syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 424
Parent subsystem(s): kernel (101)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
memory leak in v4l2_ctrl_handler_init_class (3) media usb 3 C 8 11h29m 9d08h PATCH [2d00h]
KASAN: slab-use-after-free Read in hidraw_report_event input usb 19 C error 4 19d 20d PATCH [19d]
KASAN: stack-out-of-bounds Write in carl9170_handle_command_response wireless usb prio:high 21 C 25 12h06m 23d PATCH [15d]
KASAN: slab-use-after-free Read in hiddev_disconnect (4) actionable input usb 19 2 8d19h 45d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed usb media -1 C error 91 4d21h 52d PATCH [51d]
WARNING in as102_dvb_dmx_start_feed usb media -1 C error 1155 7d07h 52d 💬 1 [14d]
KASAN: invalid-free in dev_free (3) usb 24 1 56d 52d PATCH [51d]
KMSAN: uninit-value in rtl8150_open (2) net usb 7 3 6d10h 53d PATCH [23d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer usb media 17 C error 9 20d 54d PATCH [14d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 C error 753 36m 59d PATCH [58d]
WARNING in igorplugusb_probe/usb_submit_urb usb media -1 C error 2033 6h57m 59d PATCH [12d]
memory leak in dvb_register_device media usb 3 C 1 6d16h 90d PATCH [89d]
KASAN: slab-use-after-free Read in event_handler usb 19 7 1d20h 116d
memory leak in ldisc_receive net usb 3 C 2 39d 119d PATCH [112d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error error 8 21d 125d 💬 10 [123d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 50d 131d 💬 1 [50d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 4 43d 132d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 13 2d06h 146d
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 16 45m 163d PATCH [20h22m]
WARNING in cm109_urb_irq_callback usb input -1 C 46 154d 167d
WARNING in usb_start_wait_urb usb -1 C error 79 154d 167d PATCH [146d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error error 13 2d18h 198d 💬 1 [132d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 615 12h55m 216d PATCH [179d]
general protection fault in count_matching_names (2) usb 2 syz 5 17d 218d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 292 12h49m 222d PATCH [2d00h]
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 2041 11m 224d PATCH [2d00h]
WARNING in dev_shutdown (7) usb net -1 syz error error 24 17d 240d
general protection fault in su3000_i2c_transfer usb media 2 C done 248 8d17h 268d PATCH [78d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 503 7h01m 269d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 5 37d 274d PATCH [11d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 89 3d23h 279d
INFO: task hung in console_callback (6) input usb prio:high 1 C error error 18 7d13h 305d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 148 6d15h 331d
INFO: task hung in dvb_usbv2_probe usb 1 C error 372 13h25m 351d PATCH [2d06h]
KASAN: slab-use-after-free Read in report_descriptor_read input usb prio:high 19 93 1d14h 357d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 567 38m 360d PATCH [173d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 308 1d09h 378d PATCH [368d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 1037 2d02h 379d PATCH [376d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 249 13h57m 387d PATCH [341d]
BUG: corrupted list in az6007_i2c_xfer usb media prio:high 15 C error 12 22d 391d PATCH [180d]
INFO: task hung in usbnet_disconnect (3) net usb 1 84 80d 399d
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 4d20h 413d PATCH [214d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb prio:low -1 C error 690 15h55m 418d PATCH [341d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 310d 444d
general protection fault in status_show usb 2 C 16 4d16h 485d PATCH [332d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 31 6d05h 503d
general protection fault in dummy_timer (2) usb 2 syz 80 10d 539d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 290d 578d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 237d 581d
possible deadlock in input_inject_event usb fs 4 C done 3509 1h58m 596d PATCH [211d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 16 1d05h 604d 💬 3 [45d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 214 12h30m 610d PATCH [190d]
WARNING in enable_work usb pm -1 C error 1811 8d05h 633d 💬 2 [26d]
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 120d 657d PATCH [635d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 22 84d 666d 💬 1 [666d]
possible deadlock in assign_fw usb 4 C done error 184 12h15m 678d
WARNING in usb_free_urb usb media -1 C inconclusive 7166 11h23m 714d PATCH [16d]
INFO: rcu detected stall in schedule (7) usb 1 C done error 66 41d 719d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 636 2h23m 738d 💬 3 [17d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input prio:high -1 C error 174 16h34m 780d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 341 15h15m 785d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 115 7d00h 824d 💬 2 [750d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 130d 969d PATCH [953d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 22 7d02h 971d 💬 1 [88d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 399 2d18h 999d 💬 1 [736d]
INFO: rcu detected stall in console_callback usb input serial 1 C error error 18 118d 1001d
INFO: task hung in usbdev_release (2) usb 1 C error error 121 2d23h 1011d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 593 6h49m 1071d 💬 4 [800d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 118d 1079d
INFO: task hung in hub_port_init (3) usb prio:low 1 C error 1008 6d06h 1145d 💬 16 [14d]
INFO: task hung in hub_event (3) usb 1 863 1d18h 1218d 💬 12 [736d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 420d 1242d 💬 14 [547d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 120d 1258d 💬 5 [202d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 179 3d04h 1323d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1441 1d02h 1508d 💬 3 [14d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C error 35 3d07h 1713d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1140d 1761d PATCH [1529d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 4066 31d 1916d PATCH [1706d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input -1 C unreliable 3632 2d01h 1964d PATCH [1700d]
INFO: task hung in usbdev_open (2) usb 1 C error 3060 1h02m 1964d 💬 1 [14d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 1d01h 1983d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 749d 2003d 💬 1 [1949d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 272d 2460d PATCH [740d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Write in iowarrior_write_callback (2) usb 22 1 9d07h 5d07h
general protection fault in mon_text_release usb 10 2 15d 37d