syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 413
Parent subsystem(s): kernel (81)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING in asus_remove input usb -1 C 2 3d07h 3d04h PATCH [2d07h]
memory leak in prepare_creds (6) lsm input usb 3 C 1 11d 8d19h
KASAN: slab-use-after-free Read in event_handler usb 19 5 12d 12d
memory leak in ldisc_receive net usb input 3 C 1 5d00h 15d PATCH [8d04h]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error 8 1d05h 21d 💬 10 [19d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 16d 27d 💬 1 [13d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 28d 28d
INFO: task hung in hci_register_dev (2) usb 1 syz error error 1 37d 36d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 3 17d 41d
BUG: soft lockup in dummy_timer usb 1 283 18m 52d
WARNING in __alloc_workqueue usb wireless -1 C 2111 13d 52d 💬 1 [4d00h]
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 5 7d02h 58d
WARNING in cm109_urb_irq_callback usb input -1 C 46 50d 63d
WARNING in usb_start_wait_urb usb -1 C error 79 50d 63d PATCH [42d]
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 71d 76d 💬 19 [70d]
memory leak in dualshock4_get_calibration_data input usb 3 C 1 80d 80d PATCH [66d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error 4 14d 94d 💬 1 [27d]
general protection fault in usb_gadget_udc_reset (4) usb 2 9 3d22h 99d
INFO: task hung in rpm_resume (2) usb pm 1 C 17 6h28m 111d
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 387 1h01m 111d PATCH [75d]
general protection fault in count_matching_names (2) usb 2 syz 4 26d 114d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 128 7h55m 117d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start bluetooth usb 17 857 2h49m 119d
WARNING in dev_shutdown (7) usb net -1 syz error 22 13d 135d
WARNING: ODEBUG bug in trace_suspend_resume net usb -1 7 95d 146d
general protection fault in su3000_i2c_transfer usb media 2 C done 191 3h43m 163d PATCH [53d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 357 7h28m 164d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 4 3d04h 169d 💬 6 [168d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 54 5d10h 174d
INFO: task hung in console_callback (6) input usb 1 C error 13 23d 201d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 93 6h24m 226d
INFO: task hung in dvb_usbv2_probe usb 1 C error 300 17h41m 246d
KASAN: slab-use-after-free Read in report_descriptor_read usb input 19 56 7d18h 253d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 391 2d06h 255d PATCH [69d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 209 3d01h 274d PATCH [264d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 864 6h50m 275d PATCH [271d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 93 2h54m 283d PATCH [237d]
BUG: corrupted list in az6007_i2c_xfer usb media 15 C error 8 8d18h 286d PATCH [76d]
INFO: task hung in usbnet_disconnect (3) net usb 1 83 17d 295d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 40d 308d PATCH [110d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 415 10h55m 314d PATCH [237d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 206d 339d
general protection fault in status_show usb 2 C 14 13d 380d PATCH [228d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 28 4d04h 399d
general protection fault in dummy_timer (2) usb 2 syz 65 7d16h 434d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 186d 474d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 133d 477d
possible deadlock in input_inject_event usb fs 4 C done 2277 26m 492d PATCH [107d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 11 4d11h 500d 💬 3 [3d11h]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 115 3d16h 506d PATCH [86d]
WARNING in enable_work usb pm -1 C error 1308 9h30m 529d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error 423 16d 553d PATCH [530d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 21 60d 561d 💬 1 [561d]
possible deadlock in assign_fw usb 4 C done 170 26d 574d
WARNING in usb_free_urb usb media -1 C inconclusive 4653 2h02m 609d PATCH [237d]
INFO: rcu detected stall in schedule (7) usb 1 C done 60 26d 615d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2161 1d06h 627d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 574 13d 634d 💬 3 [6d16h]
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 24 C error 24 10d 671d 💬 1 [670d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 113 7d08h 676d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 24 310 2d12h 681d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 101 16h29m 720d 💬 2 [646d]
KASAN: stack-out-of-bounds Read in sched_show_task usb input serial 17 C 166 25d 865d PATCH [849d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 19 29d 867d 💬 1 [13d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 380 1d07h 895d 💬 1 [632d]
INFO: rcu detected stall in console_callback usb input serial 1 C error 18 14d 897d
INFO: task hung in usbdev_release (2) usb 1 C error error 110 6d14h 907d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 498 8d11h 967d 💬 4 [696d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 13d 975d
INFO: task hung in hub_port_init (3) usb 1 C error 974 4h14m 1041d 💬 16 [66d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 1093 55m 1082d 💬 3 [97d]
INFO: task hung in hub_event (3) usb 1 814 20h20m 1114d 💬 12 [632d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 316d 1137d 💬 14 [443d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive 807 16d 1154d 💬 5 [97d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 24 152 15h49m 1219d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1416 8d14h 1404d 💬 3 [4d00h]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C 32 6h25m 1609d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1035d 1656d PATCH [1424d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3418 9m 1812d PATCH [1602d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3412 10h30m 1859d PATCH [1596d]
INFO: task hung in usbdev_open (2) usb 1 C error 2283 1h16m 1860d 💬 1 [4d00h]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 5d09h 1879d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 645d 1899d 💬 1 [1845d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 167d 2356d PATCH [636d]
KASAN: use-after-free Read in v4l2_fh_init usb media 19 C error inconclusive 7083 1h39m 2480d 💬 4 [4d00h]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in usbtmc_read_bulk_cb usb 19 1 11d 7d20h
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 1 25d 21d
general protection fault in set_link_state usb 2 1 38d 34d
BUG: unable to handle kernel NULL pointer dereference in mon_text_release usb 10 1 43d 39d
general protection fault in vhci_send_cmd_submit usb 2 2 5d07h 45d
KCSAN: data-race in usbdev_ioctl / usbdev_ioctl (14) usb 6 3 23d 47d
KASAN: slab-use-after-free Read in usb_unanchor_urb usb 19 1 68d 64d