syzbot


Out of 158 bugs, 135 were automatically obsoleted (43 due to revoked reproducers), 23 were invalidated by users.
Applied filters: Label=subsystems:io-uring (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
INFO: task hung in io_file_get_fixed io-uring 1 2 114d 126d
WARNING: [time_after(jiffies, timeout)] io_uring/io_uring.c:LINE at io_ring_exit_work, CPU: kworker/u8:NUM/NUM io-uring -1 1 37d 37d
memory leak in iovec_from_user (5) io-uring 3 syz 1 47d 43d
KCSAN: data-race in __io_queue_proc / io_poll_wake (5) io-uring 6 1 102d 102d
memory leak in iovec_from_user (4) io-uring 3 C 1 48d 48d
memory leak in iovec_from_user (3) io-uring 3 C 1 50d 49d
KASAN: slab-use-after-free Read in io_poll_remove_entries (2) io-uring 19 1 96d 95d
KCSAN: data-race in io_wq_worker / kthread_is_per_cpu io-uring 6 1 168d 168d
INFO: task hung in io_handle_tw_list io-uring 1 1 208d 208d
general protection fault in io_uring_show_fdinfo (4) io-uring 2 C done 28 131d 130d
general protection fault in io_uring_show_fdinfo (3) io-uring 2 C 9 132d 132d
INFO: rcu detected stall in io_uring_setup bpf io-uring 1 2 229d 237d
KCSAN: data-race in __io_queue_proc / io_poll_wake (4) io-uring 6 4 199d 284d
WARNING in io_req_task_complete io-uring -1 2 247d 336d
KCSAN: data-race in io_sq_offload_create / prepare_creds io-uring 6 1 205d 205d
WARNING in __vmap_pages_range_noflush (2) io-uring -1 C 8 176d 174d
INFO: task hung in io_wq_put_and_exit (5) io-uring input usb 1 C done 9 204d 223d
INFO: task hung in vfs_coredump io-uring 1 syz 3 246d 244d
WARNING: io_uring/io_uring.c:LINE at io_ring_exit_work, CPU: kworker/u8:NUM/NUM io-uring -1 2 260d 256d
INFO: task hung in io_uring_del_tctx_node (4) io-uring 1 C done 8 278d 274d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (4) io-uring 6 8 341d 463d
INFO: task hung in sys_io_uring_enter io-uring 1 1 376d 376d
KMSAN: uninit-value in putname io-uring 7 1 314d 309d
KCSAN: data-race in io_sq_thread / io_sq_thread_stop io-uring 6 4 375d 435d
INFO: task hung in io_uring_alloc_task_context (5) io-uring 1 1 421d 421d
INFO: rcu detected stall in io_uring_enter (4) io-uring 1 1 424d 424d
possible deadlock in io_uring_mmap io-uring 4 1 360d 356d
INFO: rcu detected stall in sys_io_uring_setup (2) io-uring mm 1 2 448d 492d
KCSAN: data-race in io_recv / io_wq_free_work io-uring 6 2 445d 445d
INFO: rcu detected stall in io_handle_tw_list io-uring 1 2 489d 511d
WARNING in io_get_cqe_overflow (2) io-uring -1 C done 9 484d 484d
INFO: task hung in io_wq_worker io-uring 1 1 529d 529d
INFO: rcu detected stall in io_uring_enter (3) io-uring 1 1 541d 541d
INFO: task hung in sys_io_uring_register (3) io-uring 1 1 542d 542d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (3) io-uring 6 2 501d 502d
KCSAN: data-race in __io_queue_proc / io_poll_wake (3) io-uring 6 2 518d 518d
WARNING in io_sq_thread io-uring -1 1 559d 555d
INFO: task hung in io_uring_register (5) io-uring 1 1 598d 598d
KCSAN: data-race in io_submit_sqes / io_uring_poll (8) io-uring 6 18 546d 619d
KCSAN: data-race in io_flush_timeouts / io_issue_sqe io-uring 6 1 548d 548d
INFO: task hung in io_uring_del_tctx_node (3) io-uring 1 1 607d 607d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (2) io-uring 6 6 556d 568d
INFO: task hung in io_put_sq_data io-uring 1 1 652d 652d
INFO: rcu detected stall in io_uring_enter (2) io-uring 1 1 666d 666d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (11) io-uring 6 1 611d 611d
general protection fault in try_to_wake_up (2) io-uring 19 C done done 3588 592d 1831d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (3) io-uring 6 2 623d 628d
KCSAN: data-race in __flush_work / __flush_work io-uring 6 1 627d 627d
KCSAN: data-race in __io_commit_cqring_flush / io_submit_sqes io-uring 6 1 634d 634d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work io-uring 6 3 639d 666d
kernel BUG in __io_remove_buffers io-uring -1 C error 9 699d 699d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running (2) io-uring 6 5 662d 668d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker io-uring 6 16 658d 669d
INFO: task hung in io_uring_register (4) io-uring 1 1 720d 720d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (10) io-uring 6 1 670d 670d
