syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 407
Parent subsystem(s): kernel (86)
Child subsystems: usb-storage (2)
open (84):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
INFO: trying to register non-static key in i2c_register_adapter i2c usb -1 C 4 6d13h 3d11h 💬 1 [3d10h]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 4d07h 4d07h
INFO: task hung in hci_register_dev (2) usb 1 syz error 1 13d 12d
memory leak in es58x_open usb 3 syz 1 6d22h 17d PATCH [15d]
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 2 8d19h 17d
WARNING in usb_tx_block libertas usb -1 C 6 24d 24d PATCH [18d]
BUG: soft lockup in dummy_timer usb 1 163 7h18m 28d
WARNING in __alloc_workqueue usb wireless -1 C 1620 41m 28d 💬 1 [10d]
WARNING in pvr2_send_request_ex pvrusb2 usb -1 C 2 25d 34d PATCH [19d]
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 4 2d11h 34d
WARNING in cm109_urb_irq_callback usb input -1 C 46 26d 38d
WARNING in usb_start_wait_urb usb -1 C error 79 26d 39d PATCH [18d]
memory leak in v4l2_ctrl_handler_init_class (2) usb media 3 C 3 29d 44d PATCH [40d]
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 47d 52d 💬 19 [46d]
memory leak in dualshock4_get_calibration_data input usb 3 C 1 56d 56d PATCH [42d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error 4 4d13h 70d 💬 1 [3d15h]
general protection fault in usb_gadget_udc_reset (4) usb 2 7 29d 75d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 296 2h45m 87d PATCH [51d]
general protection fault in count_matching_names (2) usb 2 syz 4 2d12h 89d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 100 2d06h 93d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 683 8m 95d
WARNING: ODEBUG bug in trace_suspend_resume net usb -1 7 71d 122d
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C error 3 16d 137d PATCH [86d]
general protection fault in su3000_i2c_transfer usb media 2 C done 157 17h58m 139d PATCH [29d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 229 8h07m 140d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 49d 145d 💬 6 [144d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 52 3d02h 150d
INFO: task hung in console_callback (6) input usb 1 C error 13 30d 177d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 80 17h26m 202d
INFO: task hung in dvb_usbv2_probe usb 1 C error 273 20h59m 222d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 53 4d00h 229d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 326 6h19m 231d PATCH [45d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 189 3d14h 249d PATCH [239d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 830 1d22h 251d PATCH [247d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 44 1d21h 258d PATCH [213d]
INFO: task hung in usbnet_disconnect (3) net usb 1 82 21d 270d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 16d 284d PATCH [86d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 342 1d00h 290d PATCH [213d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 182d 315d
general protection fault in status_show usb 2 C 12 22h10m 356d PATCH [204d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 26 7d07h 375d
general protection fault in dummy_timer (2) usb 2 syz 61 4d19h 410d
WARNING in kcov_remote_start (6) wireless usb -1 5909 28m 429d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 161d 450d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 108d 453d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 55 89d 464d
possible deadlock in input_inject_event usb fs 4 C done 2168 37m 468d PATCH [83d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 10 8d20h 476d 💬 3 [59d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 102 6d15h 482d PATCH [62d]
WARNING in enable_work usb pm -1 C error 1242 5h28m 505d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 22d 528d PATCH [506d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 21 36d 537d 💬 1 [537d]
possible deadlock in assign_fw usb 4 C done 170 2d10h 550d
WARNING in usb_free_urb usb media -1 C inconclusive 4367 3h14m 585d PATCH [213d]
INFO: rcu detected stall in schedule (7) usb 1 C done 60 2d05h 591d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2153 1d18h 603d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 571 4h32m 610d 💬 3 [13d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 24 54m 647d 💬 1 [646d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 112 1d13h 652d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 301 19h42m 657d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 99 5d16h 696d 💬 2 [622d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 1d16h 841d PATCH [825d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 19 5d01h 843d 💬 1 [115d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 375 2h16m 871d 💬 1 [608d]
INFO: rcu detected stall in console_callback input usb serial 1 C error 18 20d 872d
INFO: task hung in usbdev_release (2) usb 1 C error error 107 2d03h 883d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 486 4d00h 943d 💬 4 [672d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 59d 951d
INFO: task hung in hub_port_init (3) usb 1 C error 939 3h14m 1017d 💬 16 [42d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 551 15d 1058d 💬 3 [73d]
INFO: task hung in hub_event (3) usb 1 715 7h48m 1089d 💬 12 [608d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 292d 1113d 💬 14 [419d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 22d 1130d 💬 5 [73d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 137 22h31m 1195d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1415 4d07h 1380d 💬 3 [10d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 32 4d04h 1585d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1011d 1632d PATCH [1400d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3290 1h29m 1788d PATCH [1578d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3347 10h21m 1835d PATCH [1572d]
INFO: task hung in usbdev_open (2) usb 1 C error 2099 now 1836d 💬 1 [10d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 2d06h 1855d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 621d 1875d 💬 1 [1821d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 143d 2332d PATCH [612d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 6838 3h56m 2456d 💬 4 [10d]
moderation (8):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in set_link_state usb 2 1 14d 10d
BUG: unable to handle kernel NULL pointer dereference in mon_text_release usb 10 1 19d 15d
general protection fault in vhci_send_cmd_submit usb 2 1 25d 21d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (14) usb 6 2 12d 23d
KASAN: slab-use-after-free Read in usb_unanchor_urb usb 19 1 44d 40d
KASAN: slab-use-after-free Read in ld_usb_release (2) usb 19 1 69d 65d
KASAN: slab-use-after-free Read in event_handler usb 19 4 6d03h 97d
BUG: workqueue leaked atomic, lock or RCU: syz.NUM.NUM[NUM] (2) usb lsm -1 3 86d 213d