syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 397
Parent subsystem(s): kernel (93)
Child subsystems: usb-storage (2)
open (84):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 7 2d00h 1d20h
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb 17 39 13h21m 3d19h
general protection fault in rtlock_slowlock_locked ntfs3 usb 19 6 1d10h 6d07h
WARNING: ODEBUG bug in trace_suspend_resume net usb -1 6 3d13h 30d
KMSAN: uninit-value in rtl8150_open usb net 7 3 28d 42d PATCH [41d]
KASAN: slab-use-after-free Read in v4l2_release (2) media usb 19 C error 2 31d 45d PATCH [34d]
general protection fault in su3000_i2c_transfer usb media 2 C done 66 2d13h 47d PATCH [47d]
INFO: rcu detected stall in hub_event (2) usb kernfs 1 C error 41 9d06h 48d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 39d 53d 💬 6 [52d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 34 6d00h 58d
BUG: sleeping function called from invalid context in kcov_remote_start usb 5 1 70d 66d
upstream test error: BUG: sleeping function called from invalid context in kcov_remote_start usb -1 101 46d 68d 💬 1 [67d]
INFO: task hung in console_callback (6) input usb 1 C error 7 35d 85d
KMSAN: kernel-usb-infoleak-after-free in usb_start_wait_urb usb 18 C 3 91d 95d
KASAN: slab-use-after-free Read in btusb_disconnect usb bluetooth 19 C 5 10d 96d 💬 1 [96d]
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 28 2d01h 110d
WARNING: refcount bug in hdm_disconnect usb 13 C 13 73d 116d PATCH [114d]
KASAN: invalid-free in dev_free (2) usb 22 3 74d 116d
INFO: task hung in dvb_usbv2_probe usb 1 C error 150 5h08m 130d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 30 13d 137d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 150 3h21m 139d 💬 2 [133d]
WARNING: ODEBUG bug in usb_unbind_interface (3) usb -1 5 38d 156d
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 112 3d00h 158d PATCH [148d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 12 9d15h 167d PATCH [121d]
INFO: task hung in usbnet_disconnect (3) net usb 1 76 3d02h 179d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 4 12d 192d PATCH [56d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 139 18h02m 198d PATCH [121d]
WARNING in media_create_pad_link (2) usb media -1 C error 11 17h00m 203d PATCH [180d]
WARNING in hanwang_open/usb_submit_urb usb input -1 C error done 6 59d 209d PATCH [206d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 90d 223d
general protection fault in status_show usb 2 C 8 26d 264d PATCH [112d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz 22 4d19h 283d
general protection fault in dummy_timer (2) usb 2 syz 47 3d12h 318d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 70d 358d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 17d 361d
INFO: task hung in netdev_run_todo (4) net usb 1 596 1d04h 364d
INFO: rcu detected stall in sys_pselect6 (2) input usb 1 C 54 326d 372d
possible deadlock in input_inject_event usb gfs2 4 C done 1583 9d11h 376d PATCH [1d04h]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 9 19d 384d 💬 2 [12d]
INFO: task hung in usb_deregister_dev (2) usb 1 C 36 333d 394d
WARNING in enable_work input usb pm -1 C error 956 41m 413d
WARNING: ODEBUG bug in get_taint usb -1 C 26 318d 419d
KASAN: slab-use-after-free Read in hdm_disconnect usb 19 C error 18225 38m 436d PATCH [114d]
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 27d 437d PATCH [414d]
WARNING: ODEBUG bug in netdev_release usb -1 syz 12 72d 443d
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 19 3d12h 445d 💬 1 [445d]
possible deadlock in assign_fw usb 4 C done 166 2h36m 458d
WARNING in usb_free_urb usb media -1 C inconclusive 3147 7h47m 493d PATCH [121d]
INFO: task hung in kernfs_add_one usb kernfs 1 C error done 73 4d22h 498d
INFO: rcu detected stall in schedule (7) usb 1 C done 56 13d 499d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 492 1d08h 518d 💬 3 [15d]
WARNING in bcm5974_start_traffic/usb_submit_urb (2) usb input -1 C unreliable done 28 67d 541d 💬 1 [25d]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 16 11d 555d 💬 1 [554d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 97 3d06h 560d
WARNING: ODEBUG bug in netdev_freemem (3) usb -1 C 90 449d 564d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 272 9h48m 565d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 97 4d00h 604d 💬 2 [530d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 26d 749d PATCH [733d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 18 24d 751d 💬 1 [23d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 366 8d15h 779d 💬 1 [516d]
INFO: rcu detected stall in console_callback usb input serial 1 C error 18 26d 781d
INFO: task hung in usbdev_release (2) usb 1 C error error 100 19d 791d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 424 18h26m 851d 💬 4 [580d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 37d 859d
INFO: task hung in hub_port_init (3) usb 1 C error 764 14h40m 925d 💬 16 [44d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 537 12d 966d 💬 3 [965d]
INFO: task hung in hub_event (3) usb 1 450 15h28m 998d 💬 12 [516d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 200d 1021d 💬 14 [327d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 26d 1038d 💬 5 [14d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 124 4d12h 1103d
INFO: rcu detected stall in dummy_timer (4) usb 1 C inconclusive 25 26d 1187d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1402 3d23h 1288d 💬 3 [14d]
memory leak in __lookup_slow ext4 usb 3 C 2 1136d 1456d
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 28 5d01h 1493d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 919d 1540d PATCH [1308d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 2604 2h34m 1696d PATCH [1486d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 2928 2h42m 1743d PATCH [1480d]
INFO: task hung in usbdev_open (2) usb 1 C error 1516 5h32m 1744d 💬 1 [14d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 30d 1763d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 529d 1783d 💬 1 [1729d]
kernel BUG at drivers/media/mc/mc-entity.c:LINE! usb media -1 C 6 2010d 2137d
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 51d 2240d PATCH [520d]
WARNING in amradio_send_cmd/usb_submit_urb usb -1 C error inconclusive 138 73d 2270d 💬 4 [2150d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 5795 1h39m 2364d 💬 4 [14d]
moderation (5):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in event_handler usb 19 1 9d20h 5d20h
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (13) usb 6 1 15d 15d
general protection fault in usb_gadget_udc_reset (4) usb 2 2 6d10h 29d
KCSAN: data-race in data_push_tail / vsnprintf (9) usb 6 118 10h22m 229d
KCSAN: data-race in _prb_read_valid / prb_reserve usb 6 3735 7h27m 1794d