syzbot


Out of 163 bugs, 140 were automatically obsoleted (43 due to revoked reproducers), 23 were invalidated by users.
Applied filters: Label=subsystems:io-uring (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
KCSAN: data-race in __se_sys_io_uring_enter / io_submit_sqes io-uring 6 1 67d 67d
INFO: task hung in io_uring_register (6) io-uring 1 1 103d 103d
INFO: rcu detected stall in io_fallback_req_func io-uring 1 1 113d 113d
KCSAN: data-race in io_submit_sqes / io_uring_poll (9) io-uring 6 1 79d 79d
INFO: rcu detected stall in io_sq_thread (2) io-uring 1 1 128d 128d
INFO: task hung in io_file_get_fixed io-uring 1 2 171d 183d
WARNING: [time_after(jiffies, timeout)] io_uring/io_uring.c:LINE at io_ring_exit_work, CPU: kworker/u8:NUM/NUM io-uring -1 1 94d 94d
memory leak in iovec_from_user (5) io-uring 3 syz 1 104d 100d
KCSAN: data-race in __io_queue_proc / io_poll_wake (5) io-uring 6 1 159d 159d
memory leak in iovec_from_user (4) io-uring 3 C 1 105d 105d
memory leak in iovec_from_user (3) io-uring 3 C 1 107d 106d
KASAN: slab-use-after-free Read in io_poll_remove_entries (2) io-uring 19 1 153d 152d
KCSAN: data-race in io_wq_worker / kthread_is_per_cpu io-uring 6 1 225d 225d
INFO: task hung in io_handle_tw_list io-uring 1 1 265d 265d
general protection fault in io_uring_show_fdinfo (4) io-uring 2 C done 28 188d 187d
general protection fault in io_uring_show_fdinfo (3) io-uring 2 C 9 189d 189d
INFO: rcu detected stall in io_uring_setup bpf io-uring 1 2 286d 294d
KCSAN: data-race in __io_queue_proc / io_poll_wake (4) io-uring 6 4 256d 341d
WARNING in io_req_task_complete io-uring -1 2 304d 393d
KCSAN: data-race in io_sq_offload_create / prepare_creds io-uring 6 1 262d 262d
WARNING in __vmap_pages_range_noflush (2) io-uring -1 C 8 233d 231d
INFO: task hung in io_wq_put_and_exit (5) io-uring input usb 1 C done 9 261d 280d
INFO: task hung in vfs_coredump io-uring 1 syz 3 303d 301d
WARNING: io_uring/io_uring.c:LINE at io_ring_exit_work, CPU: kworker/u8:NUM/NUM io-uring -1 2 317d 313d
INFO: task hung in io_uring_del_tctx_node (4) io-uring 1 C done 8 335d 331d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (4) io-uring 6 8 398d 520d
INFO: task hung in sys_io_uring_enter io-uring 1 1 433d 433d
KMSAN: uninit-value in putname io-uring 7 1 371d 366d
KCSAN: data-race in io_sq_thread / io_sq_thread_stop io-uring 6 4 432d 492d
INFO: task hung in io_uring_alloc_task_context (5) io-uring 1 1 478d 478d
INFO: rcu detected stall in io_uring_enter (4) io-uring 1 1 481d 481d
possible deadlock in io_uring_mmap io-uring 4 1 417d 413d
INFO: rcu detected stall in sys_io_uring_setup (2) io-uring mm 1 2 505d 549d
KCSAN: data-race in io_recv / io_wq_free_work io-uring 6 2 502d 502d
INFO: rcu detected stall in io_handle_tw_list io-uring 1 2 546d 568d
WARNING in io_get_cqe_overflow (2) io-uring -1 C done 9 541d 541d
INFO: task hung in io_wq_worker io-uring 1 1 586d 586d
INFO: rcu detected stall in io_uring_enter (3) io-uring 1 1 598d 598d
INFO: task hung in sys_io_uring_register (3) io-uring 1 1 599d 599d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (3) io-uring 6 2 558d 559d
KCSAN: data-race in __io_queue_proc / io_poll_wake (3) io-uring 6 2 575d 575d
WARNING in io_sq_thread io-uring -1 1 616d 612d
INFO: task hung in io_uring_register (5) io-uring 1 1 655d 655d
KCSAN: data-race in io_submit_sqes / io_uring_poll (8) io-uring 6 18 603d 676d
KCSAN: data-race in io_flush_timeouts / io_issue_sqe io-uring 6 1 605d 605d
INFO: task hung in io_uring_del_tctx_node (3) io-uring 1 1 664d 664d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (2) io-uring 6 6 613d 625d
INFO: task hung in io_put_sq_data io-uring 1 1 709d 709d
INFO: rcu detected stall in io_uring_enter (2) io-uring 1 1 723d 723d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (11) io-uring 6 1 669d 669d
general protection fault in try_to_wake_up (2) io-uring 19 C done done 3588 649d 1888d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (3) io-uring 6 2 680d 685d
KCSAN: data-race in __flush_work / __flush_work io-uring 6 1 684d 684d
KCSAN: data-race in __io_commit_cqring_flush / io_submit_sqes io-uring 6 1 691d 691d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work io-uring 6 3 696d 723d
