syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 420
Parent subsystem(s): kernel (88)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: invalid-free in dev_free (3) usb 24 1 4d06h 6h11m
KMSAN: uninit-value in rtl8150_open (2) usb net 7 1 4d19h 19h10m 💬 1 [12h38m]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer media usb 17 C error 8 1d09h 2d01h PATCH [1d19h]
KASAN: slab-use-after-free Read in v4l2_open media usb 19 C error 13 6h45m 6d14h PATCH [6d05h]
memory leak in dvb_register_device media usb 3 C 1 24d 38d PATCH [37d]
KASAN: slab-use-after-free Read in event_handler usb 19 5 64d 64d
memory leak in ldisc_receive net usb 3 C 2 8d09h 67d PATCH [60d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error error 8 39d 73d 💬 10 [71d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 68d 79d 💬 1 [65d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 80d 80d
INFO: task hung in hci_register_dev (2) usb 1 syz error error 1 89d 88d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 3 69d 93d
BUG: soft lockup in dummy_timer usb 1 344 35d 104d
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 12 3d00h 110d
WARNING in cm109_urb_irq_callback usb input -1 C 46 102d 114d
WARNING in usb_start_wait_urb usb -1 C error 79 102d 115d PATCH [94d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error error 5 30d 146d 💬 1 [79d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 474 14h32m 163d PATCH [127d]
general protection fault in count_matching_names (2) usb 2 syz 4 8d10h 166d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 201 14h26m 169d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 1332 2h04m 171d
WARNING in dev_shutdown (7) usb net -1 syz error error 23 6d16h 187d
general protection fault in su3000_i2c_transfer usb media 2 C done 221 13d 215d PATCH [26d]
INFO: rcu detected stall in hub_event (2) usb kernfs 1 C error 456 3d08h 216d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 5 16d 221d 💬 6 [220d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 78 13h38m 226d
INFO: task hung in console_callback (6) input usb 1 C error error 14 30d 253d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 119 10d 278d
INFO: task hung in dvb_usbv2_probe usb 1 C error 345 21h05m 298d
KASAN: slab-use-after-free Read in report_descriptor_read usb input 19 66 2d10h 305d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 490 2h36m 307d PATCH [121d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 239 1d19h 326d PATCH [315d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 957 1h26m 327d PATCH [323d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 183 22h24m 335d PATCH [289d]
BUG: corrupted list in az6007_i2c_xfer usb media 15 C error 11 10d 338d PATCH [128d]
INFO: task hung in usbnet_disconnect (3) net usb 1 84 27d 347d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 92d 360d PATCH [162d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 517 14h41m 366d PATCH [289d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 258d 391d
general protection fault in status_show usb 2 C 14 30d 432d PATCH [280d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 31 9d19h 451d
general protection fault in dummy_timer (2) usb 2 syz 75 8d07h 486d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 238d 526d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 185d 529d
possible deadlock in input_inject_event usb fs 4 C done 2627 6h39m 544d PATCH [159d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 13 6d02h 552d 💬 3 [55d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 134 1h26m 558d PATCH [138d]
WARNING in enable_work usb pm -1 C error 1427 21h15m 581d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 67d 605d PATCH [582d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 22 32d 613d 💬 1 [613d]
possible deadlock in assign_fw usb 4 C done error 176 2d21h 626d
WARNING in usb_free_urb usb media -1 C inconclusive 5215 6h08m 661d PATCH [289d]
INFO: rcu detected stall in schedule (7) usb 1 C done error 64 17d 667d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2176 3d08h 679d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 584 55m 686d 💬 3 [27d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 122 2d19h 728d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 325 1d08h 733d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 109 12h09m 772d 💬 2 [698d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 77d 917d PATCH [901d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 21 14d 919d 💬 1 [35d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 390 4d20h 947d 💬 1 [684d]
INFO: rcu detected stall in console_callback input usb serial 1 C error error 18 65d 948d
INFO: task hung in usbdev_release (2) usb 1 C error error 113 23d 959d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 550 1h00m 1019d 💬 4 [748d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 65d 1027d
INFO: task hung in hub_port_init (3) usb 1 C error 1001 7d16h 1093d 💬 16 [118d]
INFO: task hung in hub_event (3) usb 1 846 1d11h 1166d 💬 12 [684d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 368d 1189d 💬 14 [495d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 68d 1206d 💬 5 [149d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 166 2d19h 1271d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1434 6d03h 1456d 💬 3 [24d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C error 35 13h47m 1661d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1087d 1708d PATCH [1476d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3875 now 1864d PATCH [1654d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3531 12h48m 1911d PATCH [1648d]
INFO: task hung in usbdev_open (2) usb 1 C error 2647 39m 1912d 💬 1 [24d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 8d07h 1931d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 697d 1951d 💬 1 [1897d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 219d 2408d PATCH [688d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in usbtmc_read_bulk_cb usb 19 1 63d 59d
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 2 40d 73d
general protection fault in vhci_send_cmd_submit usb 2 2 57d 97d