syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 429
Parent subsystem(s): kernel (89)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING in __carl9170_tx_process_status wireless usb prio:high -1 C 5 4d05h 4d06h
INFO: rcu detected stall in sys_epoll_wait (9) mm usb input prio:high 1 C error 1 10d 8d15h
KASAN: slab-use-after-free Read in uea_upload_pre_firmware prio:high usb 19 C error 8 2d06h 8d15h PATCH [6d03h]
KMSAN: uninit-value in steam_register prio:high input usb 7 3 31d 29d PATCH [9d20h]
WARNING in igorplugusb_cmd/usb_submit_urb prio:low media usb -1 C 1 43d 39d PATCH [21d]
INFO: rcu detected stall in __fsnotify_parent (3) prio:high fs input usb 1 syz error error 2 2d06h 49d 💬 1 [43d]
memory leak in v4l2_ctrl_handler_init_class (3) prio:high usb media 3 C 13 8d12h 61d PATCH [10d]
KASAN: stack-out-of-bounds Write in carl9170_handle_command_response prio:high usb wireless 21 C 87 5h00m 75d PATCH [1d23h]
INFO: task hung in devres_release_group (2) prio:high input usb 1 C error 35 2d10h 81d
KASAN: slab-use-after-free Read in hiddev_disconnect (4) actionable prio:high input usb 19 2 61d 98d PATCH [8d14h]
INFO: trying to register non-static key in as102_dvb_dmx_start_feed prio:high usb media -1 C error 91 27d 104d PATCH [35d]
WARNING in as102_dvb_dmx_start_feed prio:high usb media -1 C error error 1155 59d 104d PATCH [35d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer prio:normal usb media 17 C error 9 72d 106d PATCH [38d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 C error 2168 1h50m 111d PATCH [110d]
WARNING in igorplugusb_probe/usb_submit_urb prio:low usb media -1 C error 2364 30d 111d PATCH [64d]
memory leak in dvb_register_device prio:high media usb 3 C 2 3d20h 142d PATCH [7d05h]
KASAN: slab-use-after-free Read in event_handler prio:normal usb 19 9 16d 169d PATCH [39d]
memory leak in ldisc_receive prio:low usb net 3 C 2 91d 171d PATCH [164d]
INFO: task hung in i2c_tiny_usb_disconnect prio:low usb 1 C error error 8 73d 177d 💬 10 [175d]
INFO: trying to register non-static key in i2c_register_adapter prio:high usb i2c -1 C 4 103d 184d 💬 1 [102d]
WARNING: ODEBUG bug in rtl_usb_disconnect prio:high usb -1 syz 4 95d 185d
KASAN: slab-use-after-free Read in vhci_tx_loop prio:high usb 19 23 1d12h 198d
WARNING in ADDR_ctrl_msg/usb_submit_urb prio:low usb -1 C error 18 23d 215d PATCH [53d]
WARNING in cm109_urb_irq_callback prio:low usb input -1 C 46 206d 219d
WARNING in usb_start_wait_urb prio:low usb -1 C error 79 206d 219d PATCH [198d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) prio:high usb 8 C error error 20 4h47m 250d 💬 3 [17h09m]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) prio:high input usb 19 C error 868 5h44m 268d PATCH [10d]
general protection fault in count_matching_names (2) usb 2 syz 6 37d 270d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop prio:normal usb 17 453 12h14m 274d PATCH [48d]
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start prio:normal bluetooth usb 17 3207 now 276d PATCH [48d]
WARNING in dev_shutdown (7) prio:high usb net -1 syz error error 25 33d 292d
general protection fault in su3000_i2c_transfer prio:low usb media 2 C done 261 12h42m 320d PATCH [131d]
INFO: rcu detected stall in hub_event (2) prio:low usb 1 C error 549 19h21m 321d PATCH [15d]
INFO: task hung in dvb_usbv2_exit prio:low usb 1 C error 105 2d20h 331d
INFO: task hung in console_callback (6) prio:high input usb 1 C error error 19 43m 357d
WARNING in dib0700_ctrl_rd/usb_submit_urb prio:low usb -1 C error 153 14d 383d PATCH [16d]
INFO: task hung in dvb_usbv2_probe prio:low usb 1 C error 437 10h42m 403d PATCH [54d]
KASAN: slab-use-after-free Read in report_descriptor_read prio:high input usb 19 131 5d07h 410d
WARNING in dtv5100_i2c_msg/usb_submit_urb prio:low usb -1 C error 689 17h08m 412d PATCH [225d]
INFO: task hung in dvb_usb_i2c_exit prio:high usb 1 C error 381 7d07h 430d PATCH [420d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus prio:normal usb i2c 9 C 1099 21d 431d PATCH [428d]
