASAN: slab-use-after-free Read in raw_event_queue_add usb 19 1 88d 83d 💬 1 [80d]
INFO: task hung in dvb_usbv2_probe usb 1 C error 99 20h02m 86d
KASAN: slab-use-after-free Read in report_descriptor_read usb input 19 19 16d 93d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 55 2d13h 95d 💬 2 [89d]
WARNING: ODEBUG bug in usb_unbind_interface (3) usb -1 4 40d 112d
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 95 13h38m 114d PATCH [104d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 10 9d20h 123d PATCH [77d]
INFO: task hung in usbnet_disconnect (3) net usb 1 64 1d15h 135d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 3 56d 148d PATCH [12d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 50 1h43m 154d PATCH [77d]
WARNING in media_create_pad_link (2) usb media -1 C error 9 2d03h 159d PATCH [136d]
WARNING in hanwang_open/usb_submit_urb usb input -1 C error 6 15d 165d PATCH [162d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 46d 179d
BUG: corrupted list in usb_hcd_link_urb_to_ep (4) usb 8 syz 7 92d 186d 💬 1 [131d]
general protection fault in status_show usb 2 C 8 52d 220d PATCH [68d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz 16 14h39m 239d
general protection fault in dummy_timer (2) usb 2 syz 40 10d 274d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 26d 314d
INFO: rcu detected stall in do_syscall_64 usb input 1 syz 22 139d 317d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 54 282d 328d
possible deadlock in input_inject_event usb fs 4 C done 1461 3h21m 332d
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 9 20d 340d 💬 2 [62d]
INFO: task hung in usb_deregister_dev (2) usb 1 C 36 289d 350d
WARNING in enable_work input usb pm -1 C error 912 7m 369d
WARNING: ODEBUG bug in get_taint usb -1 C 26 274d 375d
KASAN: slab-use-after-free Read in hdm_disconnect usb 19 C error 17056 1h40m 392d PATCH [70d]
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 30d 393d PATCH [370d]
WARNING: ODEBUG bug in netdev_release usb -1 syz 12 28d 399d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 18 1d16h 401d 💬 1 [401d]
possible deadlock in dpm_for_each_dev pm usb 4 C error 6 21h44m 414d
possible deadlock in assign_fw usb 4 C done 132 1d16h 414d
WARNING in usb_free_urb usb media -1 C inconclusive 2707 7h54m 449d PATCH [77d]
INFO: task hung in kernfs_add_one usb kernfs 1 C error done 69 5d07h 454d
INFO: rcu detected stall in schedule (7) usb 1 C done 53 33d 455d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 446 2d01h 474d 💬 3 [2d07h]
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input -1 C unreliable 28 23d 497d 💬 1 [11d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 16 23d 511d 💬 1 [510d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 83 12h20m 516d
WARNING: ODEBUG bug in netdev_freemem (3) usb -1 C 90 405d 520d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 260 20d 521d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 96 12d 560d 💬 2 [486d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 5d22h 705d PATCH [689d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 17 320d 707d 💬 1 [326d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 309 3d14h 735d 💬 1 [472d]
INFO: rcu detected stall in console_callback input usb serial 1 C error 18 33d 737d
INFO: task hung in usbdev_release (2) usb 1 C error error 98 1d23h 747d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 391 1d12h 807d 💬 4 [536d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 64d 815d
WARNING in amradio_set_mute/usb_submit_urb usb -1 C 4 58d 836d
INFO: task hung in hub_port_init (3) usb 1 C error 734 6d19h 881d 💬 16 [15h32m]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 532 2d23h 922d 💬 3 [921d]
INFO: task hung in hub_event (3) usb 1 437 1d16h 954d 💬 12 [472d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 156d 977d 💬 14 [283d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 27d 994d 💬 5 [95d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 121 11d 1059d
INFO: rcu detected stall in dummy_timer (4) usb 1 C inconclusive 25 29d 1143d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1396 10d 1244d 💬 3 [15h32m]
memory leak in __lookup_slow ext4 usb 3 C 2 1092d 1412d
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 26 6d00h 1449d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 875d 1496d PATCH [1264d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 2183 1h20m 1652d PATCH [1442d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 2696 7h22m 1699d PATCH [1436d]
INFO: task hung in usbdev_open (2) usb 1 C error 1419 11h30m 1700d 💬 1 [15h32m]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 7d03h 1719d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 485d 1739d 💬 1 [1685d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media -1 C 6 1966d 2093d
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 7d23h 2196d PATCH [476d]
WARNING in amradio_send_cmd/usb_submit_urb usb -1 C error inconclusive 138 29d 2226d 💬 4 [2106d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 5312 1h09m 2320d 💬 4 [15h32m]
moderation (3):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Write in iowarrior_write_callback usb 24 1 75d 71d
KCSAN: data-race in data_push_tail / vsnprintf (9) usb 6 92 8d20h 185d
KCSAN: data-race in _prb_read_valid / prb_reserve usb 6 3709 1d02h 1750d