syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 422
Parent subsystem(s): kernel (94)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in hidraw_report_event input usb 19 C error 4 1d23h 2d16h PATCH [1d15h]
KASAN: stack-out-of-bounds Write in carl9170_handle_command_response wireless usb prio:high 21 C 9 1h51m 5d19h PATCH [5d16h]
WARNING: ODEBUG bug in i2c_device_remove (2) i2c usb -1 C 3 9d10h 8d22h PATCH [6d14h]
KASAN: slab-use-after-free Read in hiddev_disconnect (4) actionable input usb 19 1 33d 28d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed usb media -1 C error 91 1d20h 34d PATCH [34d]
WARNING in as102_dvb_dmx_start_feed usb media -1 C error 1029 44m 34d 💬 1 [34d]
KASAN: invalid-free in dev_free (3) usb 24 1 39d 35d PATCH [34d]
KMSAN: uninit-value in rtl8150_open (2) net usb 7 1 39d 35d PATCH [6d01h]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer usb media 17 C error 9 3d03h 36d PATCH [15d]
KASAN: slab-use-after-free Read in v4l2_open usb media 19 C error 295 32m 41d PATCH [41d]
WARNING in igorplugusb_probe/usb_submit_urb usb media -1 C error 1810 10h03m 41d PATCH [25d]
memory leak in dvb_register_device media usb 3 C 1 59d 72d PATCH [72d]
KASAN: slab-use-after-free Read in event_handler usb 19 6 7d00h 99d
memory leak in ldisc_receive net usb 3 C 2 21d 102d PATCH [95d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error error 8 3d18h 108d 💬 10 [106d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 33d 114d 💬 1 [33d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 4 26d 115d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 5 8d12h 128d
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 12 9d20h 145d PATCH [7d00h]
WARNING in cm109_urb_irq_callback usb input -1 C 46 136d 149d
WARNING in usb_start_wait_urb usb -1 C error 79 137d 150d PATCH [129d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error error 8 6d12h 181d 💬 1 [114d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 538 1h54m 198d PATCH [162d]
general protection fault in count_matching_names (2) usb 2 syz 5 10h44m 200d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 247 10h35m 204d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 1731 26m 206d
WARNING in dev_shutdown (7) usb net -1 syz error error 24 28d 222d
general protection fault in su3000_i2c_transfer usb media 2 C done 242 2d11h 250d PATCH [61d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 482 10h24m 251d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 5 19d 256d PATCH [21h30m]
INFO: task hung in lbs_remove_card usb libertas 1 C 12167 now 258d PATCH [14d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 84 2d14h 261d
INFO: task hung in console_callback (6) input usb 1 C error error 17 14d 288d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 131 19d 313d
INFO: task hung in dvb_usbv2_probe usb 1 C error 359 2d14h 333d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 80 1d03h 340d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 524 11h04m 342d PATCH [156d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 286 2h53m 360d PATCH [350d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 1007 4d11h 362d PATCH [358d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 225 1d10h 369d PATCH [324d]
BUG: corrupted list in az6007_i2c_xfer usb media 15 C error 12 4d22h 373d PATCH [163d]
INFO: task hung in usbnet_disconnect (3) net usb 1 84 62d 381d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 127d 395d PATCH [197d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 652 16h17m 401d PATCH [324d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 293d 426d
general protection fault in status_show usb 2 C 14 2d02h 467d PATCH [315d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 31 16d 486d
general protection fault in dummy_timer (2) usb 2 syz 78 17d 521d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 272d 561d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 219d 564d
possible deadlock in input_inject_event usb fs 4 C done 3284 3h40m 579d PATCH [194d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 15 3d16h 587d 💬 3 [28d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 183 1h02m 593d PATCH [173d]
WARNING in enable_work usb pm -1 C error 1810 9d09h 616d 💬 2 [8d21h]
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 102d 639d PATCH [617d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 22 67d 648d 💬 1 [648d]
possible deadlock in assign_fw usb 4 C done error 182 1d01h 661d
WARNING in usb_free_urb usb media -1 C inconclusive 7095 10h06m 696d PATCH [11d]
INFO: rcu detected stall in schedule (7) usb 1 C done error 66 24d 702d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 603 7d01h 721d 💬 3 [29d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 147 1d01h 763d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 338 3h32m 768d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 114 9d07h 807d 💬 2 [733d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 112d 952d PATCH [936d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 21 49d 954d 💬 1 [70d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 392 5d03h 982d 💬 1 [719d]
INFO: rcu detected stall in console_callback usb input serial 1 C error error 18 100d 983d
INFO: task hung in usbdev_release (2) usb 1 C error error 118 7d11h 994d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 586 3d18h 1054d 💬 4 [783d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 100d 1062d
INFO: task hung in hub_port_init (3) usb 1 C error 1005 2d23h 1128d 💬 16 [153d]
INFO: task hung in hub_event (3) usb 1 858 5d02h 1200d 💬 12 [719d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 403d 1224d 💬 14 [530d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 103d 1241d 💬 5 [184d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 172 5d21h 1306d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1437 11d 1491d 💬 3 [28d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C error 35 7d09h 1696d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1122d 1743d PATCH [1511d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 4066 13d 1899d PATCH [1689d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3596 9h45m 1946d PATCH [1683d]
INFO: task hung in usbdev_open (2) usb 1 C error 2915 6h39m 1947d 💬 1 [28d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 22d 1966d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 732d 1986d 💬 1 [1932d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 254d 2443d PATCH [723d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in mon_text_release usb 2 1 23d 19d
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 2 75d 108d