kernel BUG in put_page io-uring -1 C error 2 700d 700d
KCSAN: data-race in io_submit_sqes / io_uring_poll (7) io-uring 6 1 686d 686d
KCSAN: data-race in __io_queue_proc / io_poll_wake (2) io-uring 6 2 700d 700d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_unregister io-uring 6 1 720d 720d
WARNING in unsafe_follow_pfn media io-uring -1 C done 33 1751d 1799d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (9) io-uring 6 2 743d 761d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register (2) io-uring 6 1 745d 745d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (8) io-uring 6 2 753d 779d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_register io-uring 6 1 779d 779d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (7) io-uring 6 2 831d 813d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (8) io-uring 6 1 832d 812d
KCSAN: data-race in io_submit_sqes / io_uring_poll (6) io-uring 6 1 842d 813d
KCSAN: data-race in __io_queue_proc / io_poll_wake io-uring 6 1 859d 859d
KMSAN: uninit-value in io_req_cqe_overflow io-uring 7 C 622 914d 1274d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (7) io-uring 6 1 901d 895d
general protection fault in worker_thread (2) io-uring 2 syz 1 986d 982d
KCSAN: data-race in __io_uring_show_fdinfo / io_submit_sqes io-uring 6 1 921d 907d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running io-uring 6 17 916d 902d
INFO: task hung in io_ring_exit_work io-uring 1 C unreliable unreliable 820 973d 1793d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (6) io-uring 6 4 939d 985d
BUG: unable to handle kernel NULL pointer dereference in __io_remove_buffers io-uring 10 1 1012d 1008d
INFO: task hung in io_wq_put_and_exit (3) io-uring 1 C error unreliable 75 1046d 1440d
INFO: task hung in io_uring_del_tctx_node (2) io-uring 1 C error error 20 1086d 1449d
WARNING in io_ring_exit_work io-uring -1 C done done 3550 1039d 1813d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register io-uring 6 1 1007d 1007d
KASAN: use-after-free Read in io_fallback_tw io-uring 19 C error 33 1142d 1146d
KASAN: use-after-free Read in snd_rawmidi_poll io-uring sound 19 C error 20 1142d 1146d
KASAN: use-after-free Read in io_poll_remove_entries io-uring 19 C done done 751 1062d 1442d
memory leak in create_io_worker (2) io-uring fs 3 C 4 1204d 1469d
INFO: task hung in sys_io_uring_register (2) io-uring 1 syz error error 2 1101d 1097d
INFO: task hung in io_uring_register (3) io-uring 1 syz error error 2 1101d 1097d
KASAN: use-after-free Read in io_wqe_worker (2) io-uring 19 C error done 3 1118d 1149d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (5) io-uring 6 1 1037d 1037d
KCSAN: data-race in io_wqe_activate_free_worker / io_wqe_worker io-uring 6 386 1041d 1425d
KCSAN: data-race in io_wq_worker_running / io_wqe_activate_free_worker io-uring 6 599 1041d 1399d
KCSAN: data-race in io_submit_sqes / io_uring_poll (5) io-uring 6 21 1043d 1232d
INFO: task hung in io_req_task_cancel io-uring 1 1 1102d 1102d
BUG: bad usercopy in io_openat2_prep (3) io-uring -1 C 12 1107d 1106d
KASAN: use-after-free Read in tctx_task_work (2) io-uring fs 19 C unreliable 358 1126d 1657d
KCSAN: data-race in __io_fill_cqe_req / io_timeout io-uring 6 2 1071d 1044d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (2) io-uring 6 1 1066d 1066d
INFO: task hung in io_uring_enter io-uring 1 1 1093d 1093d
KCSAN: data-race in io_sqpoll_wait_sq / io_submit_sqes io-uring 6 1 1068d 1068d
KASAN: use-after-free Read in io_fallback_req_func io-uring 19 C error 18 1142d 1146d
KASAN: use-after-free Read in create_worker_cb fs io-uring 19 C done 3 1799d 1799d
KASAN: use-after-free Read in sock_def_wakeup sctp io-uring 19 C error 2 1143d 1145d
WARNING in __put_task_struct (3) io-uring mm -1 C error 4 1145d 1146d
KASAN: use-after-free Read in pipe_release (2) fs io-uring 19 C error 2 1145d 1141d
KASAN: use-after-free Read in snd_pcm_post_stop sound io-uring 19 C error 1 1145d 1145d
WARNING in follow_hugetlb_page mm io-uring -1 C inconclusive 34 1387d 1390d
KASAN: slab-out-of-bounds Read in mas_leaf_max_gap mm io-uring 19 syz error 3 1184d 1228d
