syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 403
Parent subsystem(s): kernel (89)
Child subsystems: usb-storage (1)
open (76):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 13h31m 5d13h 💬 16 [13h31m]
memory leak in dualshock4_get_calibration_data input usb 3 C 1 10d 9d23h PATCH [9h54m]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 2 8d23h 23d
INFO: rcu detected stall in sys_symlink (6) lsm input usb 1 C error 2 7d09h 26d
general protection fault in usb_gadget_udc_reset (4) usb 2 6 18d 28d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 155 1h13m 41d PATCH [4d11h]
general protection fault in count_matching_names (2) usb 2 syz 4 20d 43d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 51 9h12m 47d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start bluetooth usb 17 290 11h11m 48d
WARNING: ODEBUG bug in trace_suspend_resume usb net -1 7 24d 75d
KMSAN: uninit-value in rtl8150_open net usb 7 3 73d 87d PATCH [16d]
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C error 2 8d08h 90d PATCH [39d]
general protection fault in su3000_i2c_transfer usb media 2 C done 98 1d05h 93d PATCH [93d]
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 2d10h 99d 💬 6 [97d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 45 2d23h 104d
WARNING: refcount bug in trace_suspend_resume usb 13 C 44 37d 110d
INFO: task hung in console_callback (6) usb input 1 C error 13 15d 130d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 55 11h51m 156d
WARNING: refcount bug in hdm_disconnect usb 13 C 13 118d 161d PATCH [159d]
INFO: task hung in dvb_usbv2_probe usb 1 C error 192 1d11h 175d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 39 12d 182d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 252 13h48m 184d PATCH [1d14h]
WARNING: ODEBUG bug in usb_unbind_interface (3) usb -1 5 83d 201d
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 148 1d21h 203d PATCH [193d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 14 25d 212d PATCH [166d]
INFO: task hung in usbnet_disconnect (3) net usb 1 80 3d13h 224d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 4 5d09h 237d PATCH [39d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 259 11h48m 243d PATCH [166d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 135d 268d
general protection fault in status_show usb 2 C 8 1d23h 309d PATCH [157d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 23 11d 328d
general protection fault in dummy_timer (2) usb 2 syz 55 3d04h 363d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 115d 403d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 62d 406d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 55 42d 417d
possible deadlock in input_inject_event usb fs 4 C done 1809 5h35m 421d PATCH [36d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 10 6d13h 429d 💬 3 [12d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 59 1d22h 435d PATCH [15d]
WARNING in enable_work usb pm -1 C error 1061 10h06m 458d
WARNING: ODEBUG bug in get_taint usb -1 C 26 363d 464d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 7d00h 482d PATCH [460d]
WARNING: ODEBUG bug in netdev_release usb -1 syz 12 117d 488d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 20 30d 490d 💬 1 [490d]
possible deadlock in assign_fw usb 4 C done 168 3d16h 503d
WARNING in usb_free_urb usb media -1 C inconclusive 3764 10m 539d PATCH [166d]
INFO: rcu detected stall in schedule (7) usb 1 C done 57 5d17h 544d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2141 6d12h 557d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 510 1d21h 563d 💬 3 [29d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 24 9d20h 600d 💬 1 [600d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 102 7d12h 605d
WARNING: ODEBUG bug in netdev_freemem (3) usb -1 C 90 494d 609d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 280 12d 610d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 98 11d 649d 💬 2 [575d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 2d01h 794d PATCH [778d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 18 69d 796d 💬 1 [68d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 369 16h51m 824d 💬 1 [561d]
INFO: rcu detected stall in console_callback input usb serial 1 C error 18 3d16h 826d
INFO: task hung in usbdev_release (2) usb 1 C error error 105 17d 836d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 456 4h11m 896d 💬 4 [625d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 12d 904d
INFO: task hung in hub_port_init (3) usb 1 C error 844 1d22h 970d 💬 16 [26d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 548 11h50m 1011d 💬 3 [26d]
INFO: task hung in hub_event (3) usb 1 587 15h04m 1043d 💬 12 [561d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 245d 1066d 💬 14 [372d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 7d07h 1083d 💬 5 [26d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 128 2d23h 1148d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1408 5d23h 1333d 💬 3 [26d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 29 11d 1538d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 964d 1586d PATCH [1353d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 2972 5m 1741d PATCH [1531d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3135 6h59m 1789d PATCH [1525d]
INFO: task hung in usbdev_open (2) usb 1 C error 1638 18h24m 1789d 💬 1 [26d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 4d16h 1808d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 574d 1828d 💬 1 [1774d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 97d 2285d PATCH [565d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 6333 1h01m 2409d 💬 4 [26d]
moderation (3):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in ld_usb_release (2) usb 19 1 23d 19d
KASAN: slab-use-after-free Read in event_handler usb 19 3 17d 51d
BUG: workqueue leaked atomic, lock or RCU: syz.NUM.NUM[NUM] (2) usb lsm -1 3 39d 166d