syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 424
Parent subsystem(s): kernel (101)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
memory leak in v4l2_ctrl_handler_init_class (3) media usb 3 C 5 8d05h 8d09h PATCH [1d01h]
KASAN: slab-use-after-free Read in hidraw_report_event input usb 19 C error 4 18d 19d PATCH [18d]
KASAN: stack-out-of-bounds Write in carl9170_handle_command_response wireless usb prio:high 21 C 24 8h27m 22d PATCH [14d]
KASAN: slab-use-after-free Read in hiddev_disconnect (4) actionable input usb 19 2 7d20h 44d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed usb media -1 C error 91 3d22h 51d PATCH [50d]
WARNING in as102_dvb_dmx_start_feed usb media -1 C error 1155 6d08h 51d 💬 1 [13d]
KASAN: invalid-free in dev_free (3) usb 24 1 55d 51d PATCH [50d]
KMSAN: uninit-value in rtl8150_open (2) net usb 7 3 5d11h 52d PATCH [22d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer usb media 17 C error 9 19d 53d PATCH [13d]
KASAN: slab-use-after-free Read in v4l2_open usb media prio:high 19 C error 729 5m 58d PATCH [57d]
WARNING in igorplugusb_probe/usb_submit_urb usb media -1 C error 2021 1h13m 58d PATCH [11d]
memory leak in dvb_register_device media usb 3 C 1 5d17h 89d PATCH [88d]
KASAN: slab-use-after-free Read in event_handler usb 19 7 21h04m 115d
memory leak in ldisc_receive net usb 3 C 2 38d 118d PATCH [111d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error error 8 20d 124d 💬 10 [122d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 50d 131d 💬 1 [49d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 4 42d 131d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 13 1d07h 145d
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 12 26d 162d PATCH [1d19h]
WARNING in cm109_urb_irq_callback usb input -1 C 46 153d 166d
WARNING in usb_start_wait_urb usb -1 C error 79 153d 166d PATCH [145d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error error 13 1d19h 197d 💬 1 [131d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 614 5h27m 215d PATCH [178d]
general protection fault in count_matching_names (2) usb 2 syz 5 16d 217d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 291 5h10m 221d PATCH [1d01h]
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 2017 2h18m 223d PATCH [1d01h]
WARNING in dev_shutdown (7) usb net -1 syz error error 24 16d 239d
general protection fault in su3000_i2c_transfer usb media 2 C done 248 7d18h 267d PATCH [77d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 502 14h26m 268d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 5 36d 273d PATCH [10d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 89 3d00h 278d
INFO: task hung in console_callback (6) input usb 1 C error error 18 6d14h 304d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 148 5d16h 330d
INFO: task hung in dvb_usbv2_probe usb 1 C error 371 3h11m 350d PATCH [1d07h]
KASAN: slab-use-after-free Read in report_descriptor_read input usb 19 93 15h19m 356d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 564 6h36m 359d PATCH [172d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 308 10h12m 377d PATCH [367d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 1037 1d03h 378d PATCH [375d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 248 1d07h 386d PATCH [340d]
BUG: corrupted list in az6007_i2c_xfer usb media prio:high 15 C error 12 21d 390d PATCH [179d]
INFO: task hung in usbnet_disconnect (3) net usb 1 84 79d 398d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 3d21h 412d PATCH [214d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb -1 C error 689 6h16m 417d PATCH [340d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 309d 443d
general protection fault in status_show usb 2 C 16 3d17h 484d PATCH [331d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 31 5d06h 502d
general protection fault in dummy_timer (2) usb 2 syz 80 9d01h 538d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 289d 577d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 236d 581d
possible deadlock in input_inject_event usb fs 4 C done 3499 1h24m 595d PATCH [210d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 16 6h56m 603d 💬 3 [44d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 213 21h10m 609d PATCH [189d]
WARNING in enable_work usb pm -1 C error 1811 7d06h 632d 💬 2 [25d]
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 119d 656d PATCH [634d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 22 83d 665d 💬 1 [665d]
possible deadlock in assign_fw usb 4 C done error 183 2d07h 677d
WARNING in usb_free_urb usb media -1 C inconclusive 7162 1h43m 713d PATCH [15d]
INFO: rcu detected stall in schedule (7) usb 1 C done error 66 40d 718d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 632 6h05m 737d 💬 3 [16d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input -1 C error 172 10h48m 779d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 340 2d14h 784d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 115 6d01h 823d 💬 2 [749d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 129d 968d PATCH [952d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 22 6d03h 970d 💬 1 [87d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 399 1d19h 998d 💬 1 [735d]
INFO: rcu detected stall in console_callback usb input serial 1 C error error 18 117d 1000d
INFO: task hung in usbdev_release (2) usb 1 C error error 121 2d00h 1010d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 592 2d16h 1070d 💬 4 [799d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 117d 1078d
INFO: task hung in hub_port_init (3) usb 1 C error 1008 5d07h 1144d 💬 16 [13d]
INFO: task hung in hub_event (3) usb 1 863 19h11m 1217d 💬 12 [735d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 419d 1241d 💬 14 [546d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 119d 1257d 💬 5 [201d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 179 2d05h 1322d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1441 3h39m 1507d 💬 3 [13d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C error 35 2d07h 1712d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1139d 1760d PATCH [1528d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 4066 30d 1915d PATCH [1705d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3632 1d02h 1963d PATCH [1699d]
INFO: task hung in usbdev_open (2) usb 1 C error 3053 1h05m 1963d 💬 1 [13d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 1h59m 1982d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 748d 2002d 💬 1 [1948d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 271d 2459d PATCH [739d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Write in iowarrior_write_callback (2) usb 22 1 8d08h 4d08h
general protection fault in mon_text_release usb 10 2 14d 36d