syzbot


usb subsystem


List(s): linux-usb@vger.kernel.org
Fixed bugs: 424
Parent subsystem(s): kernel (104)
Child subsystems: usb-storage (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
memory leak in v4l2_ctrl_handler_init_class (3) media usb 3 C 8 2d23h 11d PATCH [4d12h]
KASAN: slab-use-after-free Read in hidraw_report_event input usb 19 C error 4 21d 22d PATCH [6h55m]
KASAN: stack-out-of-bounds Write in carl9170_handle_command_response wireless usb prio:high 21 C 26 23m 25d PATCH [18d]
KASAN: slab-use-after-free Read in hiddev_disconnect (4) actionable input usb prio:high 19 2 11d 48d
INFO: trying to register non-static key in as102_dvb_dmx_start_feed usb media -1 C error 91 7d10h 54d PATCH [54d]
WARNING in as102_dvb_dmx_start_feed usb media -1 C error 1155 9d19h 54d 💬 1 [17d]
KASAN: invalid-free in dev_free (3) usb 24 1 59d 55d PATCH [54d]
KMSAN: uninit-value in rtl8150_open (2) net usb 7 3 8d22h 55d PATCH [26d]
KASAN: slab-out-of-bounds Read in ec168_i2c_xfer usb media 17 C error 9 23d 56d PATCH [16d]
KASAN: slab-use-after-free Read in v4l2_open prio:high usb media 19 C error 807 now 61d PATCH [61d]
WARNING in igorplugusb_probe/usb_submit_urb usb media -1 C error 2095 10m 61d PATCH [15d]
memory leak in dvb_register_device media usb 3 C 1 9d04h 92d PATCH [92d]
KASAN: slab-use-after-free Read in event_handler usb 19 7 4d08h 119d
memory leak in ldisc_receive net usb prio:low 3 C 2 41d 122d PATCH [115d]
INFO: task hung in i2c_tiny_usb_disconnect usb 1 C error error 8 23d 128d 💬 10 [126d]
INFO: trying to register non-static key in i2c_register_adapter usb i2c -1 C 4 53d 134d 💬 1 [53d]
WARNING: ODEBUG bug in rtl_usb_disconnect usb -1 syz 4 46d 135d
KASAN: slab-use-after-free Read in vhci_tx_loop usb 19 13 4d18h 148d
WARNING in ADDR_ctrl_msg/usb_submit_urb usb -1 C error 16 2d12h 165d PATCH [3d08h]
WARNING in cm109_urb_irq_callback usb input -1 C 46 157d 169d
WARNING in usb_start_wait_urb usb -1 C error 79 157d 170d PATCH [149d]
BUG: corrupted list in usb_hcd_link_urb_to_ep (5) usb 8 syz error error 13 5d06h 201d 💬 1 [134d]
KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2) input usb 19 C error 620 5h00m 218d PATCH [182d]
general protection fault in count_matching_names (2) usb 2 syz 5 20d 220d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop usb 17 295 7h49m 224d PATCH [4d12h]
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 2106 28m 226d PATCH [4d12h]
WARNING in dev_shutdown (7) usb net -1 syz error error 24 19d 242d
general protection fault in su3000_i2c_transfer usb media prio:low 2 C done 248 11d 270d PATCH [81d]
INFO: rcu detected stall in hub_event (2) usb 1 C error 504 10h52m 271d
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb 17 C 5 1d15h 276d PATCH [13d]
INFO: task hung in dvb_usbv2_exit usb 1 C error 89 6d11h 281d
INFO: task hung in console_callback (6) input usb prio:high 1 C error error 18 10d 308d
WARNING in dib0700_ctrl_rd/usb_submit_urb usb -1 C error 148 9d03h 333d
INFO: task hung in dvb_usbv2_probe usb 1 C error 374 1d16h 353d PATCH [4d18h]
KASAN: slab-use-after-free Read in report_descriptor_read input usb prio:high 19 96 6h07m 360d
WARNING in dtv5100_i2c_msg/usb_submit_urb usb -1 C error 572 23h36m 362d PATCH [176d]
INFO: task hung in dvb_usb_i2c_exit usb 1 C error 316 1d03h 380d PATCH [370d]
KMSAN: kernel-infoleak in i2cdev_ioctl_smbus usb i2c 9 C 1040 2d00h 382d PATCH [378d]
WARNING in gl861_ctrl_msg/usb_submit_urb usb -1 C error 250 20h36m 389d PATCH [344d]
BUG: corrupted list in az6007_i2c_xfer usb media prio:high 15 C error 12 24d 393d PATCH [183d]
KASAN: slab-use-after-free Read in load_firmware_cb (2) usb media 19 C 5 7d08h 415d PATCH [217d]
