Reminder: 28 open syzbot bugs in media subsystem

From: Eric Biggers
Date: Wed Jun 26 2019 - 23:53:21 EST

[This email was generated by a script. Let me know if you have any suggestions
to make it better.]

Of the currently open syzbot reports against the upstream kernel, I've manually
marked 28 of them as possibly being bugs in the media subsystem. I've listed
these reports below, sorted by an algorithm that tries to list first the reports
most likely to be still valid, important, and actionable.

Of these 28 bugs, 9 were seen in mainline in the last week.

Of these 28 bugs, 4 were bisected to commits from the following people:

Dafna Hirschfeld <dafna3@xxxxxxxxx>
Helen Koike <helen.koike@xxxxxxxxxxxxx>
Hans Verkuil <hans.verkuil@xxxxxxxxx>

If you believe a bug is no longer valid, please close the syzbot report by
sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the
original thread, as explained at https://goo.gl/tpsmEJ#status

If you believe I misattributed a bug to the media subsystem, please let me know,
and if possible forward the report to the correct people or mailing list.

Here are the bugs:

--------------------------------------------------------------------------------
Title: WARNING in vb2_core_reqbufs
Last occurred: 0 days ago
Reported: 239 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=aaf17ca3f8ef677356e61bbe7e2c1af7f4398ec3
Original thread: https://lkml.kernel.org/lkml/00000000000069922505797781b0@xxxxxxxxxx/T/#u

This bug has a C reproducer.

This bug was bisected to:

commit 3b15f68e19c28a76d175f61943a8c23224afce93
Author: Dafna Hirschfeld <dafna3@xxxxxxxxx>
Date: Mon Jan 21 11:46:18 2019 +0000

  media: vicodec: Add support for resolution change event.

No one replied to the original thread for this bug.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+f9966a25169b6d66d61f@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000069922505797781b0@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: BUG: unable to handle kernel paging request in tpg_fill_plane_buffer
Last occurred: 1 day ago
Reported: 211 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=f620d34965777e9d309c58394ade94dbd3e3b0a8
Original thread: https://lkml.kernel.org/lkml/0000000000005b7c64057ba003fb@xxxxxxxxxx/T/#u

This bug has a syzkaller reproducer only.

This bug was bisected to:

commit f2fe89061d79706eca5c47e4efdc09bbc171e74a
Author: Helen Koike <helen.koike@xxxxxxxxxxxxx>
Date: Fri Apr 7 17:55:19 2017 +0000

  [media] vimc: Virtual Media Controller core, capture and sensor

No one replied to the original thread for this bug.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+aa8212f63ea8ffaf3bfa@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000005b7c64057ba003fb@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in v4l2_release
Last occurred: 1 day ago
Reported: 72 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=775f90f43cfd6f8ac6c15251ce68e604453da226
Original thread: https://lkml.kernel.org/lkml/00000000000086f7f20586929239@xxxxxxxxxx/T/#u

This bug has a C reproducer.

No one has replied to the original thread for this bug yet.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+a4387f5b6b799f6becbf@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000086f7f20586929239@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: WARNING in __vb2_queue_cancel
Last occurred: 0 days ago
Reported: 240 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=dd5aa153a2344f5f39e656692bc58dfe86e0423f
Original thread: https://lkml.kernel.org/lkml/0000000000002cf4a10579616456@xxxxxxxxxx/T/#u

This bug has a C reproducer.

No one replied to the original thread for this bug.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+736c3aae4af7b50d9683@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000002cf4a10579616456@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: general protection fault in flexcop_usb_probe
Last occurred: 0 days ago
Reported: 75 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=c0203bd72037d07493f4b7562411e4f5f4553a8f
Original thread: https://lkml.kernel.org/lkml/00000000000010fe260586536e86@xxxxxxxxxx/T/#u

This bug has a C reproducer.

No one has replied to the original thread for this bug yet.

