syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 391
Parent subsystem(s): kernel (71)
Child subsystems: usb-storage (2)
open (81):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 8d11h 7d00h 💬 6 [5d20h]
INFO: task hung in dvb_usbv2_exit usb 1 C error 24 1d15h 12d
BUG: sleeping function called from invalid context in kcov_remote_start usb 5 1 23d 19d
upstream test error: BUG: sleeping function called from invalid context in kcov_remote_start usb -1 99 4h20m 21d 💬 1 [21d]
INFO: task hung in console_callback (6) input usb 1 C error 6 6d14h 38d
KMSAN: kernel-usb-infoleak-after-free in usb_start_wait_urb usb 18 C 3 44d 48d
KASAN: slab-use-after-free Read in btusb_disconnect usb bluetooth 19 C 5 9d08h 49d 💬 1 [49d]
KASAN: slab-out-of-bounds Read in mon_bin_event usb 17 C 21 37d 51d PATCH [31d]
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 12 6d10h 64d
WARNING: refcount bug in hdm_disconnect usb 13 C 13 26d 69d PATCH [67d]
KASAN: invalid-free in dev_free (2) usb 22 3 28d 69d
stack segment fault in __usb_hcd_giveback_urb usb 2 C done done 6 76d 77d PATCH [66d]
KASAN: slab-use-after-free Read in raw_event_queue_add usb 19 1 85d 80d 💬 1 [77d]
INFO: task hung in dvb_usbv2_probe usb 1 C error 94 2d13h 83d
KASAN: slab-use-after-free Read in report_descriptor_read usb input 19 19 13d 90d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 54 23h15m 92d 💬 2 [86d]
WARNING: ODEBUG bug in usb_unbind_interface (3) usb -1 4 37d 109d
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 92 5h28m 111d PATCH [101d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 10 7d00h 120d PATCH [74d]
INFO: task hung in usbnet_disconnect (3) net usb 1 62 10h04m 132d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 3 53d 145d PATCH [9d21h]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 46 3d02h 151d PATCH [74d]
WARNING in media_create_pad_link (2) usb media -1 C error 9 13d 156d PATCH [133d]
WARNING in hanwang_open/usb_submit_urb usb input -1 C error 6 12d 162d PATCH [159d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 43d 176d
BUG: corrupted list in usb_hcd_link_urb_to_ep (4) usb 8 syz 7 90d 183d 💬 1 [128d]
general protection fault in status_show usb 2 C 8 49d 217d PATCH [65d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz 15 9d16h 236d
general protection fault in dummy_timer (2) usb 2 syz 40 7d09h 271d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 23d 311d
INFO: rcu detected stall in do_syscall_64 usb input 1 syz 22 136d 314d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 54 279d 325d
possible deadlock in input_inject_event usb fs 4 C done 1411 6m 329d
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 9 18d 337d 💬 2 [59d]
INFO: task hung in usb_deregister_dev (2) usb 1 C 36 286d 347d
WARNING in enable_work input usb pm -1 C error 906 2d10h 366d
WARNING: ODEBUG bug in get_taint usb -1 C 26 271d 372d
KASAN: slab-use-after-free Read in hdm_disconnect usb 19 C error 17016 31m 389d PATCH [67d]
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 27d 390d PATCH [368d]
WARNING: ODEBUG bug in netdev_release usb -1 syz 12 25d 396d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 17 80d 398d 💬 1 [398d]
possible deadlock in dpm_for_each_dev pm usb 4 C error 4 27d 411d
possible deadlock in assign_fw usb 4 C done 131 9h54m 411d
WARNING in usb_free_urb usb media -1 C inconclusive 2683 1h25m 447d PATCH [74d]
INFO: task hung in kernfs_add_one usb kernfs 1 C error done 69 2d10h 451d
INFO: rcu detected stall in schedule (7) usb 1 C done 53 30d 452d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 445 4d03h 471d 💬 3 [30d]
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input -1 C unreliable 28 21d 495d 💬 1 [8d15h]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 16 20d 508d 💬 1 [507d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 82 5h56m 513d
WARNING: ODEBUG bug in netdev_freemem (3) usb -1 C 90 402d 517d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 260 17d 518d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 96 9d20h 557d 💬 2 [483d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 3d02h 702d PATCH [686d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 17 317d 704d 💬 1 [323d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 309 17h32m 732d 💬 1 [469d]
INFO: rcu detected stall in console_callback input usb serial 1 C error 18 30d 734d
INFO: task hung in usbdev_release (2) usb 1 C error error 97 29d 744d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 389 22h23m 804d 💬 4 [533d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 61d 812d
WARNING in amradio_set_mute/usb_submit_urb usb -1 C 4 55d 834d
INFO: task hung in hub_port_init (3) usb 1 C error 734 3d22h 878d 💬 16 [60d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 532 3h21m 919d 💬 3 [918d]
INFO: task hung in hub_event (3) usb 1 436 4d10h 951d 💬 12 [469d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 153d 974d 💬 14 [280d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 24d 991d 💬 5 [92d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 121 8d19h 1056d
INFO: rcu detected stall in dummy_timer (4) usb 1 C inconclusive 25 26d 1140d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1396 7d11h 1241d 💬 3 [29d]
memory leak in __lookup_slow ext4 usb 3 C 2 1089d 1409d
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 26 3d04h 1446d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 872d 1494d PATCH [1261d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 2158 1h58m 1649d PATCH [1439d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 2679 54m 1696d PATCH [1433d]
INFO: task hung in usbdev_open (2) usb 1 C error 1409 18m 1697d 💬 1 [29d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 4d07h 1716d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 482d 1736d 💬 1 [1682d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media -1 C 6 1963d 2090d
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 5d02h 2193d PATCH [473d]
WARNING in amradio_send_cmd/usb_submit_urb usb -1 C error inconclusive 138 26d 2223d 💬 4 [2103d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 5263 2h31m 2317d 💬 4 [29d]
moderation (3):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Write in iowarrior_write_callback usb 24 1 73d 69d
KCSAN: data-race in data_push_tail / vsnprintf (9) usb 6 92 6d00h 182d
KCSAN: data-race in _prb_read_valid / prb_reserve usb 6 3708 20h05m 1747d