kernel BUG in __io_remove_buffers io-uring -1 C error 9 756d 757d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running (2) io-uring 6 5 719d 725d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker io-uring 6 16 715d 726d
INFO: task hung in io_uring_register (4) io-uring 1 1 777d 777d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (10) io-uring 6 1 727d 727d
kernel BUG in put_page io-uring -1 C error 2 757d 757d
KCSAN: data-race in io_submit_sqes / io_uring_poll (7) io-uring 6 1 743d 743d
KCSAN: data-race in __io_queue_proc / io_poll_wake (2) io-uring 6 2 757d 757d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_unregister io-uring 6 1 777d 777d
WARNING in unsafe_follow_pfn media io-uring -1 C done 33 1808d 1856d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (9) io-uring 6 2 800d 818d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register (2) io-uring 6 1 802d 802d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (8) io-uring 6 2 810d 836d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_register io-uring 6 1 836d 836d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (7) io-uring 6 2 888d 870d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (8) io-uring 6 1 889d 869d
KCSAN: data-race in io_submit_sqes / io_uring_poll (6) io-uring 6 1 899d 870d
KCSAN: data-race in __io_queue_proc / io_poll_wake io-uring 6 1 916d 916d
KMSAN: uninit-value in io_req_cqe_overflow io-uring 7 C 622 971d 1331d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (7) io-uring 6 1 958d 952d
general protection fault in worker_thread (2) io-uring 2 syz 1 1043d 1039d
KCSAN: data-race in __io_uring_show_fdinfo / io_submit_sqes io-uring 6 1 978d 964d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running io-uring 6 17 973d 959d
INFO: task hung in io_ring_exit_work io-uring 1 C unreliable unreliable 820 1030d 1850d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (6) io-uring 6 4 996d 1042d
BUG: unable to handle kernel NULL pointer dereference in __io_remove_buffers io-uring 10 1 1069d 1065d
INFO: task hung in io_wq_put_and_exit (3) io-uring 1 C error unreliable 75 1103d 1498d
INFO: task hung in io_uring_del_tctx_node (2) io-uring 1 C error error 20 1143d 1506d
WARNING in io_ring_exit_work io-uring -1 C done done 3550 1096d 1870d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register io-uring 6 1 1064d 1064d
KASAN: use-after-free Read in io_fallback_tw io-uring 19 C error 33 1199d 1203d
KASAN: use-after-free Read in snd_rawmidi_poll io-uring sound 19 C error 20 1199d 1203d
KASAN: use-after-free Read in io_poll_remove_entries io-uring 19 C done done 751 1119d 1499d
memory leak in create_io_worker (2) io-uring fs 3 C 4 1261d 1526d
INFO: task hung in sys_io_uring_register (2) io-uring 1 syz error error 2 1158d 1154d
INFO: task hung in io_uring_register (3) io-uring 1 syz error error 2 1159d 1155d
KASAN: use-after-free Read in io_wqe_worker (2) io-uring 19 C error done 3 1175d 1206d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (5) io-uring 6 1 1094d 1094d
KCSAN: data-race in io_wqe_activate_free_worker / io_wqe_worker io-uring 6 386 1098d 1482d
KCSAN: data-race in io_wq_worker_running / io_wqe_activate_free_worker io-uring 6 599 1098d 1456d
KCSAN: data-race in io_submit_sqes / io_uring_poll (5) io-uring 6 21 1100d 1289d
INFO: task hung in io_req_task_cancel io-uring 1 1 1159d 1159d
BUG: bad usercopy in io_openat2_prep (3) io-uring -1 C 12 1164d 1163d
KASAN: use-after-free Read in tctx_task_work (2) io-uring fs 19 C unreliable 358 1183d 1714d
KCSAN: data-race in __io_fill_cqe_req / io_timeout io-uring 6 2 1128d 1101d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (2) io-uring 6 1 1123d 1123d
INFO: task hung in io_uring_enter io-uring 1 1 1150d 1150d
KCSAN: data-race in io_sqpoll_wait_sq / io_submit_sqes io-uring 6 1 1125d 1125d
KASAN: use-after-free Read in io_fallback_req_func io-uring 19 C error 18 1199d 1203d
KASAN: use-after-free Read in create_worker_cb fs io-uring 19 C done 3 1856d 1856d
KASAN: use-after-free Read in sock_def_wakeup sctp io-uring 19 C error 2 1200d 1202d
WARNING in __put_task_struct (3) io-uring mm -1 C error 4 1202d 1203d
KASAN: use-after-free Read in pipe_release (2) fs io-uring 19 C error 2 1202d 1198d
KASAN: use-after-free Read in snd_pcm_post_stop sound io-uring 19 C error 1 1202d 1202d