This looks like a bug in a media USB driver.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+d93dff37e6a89431c158@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000010fe260586536e86@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: WARNING in spi_register_controller
Last occurred: 0 days ago
Reported: 75 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=c2f000b7826e712b064b66b32ed73e21ee09d7a5
Original thread: https://lkml.kernel.org/lkml/00000000000089dace058653b58e@xxxxxxxxxx/T/#u

This bug has a C reproducer.

No one has replied to the original thread for this bug yet.

This looks like a bug in a media USB driver.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+c60ddb60b685777d9d59@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000089dace058653b58e@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: INFO: trying to register non-static key in mxl111sf_ctrl_msg
Last occurred: 0 days ago
Reported: 73 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=d7240bc21ef4b00a01e5ac7a7e616bdb7da26104
Original thread: https://lkml.kernel.org/lkml/000000000000f64e71058683105b@xxxxxxxxxx/T/#u

This bug has a C reproducer.

No one has replied to the original thread for this bug yet.

This looks like a bug in a media USB driver.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+5ca0bf339f13c4243001@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000f64e71058683105b@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KASAN: global-out-of-bounds Read in hdpvr_probe
Last occurred: 1 day ago
Reported: 55 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=69bf3422c0eb7a37dec8c1a6c2d56ea40bf6bacf
Original thread: https://lkml.kernel.org/lkml/000000000000bc655f0587e6e01f@xxxxxxxxxx/T/#u

This bug has a C reproducer.

No one has replied to the original thread for this bug yet.

This looks like a bug in a media USB driver.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+aac8d0d7205f112045d2@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000bc655f0587e6e01f@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in read_sensor_register
Last occurred: 1 day ago
Reported: 19 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=cd81ee9a4ef2297ef27f95a3637b3f8a3db71de2
Original thread: https://lkml.kernel.org/lkml/000000000000f8c953058ac2dae4@xxxxxxxxxx/T/#u

This bug has a C reproducer.

No one has replied to the original thread for this bug yet.

This looks like a bug in a media USB driver.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+06ddf1788cfd048c5e82@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000f8c953058ac2dae4@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in sd_init
Last occurred: 3 days ago
Reported: 22 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=3fc6579f907ab3449adb030e8dc65fafdb8e09e4
Original thread: https://lkml.kernel.org/lkml/0000000000009bf1bd058a887277@xxxxxxxxxx/T/#u

This bug has a C reproducer.

No one has replied to the original thread for this bug yet.

This looks like a bug in a media USB driver.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+1a35278dd0ebfb3a038a@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000009bf1bd058a887277@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in v4l2_fh_init
Last occurred: 9 days ago
Reported: 68 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=378c929b412e1ceac0d515df2156365827384ba4
Original thread: https://lkml.kernel.org/lkml/000000000000ec53de0586e309fc@xxxxxxxxxx/T/#u

This bug has a C reproducer.

No one has replied to the original thread for this bug yet.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+c025d34b8eaa54c571b8@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000ec53de0586e309fc@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in v4l2_ioctl
Last occurred: 9 days ago
Reported: 73 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=ba05259158f35e969fff5418080482392e23ccf9
Original thread: https://lkml.kernel.org/lkml/00000000000003799c05868311b9@xxxxxxxxxx/T/#u

This bug has a C reproducer.

No one has replied to the original thread for this bug yet.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+d587871cd33a9bc7c086@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000003799c05868311b9@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: BUG: unable to handle kernel paging request in au0828_usb_disconnect
Last occurred: 2 days ago
Reported: 58 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=4b76fcf12dea9e3aec69294b5d66b0831b60c627
Original thread: https://lkml.kernel.org/lkml/000000000000ffc8c80587aa1bb1@xxxxxxxxxx/T/#u

Unfortunately, this bug does not have a reproducer.

No one has replied to the original thread for this bug yet.