WARNING in gl861_ctrl_msg/usb_submit_urb prio:low usb -1 C error 316 8h22m 439d PATCH [394d]
BUG: corrupted list in az6007_i2c_xfer prio:high usb media 15 C error error 12 74d 443d PATCH [233d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 21d 465d PATCH [267d]
WARNING in dib0700_i2c_xfer/usb_submit_urb prio:low usb -1 C error 737 7d12h 470d PATCH [394d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 362d 496d
general protection fault in status_show prio:high usb 2 C 16 15d 537d PATCH [385d]
WARNING in usb_stor_msg_common/usb_submit_urb prio:high usb usb-storage -1 syz error 31 24d 556d
general protection fault in dummy_timer (2) prio:high usb 15 C 88 5d14h 591d
WARNING: ODEBUG bug in __folio_put (2) prio:high usb mm -1 syz 28 342d 630d
INFO: rcu detected stall in do_syscall_64 prio:high input usb 1 syz 23 289d 634d
possible deadlock in input_inject_event prio:high usb fs 4 C done 3956 22d 648d PATCH [263d]
KASAN: use-after-free Read in em28xx_close_extension (2) prio:high usb media 19 C error 17 24d 656d 💬 3 [97d]
general protection fault in dvb_usbv2_generic_write prio:low usb media 8 C error 334 2d08h 662d PATCH [242d]
WARNING in enable_work prio:high usb -1 C error 1824 3d22h 686d 💬 2 [4d08h]
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 172d 709d PATCH [687d]
WARNING in usb_free_urb prio:high usb media -1 C inconclusive 7274 2d06h 766d PATCH [69d]
INFO: task hung in kernfs_add_one usb kernfs 1 C error done 100 12d 771d
INFO: rcu detected stall in schedule (7) usb 1 C done error 71 3d18h 771d
WARNING in kernfs_get (5) prio:high usb kernfs -1 syz inconclusive 734 4h04m 791d 💬 3 [7d00h]
WARNING in cm109_input_open/usb_submit_urb (3) prio:high usb input -1 C error 233 12h19m 832d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) prio:high usb 22 355 3d05h 837d
WARNING in wdm_rxwork/usb_submit_urb (2) prio:low usb -1 C unreliable 122 5d03h 876d 💬 2 [803d]
KASAN: stack-out-of-bounds Read in sched_show_task prio:high input usb serial 17 C 166 182d 1021d PATCH [1006d]
INFO: task hung in __input_unregister_device (5) prio:high usb input 1 C done error 22 59d 1023d 💬 1 [47d]
INFO: task hung in get_bMaxPacketSize0 prio:high usb 1 C error 432 10d 1051d 💬 1 [4d08h]
INFO: rcu detected stall in console_callback input usb serial 1 C error error 18 170d 1053d
INFO: task hung in usbdev_release (2) prio:high usb 1 C error error 128 2d22h 1063d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 645 12h07m 1124d 💬 4 [853d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 30d 1131d
INFO: task hung in hub_port_init (3) prio:low usb 1 C error 1121 16h24m 1198d 💬 16 [67d]
INFO: task hung in hub_event (3) prio:high usb 1 945 1d18h 1270d 💬 12 [4d08h]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 472d 1294d 💬 14 [599d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 173d 1310d 💬 5 [254d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 202 11h19m 1375d
KASAN: use-after-free Read in em28xx_init_extension (2) prio:high usb media 19 C done 1458 9d03h 1560d PATCH [7d21h]
WARNING in pvr2_send_request_ex/usb_submit_urb prio:high usb pvrusb2 -1 C error 35 7d01h 1765d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1192d 1813d PATCH [1581d]
KASAN: use-after-free Read in v4l2_fh_open prio:high usb media 19 C unreliable inconclusive 4066 83d 1968d PATCH [1758d]
WARNING in cm109_urb_irq_callback/usb_submit_urb prio:low usb input -1 C unreliable 3748 1h40m 2016d PATCH [1752d]
INFO: task hung in usbdev_open (2) usb 1 C error 3213 1h49m 2017d 💬 1 [67d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 12d 2035d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 802d 2055d 💬 1 [2001d]
WARNING in smsusb_start_streaming/usb_submit_urb prio:high usb media -1 C error inconclusive 173 324d 2512d PATCH [792d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in mon_text_release prio:normal usb 10 2 67d 89d