syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 408
Parent subsystem(s): kernel (86)
Child subsystems: usb-storage (2)
open (83):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
INFO: trying to register non-static key in i2c_register_adapter i2c usb -1 C 4 7d00h 3d22h 💬 1 [3d21h]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 4d18h 4d18h
INFO: task hung in hci_register_dev (2) usb 1 syz error 1 14d 13d
memory leak in es58x_open usb 3 syz 1 7d09h 18d PATCH [15d]
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 2 9d06h 18d
BUG: soft lockup in dummy_timer usb 1 168 1h06m 28d
WARNING in __alloc_workqueue usb wireless -1 C 1636 9m 28d 💬 1 [10d]
WARNING in pvr2_send_request_ex pvrusb2 usb -1 C 2 25d 34d PATCH [19d]
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 4 2d22h 35d
WARNING in cm109_urb_irq_callback usb input -1 C 46 26d 39d
WARNING in usb_start_wait_urb usb -1 C error 79 26d 39d PATCH [18d]
memory leak in v4l2_ctrl_handler_init_class (2) usb media 3 C 3 30d 44d PATCH [40d]
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 47d 52d 💬 19 [46d]
memory leak in dualshock4_get_calibration_data input usb 3 C 1 57d 57d PATCH [42d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error 4 5d00h 70d 💬 1 [4d02h]
general protection fault in usb_gadget_udc_reset (4) usb 2 7 29d 75d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 296 13h42m 88d PATCH [51d]
general protection fault in count_matching_names (2) usb 2 syz 4 2d23h 90d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 101 1h32m 94d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 689 27m 96d
WARNING: ODEBUG bug in trace_suspend_resume net usb -1 7 72d 122d
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C error 3 17d 138d PATCH [86d]
general protection fault in su3000_i2c_transfer usb media 2 C done 162 2h11m 140d PATCH [30d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 229 19h04m 141d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 49d 146d 💬 6 [145d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 52 3d13h 151d
INFO: task hung in console_callback (6) input usb 1 C error 13 2h06m 177d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 80 1d04h 203d
INFO: task hung in dvb_usbv2_probe usb 1 C error 273 1d07h 223d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 53 4d11h 229d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 326 17h16m 232d PATCH [45d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 189 4d01h 250d PATCH [240d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 830 2d09h 251d PATCH [248d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 44 2d08h 259d PATCH [213d]
INFO: task hung in usbnet_disconnect (3) net usb 1 82 22d 271d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 16d 284d PATCH [86d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 342 1d11h 290d PATCH [213d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 182d 316d
general protection fault in status_show usb 2 C 12 1d09h 357d PATCH [204d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 26 7d18h 375d
general protection fault in dummy_timer (2) usb 2 syz 61 5d06h 411d
WARNING in kcov_remote_start (6) wireless usb -1 5940 12m 430d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 162d 450d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 109d 453d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 55 89d 464d
possible deadlock in input_inject_event usb fs 4 C done 2178 26m 468d PATCH [83d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 10 9d07h 476d 💬 3 [59d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 102 7d02h 482d PATCH [62d]
WARNING in enable_work usb pm -1 C error 1246 39m 505d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 22d 529d PATCH [507d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 21 36d 538d 💬 1 [538d]
possible deadlock in assign_fw usb 4 C done 170 2d21h 550d
WARNING in usb_free_urb usb media -1 C inconclusive 4373 1h04m 586d PATCH [213d]
INFO: rcu detected stall in schedule (7) usb 1 C done 60 2d16h 591d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2153 2d05h 604d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 571 15h29m 610d 💬 3 [13d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 24 11h51m 647d 💬 1 [647d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 112 2d00h 652d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 301 1d06h 657d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 99 6d03h 696d 💬 2 [622d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 2d03h 841d PATCH [825d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 19 5d12h 843d 💬 1 [116d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 375 13h13m 871d 💬 1 [608d]
INFO: rcu detected stall in console_callback input usb serial 1 C error 18 20d 873d
INFO: task hung in usbdev_release (2) usb 1 C error error 107 2d14h 883d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 488 3h15m 943d 💬 4 [672d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 60d 951d
INFO: task hung in hub_port_init (3) usb 1 C error 939 14h11m 1017d 💬 16 [42d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 551 15d 1059d 💬 3 [74d]
INFO: task hung in hub_event (3) usb 1 717 9h57m 1090d 💬 12 [608d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 292d 1114d 💬 14 [419d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 23d 1130d 💬 5 [74d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 138 4h18m 1195d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1415 4d18h 1380d 💬 3 [10d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 32 4d15h 1585d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1011d 1633d PATCH [1401d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3292 3h21m 1788d PATCH [1578d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3348 6h50m 1836d PATCH [1572d]
INFO: task hung in usbdev_open (2) usb 1 C error 2108 42m 1836d 💬 1 [10d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 2d17h 1855d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 621d 1875d 💬 1 [1821d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 144d 2332d PATCH [612d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 6846 9m 2456d 💬 4 [10d]
moderation (8):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in set_link_state usb 2 1 15d 11d
BUG: unable to handle kernel NULL pointer dereference in mon_text_release usb 10 1 19d 15d
general protection fault in vhci_send_cmd_submit usb 2 1 26d 22d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (14) usb 6 2 13d 24d
KASAN: slab-use-after-free Read in usb_unanchor_urb usb 19 1 44d 40d
KASAN: slab-use-after-free Read in ld_usb_release (2) usb 19 1 70d 66d
KASAN: slab-use-after-free Read in event_handler usb 19 4 6d14h 98d
BUG: workqueue leaked atomic, lock or RCU: syz.NUM.NUM[NUM] (2) usb lsm -1 3 87d 213d