[syzbot] Monthly input report (Aug 2026)

Hello input maintainers/developers,

This is a 31-day syzbot report for the input subsystem.
All related reports/information can be found at:
https://syzkaller.appspot.com/upstream/s/input

During the period, 9 new issues were detected and 1 were fixed.
In total, 26 issues are still open and 65 have already been fixed.
There are also 4 low-priority issues.

Some of the still happening issues:

Ref Crashes Repro Title
<1> 1192    Yes   KASAN: slab-out-of-bounds Read in mcp2221_raw_event (2)
                  https://syzkaller.appspot.com/bug?extid=1018672fe70298606e5f
<2> 270     Yes   WARNING in cm109_input_open/usb_submit_urb (3)
                  https://syzkaller.appspot.com/bug?extid=ac0f9c4cc1e034160492
<3> 177     Yes   KASAN: slab-use-after-free Read in report_descriptor_read
                  https://syzkaller.appspot.com/bug?extid=bc537ca7a0efe33988eb
<4> 93      Yes   possible deadlock in __kernfs_remove (3)
                  https://syzkaller.appspot.com/bug?extid=1075f6dc93f398c1857e
<5> 51      Yes   INFO: task hung in console_callback (6)
                  https://syzkaller.appspot.com/bug?extid=6027421afa74a2ba440d
<6> 26      Yes   INFO: task hung in __input_unregister_device (5)
                  https://syzkaller.appspot.com/bug?extid=78e2288f58b881ed3c45
<7> 24      Yes   INFO: rcu detected stall in do_syscall_64
                  https://syzkaller.appspot.com/bug?extid=a3bc6ce74afdd295fe4b
<8> 13      Yes   KASAN: slab-use-after-free Read in input_dev_uevent (2)
                  https://syzkaller.appspot.com/bug?extid=2a123f6269da57ffefaa
<9> 8       Yes   possible deadlock in tasklet_action_common (2)
                  https://syzkaller.appspot.com/bug?extid=b5d7ab56d43de3fd5aac

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at [email protected].

To disable reminders for individual bugs, reply with the following command:
#syz set <Ref> no-reminders

To change bug's subsystems, reply with:
#syz set <Ref> subsystems: new-subsystem

You may send multiple commands in a single email message.