general protection fault in __io_sync_cancel io-uring 10 C error inconclusive 11 1280d 1287d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (4) io-uring 6 4 1090d 1131d
general protection fault in io_issue_sqe io-uring fs 12 C done unreliable 502 1285d 1642d
INFO: rcu detected stall in io_ring_exit_work fs io-uring 1 C error 6 1578d 1620d
general protection fault in __io_queue_sqe fs io-uring 2 C done 11 1659d 1660d
general protection fault in io_queue_sqe_fallback io-uring 2 1 1113d 1109d
KASAN: use-after-free Read in io_wq_put_and_exit io-uring 19 21 1144d 1147d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_unregister io-uring 6 1 1098d 1098d
KCSAN: data-race in __io_fill_cqe_req / io_uring_poll (2) io-uring 6 1 1113d 1113d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel (2) io-uring 6 1 1113d 1113d
INFO: task hung in io_uring_alloc_task_context (4) io-uring 1 2 1223d 1227d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker (2) io-uring 6 1 1104d 1104d
WARNING: refcount bug in io_send_zc_cleanup io-uring 13 1 1123d 1119d
KASAN: use-after-free Read in __io_req_task_work_add io-uring 19 7 1142d 1146d
KASAN: use-after-free Read in io_poll_task_func io-uring 19 1 1142d 1142d
WARNING: ODEBUG bug in __io_put_task io-uring -1 2 1145d 1146d
KASAN: use-after-free Read in io_req_caches_free io-uring 19 1 1146d 1146d
INFO: task hung in io_uring_register (2) io-uring 1 1 1242d 1242d
KASAN: use-after-free Read in signalfd_cleanup ext4 io-uring 19 C 4 1145d 1146d
general protection fault in __fget_files fs io-uring 2 syz done 2 1946d 1945d
general protection fault in io_uring_flush io-uring fs 2 syz error 1 1983d 1982d
KCSAN: data-race in __io_req_complete_post / io_uring_poll io-uring 6 29 1195d 1307d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker io-uring 6 1 1198d 1198d
BUG: corrupted list in io_uring_del_tctx_node io-uring 8 1 1256d 1255d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel io-uring 6 1 1213d 1213d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (3) io-uring 6 2 1227d 1255d
KCSAN: data-race in __io_req_complete_post / io_wake_function (2) io-uring 6 4 1232d 1261d
possible deadlock in io_disarm_next fs io-uring 4 C done 5 1410d 1413d
INFO: task hung in io_poll_tw_hash_eject io-uring 1 1 1296d 1296d
KASAN: use-after-free Read in io_poll_check_events io-uring fs 19 C done 20 1429d 1473d
KASAN: use-after-free Write in __io_free_req fs io-uring 22 syz done 1 1586d 1586d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel io-uring 6 1 1271d 1271d
memory leak in io_submit_sqes (3) fs io-uring 3 C 1 1740d 1739d
general protection fault in __io_arm_poll_handler fs io-uring 2 C done unreliable 3 1640d 1641d
KCSAN: data-race in io_submit_sqes / io_uring_poll (4) io-uring 6 123 1284d 1450d
KMSAN: uninit-value in io_fallback_req_func fs io-uring 7 C 8 1411d 1411d
KCSAN: data-race in __do_sys_io_uring_register / io_sqe_buffers_register (3) io-uring 6 1 1287d 1287d
memory leak in anon_inode_getfile io-uring fs 3 C 3 1934d 1940d
memory leak in rw_copy_check_uvector fs io-uring 3 C 1 2020d 2020d
KMSAN: uninit-value in io_req_caches_free fs io-uring 7 C 6 1467d 1543d
KASAN: use-after-free Write in paging32_walk_addr_generic io-uring kvm-x86 22 C done error 6 1930d 2023d
kernel BUG in io_queue_async_work io-uring fs -1 C error unreliable 14 1690d 1695d
WARNING: refcount bug in io_wqe_worker io-uring fs 13 C error error 6 1969d 2002d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (2) io-uring 6 5 1295d 1331d
KCSAN: data-race in __io_req_complete_post / io_wake_function io-uring 6 1 1297d 1297d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (6) io-uring 6 2 1298d 1321d
INFO: rcu detected stall in tctx_task_work (2) fs io-uring 1 syz unreliable 4 1577d 1583d
WARNING in io_poll_task_func (2) fs io-uring -1 C done 1 1582d 1580d
WARNING in io_poll_task_func fs io-uring -1 C done 4 1583d 1582d
WARNING: ODEBUG bug in __put_task_struct mm io-uring -1 syz done 1 1586d 1583d
INFO: rcu detected stall in tctx_task_work fs io-uring 1 C done 9 1584d 1583d
kernel panic: panic_on_warn set (2) io-uring 2 syz error 1 1637d 1637d