This looks like a bug in a media USB driver.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+15e91d49c4c757c3d363@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000ffc8c80587aa1bb1@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in technisat_usb2_rc_query
Last occurred: 20 days ago
Reported: 73 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=928bdd0e4f3f9b6b57b3772861c28da2382272e1

This bug has a C reproducer.

For some reason the syzbot dashboard doesn't contain a link to the original
thread for this bug, so my script couldn't provide a link to it in this
reminder. Try searching for the bug title.

--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in i2c_w
Last occurred: 23 days ago
Reported: 22 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=5b6be32aa55adc05444701e80c3b1eae5d9079d2
Original thread: https://lkml.kernel.org/lkml/000000000000a0a468058a88723d@xxxxxxxxxx/T/#u

This bug has a C reproducer.

No one has replied to the original thread for this bug yet.

This looks like a bug in a media USB driver.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+397fd082ce5143e2f67d@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000a0a468058a88723d@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KASAN: null-ptr-deref Read in refcount_sub_and_test_checked (2)
Last occurred: 23 days ago
Reported: 224 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=17535f4bf5b322437f7c639b59161ce343fc55a9
Original thread: https://lkml.kernel.org/lkml/00000000000057e614057a9abcd3@xxxxxxxxxx/T/#u

This bug has a C reproducer.

No one replied to the original thread for this bug.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+0468b73bdbb243217224@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000057e614057a9abcd3@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KASAN: use-after-free Write in __vb2_cleanup_fileio
Last occurred: 237 days ago
Reported: 240 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=0264f823322ea8600fbe3fb7e9e016569ca542d8
Original thread: https://lkml.kernel.org/lkml/000000000000204051057963c4dc@xxxxxxxxxx/T/#u

This bug has a C reproducer.

syzbot has bisected this bug, but I think the bisection result is incorrect.

No one replied to the original thread for this bug.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+4e12d2d56f8ccc65c180@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000204051057963c4dc@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in hdpvr_probe
Last occurred: 1 day ago
Reported: 1 day ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=b1fc93b6998238f231f3eb1ea1cf29524e3d6e69
Original thread: https://lkml.kernel.org/lkml/0000000000003fc6ef058c2db557@xxxxxxxxxx/T/#u

Unfortunately, this bug does not have a reproducer.

No one has replied to the original thread for this bug yet.

This looks like a bug in a media USB driver.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+79d18aac4bf1770dd050@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000003fc6ef058c2db557@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: INFO: task hung in vivid_stop_generating_vid_cap
Last occurred: 237 days ago
Reported: 240 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=4c0ccb254972cc51bdf6838cb1eff4fcc00de597
Original thread: https://lkml.kernel.org/lkml/00000000000080601805795ada2e@xxxxxxxxxx/T/#u

This bug has a C reproducer.

This bug was bisected to:

commit f2fe89061d79706eca5c47e4efdc09bbc171e74a
Author: Helen Koike <helen.koike@xxxxxxxxxxxxx>
Date: Fri Apr 7 17:55:19 2017 +0000

  [media] vimc: Virtual Media Controller core, capture and sensor

The original thread for this bug received 2 replies; the last was 96 days ago.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+06283a66a648cd073885@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000080601805795ada2e@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in __video_do_ioctl
Last occurred: 8 days ago
Reported: 73 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=b723ac4eeadd7c7b8a881613a7f1a060fb6d3e22
Original thread: https://lkml.kernel.org/lkml/00000000000014c6b305868311d3@xxxxxxxxxx/T/#u

Unfortunately, this bug does not have a reproducer.

No one has replied to the original thread for this bug yet.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+5b7575b3f6820232e17c@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000014c6b305868311d3@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: possible deadlock in v4l2_release
Last occurred: 183 days ago
Reported: 222 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=72dff36edffc3e8a3a0895aaf03b46d545a5dd5d
Original thread: https://lkml.kernel.org/lkml/0000000000005943f3057acf6a1e@xxxxxxxxxx/T/#u

This bug has a C reproducer.

