syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 420
Parent subsystem(s): kernel (91)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in v4l2_open media usb 19 C error 9 4h21m 4d03h PATCH [3d18h]
memory leak in dvb_register_device media usb 3 C 1 21d 35d PATCH [34d]
KASAN: slab-use-after-free Read in event_handler usb 19 5 61d 61d
memory leak in ldisc_receive net input usb 3 C 2 5d22h 64d PATCH [57d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error error 8 36d 70d 💬 10 [68d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 66d 77d 💬 1 [62d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 3 77d 77d
INFO: task hung in hci_register_dev (2) usb 1 syz error error 1 87d 86d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 3 67d 91d
BUG: soft lockup in dummy_timer usb 1 344 33d 101d
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 12 14h03m 108d
WARNING in cm109_urb_irq_callback usb input -1 C 46 99d 112d
WARNING in usb_start_wait_urb usb -1 C error 79 99d 112d PATCH [91d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error error 5 28d 143d 💬 1 [77d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 453 10d 161d PATCH [124d]
general protection fault in count_matching_names (2) usb 2 syz 4 5d23h 163d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 199 16h18m 167d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb 17 1303 1h18m 169d
WARNING in dev_shutdown (7) usb net -1 syz error error 23 4d05h 185d
general protection fault in su3000_i2c_transfer usb media 2 C done 221 11d 213d PATCH [23d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 456 21h20m 214d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 5 14d 219d 💬 6 [218d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 77 6h50m 224d
INFO: task hung in console_callback (6) input usb 1 C error error 14 28d 250d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 119 8d08h 276d
INFO: task hung in dvb_usbv2_probe usb 1 C error 344 1h01m 296d
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 65 5d20h 303d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 484 8h10m 305d PATCH [118d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 238 1d06h 323d PATCH [313d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 952 4d17h 324d PATCH [321d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 182 7h57m 332d PATCH [287d]
BUG: corrupted list in az6007_i2c_xfer usb media 15 C error 11 7d17h 336d PATCH [125d]
INFO: task hung in usbnet_disconnect (3) net usb 1 84 25d 344d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 90d 358d PATCH [160d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 509 1d20h 363d PATCH [287d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 255d 389d
general protection fault in status_show usb 2 C 14 28d 430d PATCH [278d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 31 7d08h 449d
general protection fault in dummy_timer (2) usb 2 syz 75 5d20h 484d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 235d 523d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 182d 527d
possible deadlock in input_inject_event usb fs 4 C done 2598 19m 541d PATCH [156d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 13 3d15h 549d 💬 3 [52d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 133 2d12h 555d PATCH [135d]
WARNING in enable_work usb pm -1 C error 1426 1d05h 579d
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 65d 602d PATCH [580d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 22 29d 611d 💬 1 [611d]
possible deadlock in assign_fw usb 4 C done error 176 10h51m 623d
WARNING in usb_free_urb usb media -1 C inconclusive 5211 8h34m 659d PATCH [287d]
INFO: rcu detected stall in schedule (7) usb 1 C done error 64 14d 664d
INFO: task hung in jbd2_journal_commit_transaction (5) usb ext4 1 C error 2176 22h08m 677d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 581 20d 684d 💬 3 [24d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 122 8h20m 725d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 322 1d01h 730d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 108 3d11h 769d 💬 2 [695d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 75d 914d PATCH [898d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 21 12d 916d 💬 1 [33d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 390 2d10h 944d 💬 1 [682d]
INFO: rcu detected stall in console_callback usb input serial 1 C error error 18 63d 946d
INFO: task hung in usbdev_release (2) usb 1 C error error 113 21d 956d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 546 8h41m 1017d 💬 4 [745d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 63d 1024d
INFO: task hung in hub_port_init (3) usb 1 C error 1001 5d05h 1090d 💬 16 [115d]
WARNING in usb_tx_block/usb_submit_urb usb libertas -1 C 1865 33d 1132d 💬 3 [22d]
INFO: task hung in hub_event (3) usb 1 845 3h07m 1163d 💬 12 [682d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 365d 1187d 💬 14 [492d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 65d 1203d 💬 5 [147d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 166 8h31m 1268d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1434 3d16h 1453d 💬 3 [22d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C error 35 12d 1658d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1085d 1706d PATCH [1474d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 3855 17m 1861d PATCH [1651d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3527 16h37m 1909d PATCH [1645d]
INFO: task hung in usbdev_open (2) usb 1 C error 2633 3h26m 1909d 💬 1 [22d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 5d20h 1928d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 695d 1948d 💬 1 [1894d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 217d 2405d PATCH [685d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in usbtmc_read_bulk_cb usb 19 1 61d 57d
KASAN: slab-use-after-free Read in raw_queue_event (2) usb 19 2 37d 71d
general protection fault in set_link_state usb 2 1 88d 84d
general protection fault in vhci_send_cmd_submit usb 2 2 54d 95d