syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 420
Parent subsystem(s): kernel (86)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in hiddev_disconnect (4) input usb actionable 19 1 22d 18d
KASAN: invalid-free in dev_free (3) usb 24 1 29d 25d PATCH [24d]
KMSAN: uninit-value in rtl8150_open (2) usb net 7 1 29d 25d PATCH [11d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer media usb 17 C error 9 7d06h 26d PATCH [5d14h]
KASAN: slab-use-after-free Read in v4l2_open usb media 19 C error 111 21m 31d PATCH [31d]
WARNING in igorplugusb_probe/usb_submit_urb usb media -1 C error 1518 6h04m 31d PATCH [14d]
memory leak in dvb_register_device media usb 3 C 1 49d 62d PATCH [62d]
KASAN: slab-use-after-free Read in event_handler usb 19 5 89d 89d
memory leak in ldisc_receive net usb 3 C 2 11d 91d PATCH [84d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error error 8 7d21h 98d 💬 10 [96d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 23d 104d 💬 1 [23d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 4 15d 105d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 4 1d23h 118d
BUG: soft lockup in dummy_timer usb 1 344 60d 129d
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 12 13d 135d
WARNING in cm109_urb_irq_callback usb input -1 C 46 126d 139d
WARNING in usb_start_wait_urb usb -1 C error 79 126d 139d PATCH [118d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error error 6 17d 171d 💬 1 [104d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 527 8h55m 188d PATCH [151d]
general protection fault in count_matching_names (2) usb 2 syz 4 33d 190d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 234 15h09m 194d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 1624 1h04m 196d
WARNING in dev_shutdown (7) usb net -1 syz error error 24 18d 212d
general protection fault in su3000_i2c_transfer usb media 2 C done 231 1d00h 240d PATCH [51d]
INFO: rcu detected stall in hub_event (2) usb kernfs 1 C error 474 3h02m 241d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 5 9d21h 246d 💬 6 [245d]
INFO: task hung in lbs_remove_card usb libertas 1 C 9958 now 248d PATCH [4d03h]
INFO: task hung in dvb_usbv2_exit usb 1 C error 83 3d08h 251d
INFO: task hung in console_callback (6) input usb 1 C error error 17 4d07h 277d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 131 9d19h 303d
INFO: task hung in dvb_usbv2_probe usb 1 C error 358 2d21h 323d
KASAN: slab-use-after-free Read in report_descriptor_read usb input 19 73 2d23h 330d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 514 3d09h 332d PATCH [146d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 254 5d22h 350d PATCH [340d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 1007 9d00h 351d PATCH [348d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 219 14h57m 359d PATCH [314d]
BUG: corrupted list in az6007_i2c_xfer usb media 15 C error 12 8d23h 363d PATCH [153d]
INFO: task hung in usbnet_disconnect (3) net usb 1 84 52d 371d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 117d 385d PATCH [187d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 637 18h11m 390d PATCH [314d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 283d 416d
general protection fault in status_show usb 2 C 14 6d00h 457d PATCH [305d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 31 6d11h 476d
general protection fault in dummy_timer (2) usb 2 syz 78 6d23h 511d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 262d 551d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 209d 554d
possible deadlock in input_inject_event usb fs 4 C done 3081 3h53m 569d PATCH [184d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 15 9d14h 577d 💬 3 [18d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 157 3h01m 583d PATCH [162d]
WARNING in enable_work usb pm -1 C error 1791 1h58m 606d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 92d 629d PATCH [607d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 22 57d 638d 💬 1 [638d]
possible deadlock in assign_fw usb 4 C done error 181 5d09h 651d
WARNING in usb_free_urb usb media -1 C inconclusive 6975 5m 686d PATCH [1d18h]
INFO: rcu detected stall in schedule (7) usb 1 C done error 66 14d 692d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2186 2d00h 704d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 597 3h13m 711d 💬 3 [19d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 132 1d03h 753d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 333 23h40m 757d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 113 9d03h 796d 💬 2 [723d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 102d 942d PATCH [926d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 21 39d 944d 💬 1 [60d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 391 14d 972d 💬 1 [709d]
INFO: rcu detected stall in console_callback input usb serial 1 C error error 18 90d 973d
INFO: task hung in usbdev_release (2) usb 1 C error error 117 10d 984d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 576 1d05h 1044d 💬 4 [773d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 90d 1051d
INFO: task hung in hub_port_init (3) usb 1 C error 1005 6d22h 1118d 💬 16 [143d]
INFO: task hung in hub_event (3) usb 1 856 9d01h 1190d 💬 12 [709d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 393d 1214d 💬 14 [520d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 93d 1230d 💬 5 [174d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 170 1d01h 1296d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1437 1d11h 1480d 💬 3 [18d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C error 35 11d 1685d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1112d 1733d PATCH [1501d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 4066 3d18h 1889d PATCH [1679d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3584 17h25m 1936d PATCH [1672d]
INFO: task hung in usbdev_open (2) usb 1 C error 2842 29m 1937d 💬 1 [18d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 12d 1956d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 722d 1976d 💬 1 [1922d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 244d 2433d PATCH [713d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in mon_text_release usb 2 1 13d 9d10h
KASAN: slab-use-after-free Read in usbtmc_read_bulk_cb usb 19 1 88d 84d
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 2 65d 98d
general protection fault in vhci_send_cmd_submit usb 2 2 82d 122d