WARNING in dib0700_i2c_xfer/usb_submit_urb usb prio:low -1 C error 695 15h11m 421d PATCH [344d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 313d 446d
general protection fault in status_show usb 2 C 16 7d04h 487d PATCH [335d]
WARNING in usb_stor_msg_common/usb_submit_urb usb usb-storage -1 syz error 31 8d17h 506d
general protection fault in dummy_timer (2) usb 2 syz 81 1d20h 541d
WARNING: ODEBUG bug in __folio_put (2) usb mm -1 syz 28 292d 581d
INFO: rcu detected stall in do_syscall_64 input usb 1 syz 23 239d 584d
possible deadlock in input_inject_event usb fs 4 C done 3545 1h22m 599d PATCH [214d]
KASAN: use-after-free Read in em28xx_close_extension (2) usb media 19 C error 16 3d18h 607d 💬 3 [48d]
general protection fault in dvb_usbv2_generic_write usb media 2 C error 215 1d16h 613d PATCH [193d]
WARNING in enable_work usb pm -1 C error 1811 10d 636d 💬 2 [28d]
WARNING in smsusb_init_device/usb_submit_urb usb media -1 C error error 423 122d 659d PATCH [637d]
INFO: rcu detected stall in lapb_t1timer_expiry (2) usb x25 1 C error error 22 87d 668d 💬 1 [668d]
possible deadlock in assign_fw usb 4 C done 184 3d00h 681d
WARNING in usb_free_urb usb media -1 C inconclusive 7181 37m 716d PATCH [19d]
INFO: rcu detected stall in schedule (7) usb 1 C done error 66 44d 722d
WARNING in kernfs_get (5) usb kernfs -1 syz inconclusive 647 20h35m 741d 💬 3 [19d]
WARNING in cm109_input_open/usb_submit_urb (3) usb input prio:high -1 C error 178 9h21m 783d
KASAN: slab-use-after-free Read in __usb_hcd_giveback_urb (2) usb 22 341 3d03h 788d
WARNING in wdm_rxwork/usb_submit_urb (2) usb -1 C unreliable 115 9d12h 827d 💬 2 [753d]
KASAN: stack-out-of-bounds Read in sched_show_task input usb serial 17 C 166 132d 972d PATCH [956d]
INFO: task hung in __input_unregister_device (5) usb input 1 C done error 22 9d14h 974d 💬 1 [90d]
INFO: task hung in get_bMaxPacketSize0 usb 1 C error 400 2d05h 1002d 💬 1 [739d]
INFO: rcu detected stall in console_callback usb input serial 1 C error error 18 120d 1003d
INFO: task hung in usbdev_release (2) usb 1 C error error 121 5d12h 1014d
INFO: rcu detected stall in newfstatat (3) usb 1 C done 593 2d18h 1074d 💬 4 [803d]
kernel BUG in cdc_ncm_fill_tx_frame usb -1 syz error error 5 120d 1082d
INFO: task hung in hub_port_init (3) usb prio:low 1 C error 1008 8d18h 1148d 💬 16 [17d]
INFO: task hung in hub_event (3) usb 1 864 1d05h 1220d 💬 12 [739d]
INFO: task hung in usb_get_descriptor (2) usb 1 C inconclusive error 862 423d 1244d 💬 14 [550d]
INFO: rcu detected stall in syscall_exit_to_user_mode (2) usb 1 C inconclusive error 807 123d 1261d 💬 5 [204d]
KASAN: use-after-free Read in usb_anchor_resume_wakeups (4) usb 22 179 5d16h 1326d
KASAN: use-after-free Read in em28xx_init_extension (2) usb media 19 C done 1441 3d14h 1511d 💬 3 [17d]
WARNING in pvr2_send_request_ex/usb_submit_urb usb pvrusb2 -1 C error 35 5d19h 1716d
INFO: task hung in pn533_finalize_setup nfc usb 1 C unreliable error 8 1142d 1763d PATCH [1531d]
KASAN: use-after-free Read in v4l2_fh_open usb media 19 C unreliable inconclusive 4066 33d 1919d PATCH [1709d]
WARNING in cm109_urb_irq_callback/usb_submit_urb usb input prio:low -1 C unreliable 3640 55m 1966d PATCH [1703d]
INFO: task hung in usbdev_open (2) usb 1 C error 3074 6h15m 1967d 💬 1 [17d]
possible deadlock in zd_chip_disable_rxtx usb wireless 4 C 44 3d13h 1986d
WARNING in corrupted/usb_submit_urb (2) usb -1 C error done 69 752d 2006d 💬 1 [1952d]
WARNING in smsusb_start_streaming/usb_submit_urb usb media -1 C error inconclusive 173 274d 2463d PATCH [743d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Write in iowarrior_write_callback (2) usb 22 1 11d 7d19h
general protection fault in mon_text_release usb 10 2 18d 39d