[syzbot] Monthly input report (Sep 2026)

[syzbot]

Hello input maintainers/developers,

This is a 31-day syzbot report for the input subsystem.
All related reports/information can be found at:
https://syzkaller.appspot.com/upstream/s/input

During the period, 6 new issues were detected and 1 were fixed.
In total, 33 issues are still open and 66 have already been fixed.
There are also 4 low-priority issues.

Some of the still happening issues:

Ref  Crashes Repro Title
<1>  1367    Yes   KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2)
                   https://syzkaller.appspot.com/bug?extid=1018672fe70298606e5f
<2>  199     Yes   KASAN: slab-use-after-free Read in report_descriptor_read
                   https://syzkaller.appspot.com/bug?extid=bc537ca7a0efe33988eb
<3>  87      No    KASAN: slab-use-after-free Read in str_to_user (2)
                   https://syzkaller.appspot.com/bug?extid=aec1962419768c5caf88
<4>  51      Yes   WARNING: ODEBUG bug in hid_device_remove
                   https://syzkaller.appspot.com/bug?extid=f8fb5598924c7e645553
<5>  40      Yes   INFO: task hung in devres_release_group (2)
                   https://syzkaller.appspot.com/bug?extid=d789904ff97c2f3dac88
<6>  21      Yes   BUG: sleeping function called from invalid context in __hid_request
                   https://syzkaller.appspot.com/bug?extid=912222e4cb82423535fa
<7>  20      Yes   KASAN: slab-use-after-free Read in input_dev_uevent (2)
                   https://syzkaller.appspot.com/bug?extid=2a123f6269da57ffefaa
<8>  18      No    WARNING in roccat_open
                   https://syzkaller.appspot.com/bug?extid=e7b6bbf6cf88d7d932c3
<9>  12      Yes   KASAN: slab-out-of-bounds Read in aqc_raw_event
                   https://syzkaller.appspot.com/bug?extid=9ee5f5dc18673d6b2f37
<10> 7       Yes   KASAN: slab-use-after-free Read in atkbd_set_repeat_rate
                   https://syzkaller.appspot.com/bug?extid=1e2ef9bcb29af666b2e6

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@xxxxxxxxxxxxxxxx.

To disable reminders for individual bugs, reply with the following command:
#syz set <Ref> no-reminders

To change bug's subsystems, reply with:
#syz set <Ref> subsystems: new-subsystem

You may send multiple commands in a single email message.