WARNING in follow_hugetlb_page mm io-uring -1 C inconclusive 34 1444d 1447d
KASAN: slab-out-of-bounds Read in mas_leaf_max_gap mm io-uring 19 syz error 3 1241d 1285d
general protection fault in __io_sync_cancel io-uring 10 C error inconclusive 11 1337d 1344d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (4) io-uring 6 4 1147d 1188d
general protection fault in io_issue_sqe io-uring fs 12 C done unreliable 502 1342d 1700d
INFO: rcu detected stall in io_ring_exit_work fs io-uring 1 C error 6 1635d 1677d
general protection fault in __io_queue_sqe fs io-uring 2 C done 11 1716d 1717d
general protection fault in io_queue_sqe_fallback io-uring 2 1 1170d 1166d
KASAN: use-after-free Read in io_wq_put_and_exit io-uring 19 21 1201d 1204d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_unregister io-uring 6 1 1155d 1155d
KCSAN: data-race in __io_fill_cqe_req / io_uring_poll (2) io-uring 6 1 1170d 1170d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel (2) io-uring 6 1 1170d 1170d
INFO: task hung in io_uring_alloc_task_context (4) io-uring 1 2 1280d 1284d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker (2) io-uring 6 1 1161d 1161d
WARNING: refcount bug in io_send_zc_cleanup io-uring 13 1 1180d 1176d
KASAN: use-after-free Read in __io_req_task_work_add io-uring 19 7 1199d 1203d
KASAN: use-after-free Read in io_poll_task_func io-uring 19 1 1199d 1199d
WARNING: ODEBUG bug in __io_put_task io-uring -1 2 1202d 1203d
KASAN: use-after-free Read in io_req_caches_free io-uring 19 1 1203d 1203d
INFO: task hung in io_uring_register (2) io-uring 1 1 1299d 1299d
KASAN: use-after-free Read in signalfd_cleanup ext4 io-uring 19 C 4 1202d 1203d
general protection fault in __fget_files fs io-uring 2 syz done 2 2003d 2003d
general protection fault in io_uring_flush io-uring fs 2 syz error 1 2040d 2039d
KCSAN: data-race in __io_req_complete_post / io_uring_poll io-uring 6 29 1252d 1364d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker io-uring 6 1 1255d 1255d
BUG: corrupted list in io_uring_del_tctx_node io-uring 8 1 1313d 1312d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel io-uring 6 1 1270d 1270d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (3) io-uring 6 2 1284d 1312d
KCSAN: data-race in __io_req_complete_post / io_wake_function (2) io-uring 6 4 1289d 1318d
possible deadlock in io_disarm_next fs io-uring 4 C done 5 1467d 1470d
INFO: task hung in io_poll_tw_hash_eject io-uring 1 1 1353d 1353d
KASAN: use-after-free Read in io_poll_check_events io-uring fs 19 C done 20 1486d 1530d
KASAN: use-after-free Write in __io_free_req fs io-uring 22 syz done 1 1643d 1643d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel io-uring 6 1 1328d 1328d
memory leak in io_submit_sqes (3) fs io-uring 3 C 1 1797d 1796d
general protection fault in __io_arm_poll_handler fs io-uring 2 C done unreliable 3 1697d 1698d
KCSAN: data-race in io_submit_sqes / io_uring_poll (4) io-uring 6 123 1341d 1507d
KMSAN: uninit-value in io_fallback_req_func fs io-uring 7 C 8 1468d 1468d
KCSAN: data-race in __do_sys_io_uring_register / io_sqe_buffers_register (3) io-uring 6 1 1344d 1344d
memory leak in anon_inode_getfile io-uring fs 3 C 3 1991d 1997d
memory leak in rw_copy_check_uvector fs io-uring 3 C 1 2077d 2077d
KMSAN: uninit-value in io_req_caches_free fs io-uring 7 C 6 1524d 1600d
KASAN: use-after-free Write in paging32_walk_addr_generic io-uring kvm-x86 22 C done error 6 1987d 2080d
kernel BUG in io_queue_async_work io-uring fs -1 C error unreliable 14 1747d 1752d
WARNING: refcount bug in io_wqe_worker io-uring fs 13 C error error 6 2026d 2059d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (2) io-uring 6 5 1352d 1388d
KCSAN: data-race in __io_req_complete_post / io_wake_function io-uring 6 1 1354d 1354d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (6) io-uring 6 2 1355d 1378d
INFO: rcu detected stall in tctx_task_work (2) fs io-uring 1 syz unreliable 4 1634d 1640d
WARNING in io_poll_task_func (2) fs io-uring -1 C done 1 1639d 1637d
WARNING in io_poll_task_func fs io-uring -1 C done 4 1640d 1639d
WARNING: ODEBUG bug in __put_task_struct mm io-uring -1 syz done 1 1643d 1641d
INFO: rcu detected stall in tctx_task_work fs io-uring 1 C done 9 1641d 1641d
kernel panic: panic_on_warn set (2) io-uring 2 syz error 1 1694d 1694d