Reminder: 8 open syzbot bugs in input subsystem
From: Eric Biggers
Date: Tue Jul 23 2019 - 22:27:41 EST
[This email was generated by a script. Let me know if you have any suggestions
to make it better, or if you want it re-generated with the latest status.]
Of the currently open syzbot reports against the upstream kernel, I've manually
marked 8 of them as possibly being bugs in the input subsystem. I've listed
these reports below, sorted by an algorithm that tries to list first the reports
most likely to be still valid, important, and actionable.
Of these 8 bugs, 6 were seen in mainline in the last week.
If you believe a bug is no longer valid, please close the syzbot report by
sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the
original thread, as explained at https://goo.gl/tpsmEJ#status
If you believe I misattributed a bug to the input subsystem, please let me know,
and if possible forward the report to the correct people or mailing list.
Here are the bugs:
--------------------------------------------------------------------------------
Title: WARNING in aiptek_open/usb_submit_urb
Last occurred: 0 days ago
Reported: 46 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=0e35393fd821f0570b2a1663a01ac7bdcd15046a
Original thread: https://lkml.kernel.org/lkml/0000000000001abc1c058ab95b3e@xxxxxxxxxx/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in an input USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+75cccf2b7da87fb6f84b@xxxxxxxxxxxxxxxxxxxxxxxxx
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000001abc1c058ab95b3e@xxxxxxxxxx
--------------------------------------------------------------------------------
Title: INFO: trying to register non-static key in usbtouch_open
Last occurred: 0 days ago
Reported: 0 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=19bb4d1c56f91465a4a9f5396f0607d487947838
Original thread: https://lkml.kernel.org/lkml/000000000000b69261058e589a1b@xxxxxxxxxx/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in an input USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+f9c21a30eb9d374e30c1@xxxxxxxxxxxxxxxxxxxxxxxxx
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000b69261058e589a1b@xxxxxxxxxx
--------------------------------------------------------------------------------
Title: WARNING in kbtab_open/usb_submit_urb
Last occurred: 0 days ago
Reported: 0 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=ad3a473cad38ce6fbd413eac666501abdc471d31
Original thread: https://lkml.kernel.org/lkml/000000000000fa7ce2058e5c8318@xxxxxxxxxx/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in an input USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+c7df50363aaff50aa363@xxxxxxxxxxxxxxxxxxxxxxxxx
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000fa7ce2058e5c8318@xxxxxxxxxx
--------------------------------------------------------------------------------
Title: WARNING in iforce_get_id_packet/usb_submit_urb
Last occurred: 4 days ago
Reported: 13 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=bd1dc4784ff2c89f9d35cd17b02a4a0e1baa1df4
Original thread: https://lkml.kernel.org/lkml/000000000000a901ed058d51adc3@xxxxxxxxxx/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in an input USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+9584b712baf1965b590c@xxxxxxxxxxxxxxxxxxxxxxxxx
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000a901ed058d51adc3@xxxxxxxxxx
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in usb_anchor_resume_wakeups
Last occurred: 0 days ago
Reported: 14 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=21616f648e5fb8ca17de9b869fec3b27270b9edb
Original thread: https://lkml.kernel.org/lkml/000000000000e9312b058d3eadb8@xxxxxxxxxx/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in an input USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+58e201002fe1e775e1ae@xxxxxxxxxxxxxxxxxxxxxxxxx
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000e9312b058d3eadb8@xxxxxxxxxx
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Write in usb_anchor_resume_wakeups
Last occurred: 2 days ago
Reported: 14 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=f51395a36f8f9cc43f9538a1c961b87ff7dff3d3
Original thread: https://lkml.kernel.org/lkml/000000000000ede4ad058d3ead9e@xxxxxxxxxx/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in an input USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+6c355f8d5f11884fa38e@xxxxxxxxxxxxxxxxxxxxxxxxx
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000ede4ad058d3ead9e@xxxxxxxxxx
--------------------------------------------------------------------------------
Title: INFO: trying to register non-static key in usbtouch_reset_resume
Last occurred: 33 days ago
Reported: 57 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=64fd387d8358406dc0037511ee44db159f6f1605
Original thread: https://lkml.kernel.org/lkml/0000000000005463aa0589dcfb85@xxxxxxxxxx/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in an input USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+933daad9be4e67ba91a9@xxxxxxxxxxxxxxxxxxxxxxxxx
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000005463aa0589dcfb85@xxxxxxxxxx
--------------------------------------------------------------------------------
Title: INFO: task hung in evdev_release
Last occurred: 273 days ago
Reported: 280 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=ebbbff1dcac574b81f9fd5e07100a4879e5bf53d
Original thread: https://lkml.kernel.org/lkml/000000000000f1be430578524a20@xxxxxxxxxx/T/#u
This bug has a syzkaller reproducer only.
syzbot has bisected this bug, but I think the bisection result is incorrect.
The original thread for this bug received 1 reply, 113 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+a979743610b4755d4d57@xxxxxxxxxxxxxxxxxxxxxxxxx
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000f1be430578524a20@xxxxxxxxxx