syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 414
Parent subsystem(s): kernel (88)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: sleeping function called from invalid context in usb_tx_block usb 5 C 166 1h49m 6d21h 💬 1 [6d10h]
memory leak in dvb_register_device media usb 3 C 1 2d01h 15d PATCH [15d]
INFO: task hung in usb_bulk_msg (2) usb 1 C 8 8d02h 23d PATCH [13d]
KASAN: slab-use-after-free Read in event_handler usb 19 5 42d 42d
memory leak in ldisc_receive net input usb 3 C 2 5h42m 44d PATCH [37d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error 8 16d 50d 💬 10 [48d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 46d 57d 💬 1 [43d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 58d 58d
INFO: task hung in hci_register_dev (2) usb 1 syz error error 1 67d 66d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 3 47d 71d
BUG: soft lockup in dummy_timer usb 1 344 13d 82d
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 8 14d 88d
WARNING in cm109_urb_irq_callback usb input -1 C 46 79d 92d
WARNING in usb_start_wait_urb usb -1 C error 79 79d 92d PATCH [71d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error error 5 8d16h 124d 💬 1 [57d]
general protection fault in usb_gadget_udc_reset (4) usb 2 11 5d21h 129d
INFO: task hung in rpm_resume (2) usb pm 1 C 17 15d 140d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 453 4d11h 141d PATCH [104d]
general protection fault in count_matching_names (2) usb 2 syz 4 56d 143d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 158 4h37m 147d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb 17 1089 4h06m 149d
WARNING in dev_shutdown (7) usb net -1 syz error error 22 43d 165d
general protection fault in su3000_i2c_transfer usb media 2 C done 221 5d09h 193d PATCH [4d03h]
INFO: rcu detected stall in hub_event (2) usb 1 C error 437 12h01m 194d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 5 8d13h 199d 💬 6 [198d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 62 1d05h 204d
INFO: task hung in console_callback (6) input usb 1 C error error 14 8d07h 230d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 115 12d 256d
INFO: task hung in dvb_usbv2_probe usb 1 C error 324 1d05h 276d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 62 4h40m 283d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 435 8h29m 285d PATCH [98d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 221 6h32m 303d PATCH [293d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 903 3h15m 304d PATCH [301d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 154 1h36m 312d PATCH [267d]
BUG: corrupted list in az6007_i2c_xfer usb media 15 C error 11 1d23h 316d PATCH [106d]
INFO: task hung in usbnet_disconnect (3) net usb 1 84 5d17h 324d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 70d 338d PATCH [140d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 471 1d15h 343d PATCH [267d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 236d 369d
general protection fault in status_show usb 2 C 14 8d10h 410d PATCH [258d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 31 1d16h 429d
general protection fault in dummy_timer (2) usb 2 syz 71 4d08h 464d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 215d 504d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 162d 507d
possible deadlock in input_inject_event usb fs 4 C done 2460 21h42m 522d PATCH [137d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 11 19d 530d 💬 3 [33d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 125 2h29m 536d PATCH [115d]
WARNING in enable_work usb pm -1 C error 1403 2d19h 559d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 45d 582d PATCH [560d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 22 10d 591d 💬 1 [591d]
possible deadlock in assign_fw usb 4 C done error 171 15d 604d
WARNING in usb_free_urb usb media -1 C inconclusive 5154 11h47m 639d PATCH [267d]
INFO: rcu detected stall in schedule (7) usb 1 C done error 63 2d02h 645d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2170 8h45m 657d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 581 17h47m 664d 💬 3 [5d03h]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 22 C error 27 12d 700d 💬 1 [700d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 119 1d06h 706d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 315 2d13h 710d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 106 3d03h 749d 💬 2 [676d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 55d 894d PATCH [879d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 20 24m 897d 💬 1 [13d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 389 5d04h 924d 💬 1 [662d]
INFO: rcu detected stall in console_callback usb input serial 1 C error error 18 43d 926d
INFO: task hung in usbdev_release (2) usb 1 C error error 113 1d11h 937d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 526 8h00m 997d 💬 4 [726d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 43d 1004d
INFO: task hung in hub_port_init (3) usb 1 C error 997 4h24m 1071d 💬 16 [96d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 1865 13d 1112d 💬 3 [2d09h]
INFO: task hung in hub_event (3) usb 1 839 2d08h 1143d 💬 12 [662d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 345d 1167d 💬 14 [473d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 46d 1183d 💬 5 [127d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 164 3d01h 1249d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1417 9h24m 1433d 💬 3 [2d09h]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 34 12d 1638d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1065d 1686d PATCH [1454d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3650 19m 1842d PATCH [1632d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3476 4h40m 1889d PATCH [1625d]
INFO: task hung in usbdev_open (2) usb 1 C error 2479 2h46m 1890d 💬 1 [2d09h]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 4d18h 1909d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 675d 1929d 💬 1 [1875d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 197d 2386d PATCH [665d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 7482 4h32m 2510d 💬 4 [2d09h]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in usbtmc_read_bulk_cb usb 19 1 41d 37d
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 2 18d 51d
general protection fault in set_link_state usb 2 1 68d 64d
BUG: unable to handle kernel NULL pointer dereference in mon_text_release usb 10 1 72d 68d
general protection fault in vhci_send_cmd_submit usb 2 2 35d 75d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (14) usb 6 3 52d 77d