This bug was bisected to:

commit 757fdb51c14fda221ccb6999a865f7f895c79750
Author: Hans Verkuil <hans.verkuil@xxxxxxxxx>
Date: Mon May 21 08:54:59 2018 +0000

  media: vivid: add request support

No one replied to the original thread for this bug.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+ea05c832a73d0615bf33@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000005943f3057acf6a1e@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KASAN: use-after-free Write in v4l2_prio_close
Last occurred: 25 days ago
Reported: 23 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=716a2d0ec0d1a591dfabca8a0d8b7f5bcaae2e31
Original thread: https://lkml.kernel.org/lkml/000000000000f7047d058a69d653@xxxxxxxxxx/T/#u

Unfortunately, this bug does not have a reproducer.

No one has replied to the original thread for this bug yet.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+a6566701042e6e3e4ed1@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000f7047d058a69d653@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: general protection fault in vb2_mmap
Last occurred: 183 days ago
Reported: 228 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=4cf5ee79b52a4797c5bd40a58bd6ab243d40de48
Original thread: https://lkml.kernel.org/lkml/00000000000014008b057a598671@xxxxxxxxxx/T/#u

This bug has a C reproducer.

No one replied to the original thread for this bug.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+52e5bf0ebfa66092937a@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000014008b057a598671@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KASAN: use-after-free Write in v4l2_device_release
Last occurred: 48 days ago
Reported: 58 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=8dbc8bd83de779b45f4a1d4cf3ba40c28207cae8
Original thread: https://lkml.kernel.org/lkml/000000000000fb811f0587aa1b7f@xxxxxxxxxx/T/#u

Unfortunately, this bug does not have a reproducer.

No one has replied to the original thread for this bug yet.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+62d0ec9a8d05fffcf12e@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000fb811f0587aa1b7f@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in v4l2_fh_del
Last occurred: 56 days ago
Reported: 55 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=62eb6d89717b65b3f05b33bf7cf5b5dbf68f71a6
Original thread: https://lkml.kernel.org/lkml/000000000000c08c230587e6e01e@xxxxxxxxxx/T/#u

Unfortunately, this bug does not have a reproducer.

No one has replied to the original thread for this bug yet.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+d53275bc1af5eb01bfff@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000c08c230587e6e01e@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: WARNING in dma_buf_vunmap
Last occurred: 187 days ago
Reported: 226 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=163388d1fb80146cd3ba22a11a5a1995c3eaaafe
Original thread: https://lkml.kernel.org/lkml/000000000000aa8703057a7ea0bb@xxxxxxxxxx/T/#u

This bug has a C reproducer.

syzbot has bisected this bug, but I think the bisection result is incorrect.

No one replied to the original thread for this bug.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+a9317fe7ad261fc76b88@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000aa8703057a7ea0bb@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: BUG: unable to handle kernel paging request in osq_lock
Last occurred: 65 days ago
Reported: 69 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=541944363389fada3583295a3454a1eac5089fd6
Original thread: https://lkml.kernel.org/lkml/000000000000e9e1990586cd3e40@xxxxxxxxxx/T/#u

Unfortunately, this bug does not have a reproducer.

No one has replied to the original thread for this bug yet.

This looks like a bug in a media USB driver.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+e5c9afc3e1eed1dfc2b0@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000e9e1990586cd3e40@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: divide error in vivid_thread_vid_cap
Last occurred: 143 days ago
Reported: 142 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=794f27cf99870643a7e8429418b3a1093be4c363
Original thread: https://lkml.kernel.org/lkml/0000000000002ccf9905810b34a5@xxxxxxxxxx/T/#u

Unfortunately, this bug does not have a reproducer.

No one replied to the original thread for this bug.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+75293f834026a7e97684@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000002ccf9905810b34a5@xxxxxxxxxx