syzbot


Out of 129 bugs, 120 were automatically obsoleted (43 due to revoked reproducers), 9 were invalidated by users.
Applied filters: Label=subsystems:io-uring (drop)
Title Repro Cause bisect Fix bisect Count Last Reported
INFO: rcu detected stall in io_handle_tw_list io-uring 2 90d 112d
WARNING in io_get_cqe_overflow (2) io-uring C done 9 85d 85d
INFO: task hung in io_wq_worker io-uring 1 130d 130d
INFO: rcu detected stall in io_uring_enter (3) io-uring 1 142d 142d
INFO: task hung in sys_io_uring_register (3) io-uring 1 143d 143d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (3) io-uring 2 102d 103d
KCSAN: data-race in __io_queue_proc / io_poll_wake (3) io-uring 2 119d 119d
WARNING in io_sq_thread io-uring 1 160d 156d
INFO: task hung in io_uring_register (5) io-uring 1 199d 199d
KCSAN: data-race in io_submit_sqes / io_uring_poll (8) io-uring 18 147d 220d
KCSAN: data-race in io_flush_timeouts / io_issue_sqe io-uring 1 149d 149d
INFO: task hung in io_uring_del_tctx_node (3) io-uring 1 208d 208d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (2) io-uring 6 157d 169d
INFO: task hung in io_put_sq_data io-uring 1 253d 253d
INFO: rcu detected stall in io_uring_enter (2) io-uring 1 267d 267d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (11) io-uring 1 213d 213d
general protection fault in try_to_wake_up (2) io-uring C done done 3588 194d 1432d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (3) io-uring 2 224d 229d
KCSAN: data-race in __flush_work / __flush_work io-uring 1 228d 228d
KCSAN: data-race in __io_commit_cqring_flush / io_submit_sqes io-uring 1 235d 235d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work io-uring 3 240d 267d
kernel BUG in __io_remove_buffers io-uring C error 9 300d 301d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running (2) io-uring 5 263d 269d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker io-uring 16 259d 271d
INFO: task hung in io_uring_register (4) io-uring 1 321d 321d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (10) io-uring 1 271d 271d
kernel BUG in put_page io-uring C error 2 301d 301d
KCSAN: data-race in io_submit_sqes / io_uring_poll (7) io-uring 1 287d 287d
KCSAN: data-race in __io_queue_proc / io_poll_wake (2) io-uring 2 301d 301d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_unregister io-uring 1 321d 321d
WARNING in unsafe_follow_pfn media io-uring C done 33 1352d 1400d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (9) io-uring 2 344d 362d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register (2) io-uring 1 346d 346d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (8) io-uring 2 354d 380d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_register io-uring 1 381d 381d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (7) io-uring 2 432d 414d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (8) io-uring 1 433d 413d
KCSAN: data-race in io_submit_sqes / io_uring_poll (6) io-uring 1 443d 414d
KCSAN: data-race in __io_queue_proc / io_poll_wake io-uring 1 460d 460d
KMSAN: uninit-value in io_req_cqe_overflow io-uring C 622 515d 875d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (7) io-uring 1 502d 497d
general protection fault in worker_thread (2) io-uring syz 1 587d 583d
KCSAN: data-race in __io_uring_show_fdinfo / io_submit_sqes io-uring 1 523d 508d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running io-uring 17 518d 503d
INFO: task hung in io_ring_exit_work io-uring C unreliable unreliable 820 574d 1394d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (6) io-uring 4 540d 586d
BUG: unable to handle kernel NULL pointer dereference in __io_remove_buffers io-uring 1 613d 609d
INFO: task hung in io_wq_put_and_exit (3) io-uring C error unreliable 75 647d 1042d
INFO: task hung in io_uring_del_tctx_node (2) io-uring C error error 20 688d 1050d
WARNING in io_ring_exit_work io-uring C done done 3550 640d 1415d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register io-uring 1 608d 608d
KASAN: use-after-free Read in io_fallback_tw io-uring C error 33 743d 747d
KASAN: use-after-free Read in snd_rawmidi_poll io-uring sound C error 20 743d 747d
KASAN: use-after-free Read in io_poll_remove_entries io-uring C done done 751 663d 1043d
memory leak in create_io_worker (2) io-uring fs C 4 805d 1070d
INFO: task hung in sys_io_uring_register (2) io-uring syz error error 2 702d 699d
INFO: task hung in io_uring_register (3) io-uring syz error error 2 703d 699d
KASAN: use-after-free Read in io_wqe_worker (2) io-uring C error done 3 719d 750d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (5) io-uring 1 639d 639d
KCSAN: data-race in io_wqe_activate_free_worker / io_wqe_worker io-uring 386 642d 1026d
KCSAN: data-race in io_wq_worker_running / io_wqe_activate_free_worker io-uring 599 643d 1001d
KCSAN: data-race in io_submit_sqes / io_uring_poll (5) io-uring 21 644d 833d
INFO: task hung in io_req_task_cancel io-uring 1 703d 703d
BUG: bad usercopy in io_openat2_prep (3) io-uring C 12 708d 707d
KASAN: use-after-free Read in tctx_task_work (2) io-uring fs C unreliable 358 727d 1258d
KCSAN: data-race in __io_fill_cqe_req / io_timeout io-uring 2 672d 645d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (2) io-uring 1 667d 667d
INFO: task hung in io_uring_enter io-uring 1 694d 694d
KCSAN: data-race in io_sqpoll_wait_sq / io_submit_sqes io-uring 1 670d 670d
KASAN: use-after-free Read in io_fallback_req_func io-uring C error 18 743d 747d
KASAN: use-after-free Read in create_worker_cb io-uring fs C done 3 1400d 1401d
KASAN: use-after-free Read in sock_def_wakeup sctp io-uring C error 2 744d 747d
WARNING in __put_task_struct (3) io-uring C error 4 747d 747d
KASAN: use-after-free Read in pipe_release (2) io-uring fs C error 2 747d 743d
KASAN: use-after-free Read in snd_pcm_post_stop sound io-uring C error 1 747d 746d
WARNING in follow_hugetlb_page mm io-uring C inconclusive 34 988d 991d
KASAN: slab-out-of-bounds Read in mas_leaf_max_gap mm io-uring syz error 3 785d 829d
general protection fault in __io_sync_cancel io-uring C error inconclusive 11 881d 888d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (4) io-uring 4 691d 733d
general protection fault in io_issue_sqe io-uring fs C done unreliable 502 886d 1244d
INFO: rcu detected stall in io_ring_exit_work fs io-uring C error 6 1179d 1221d
general protection fault in __io_queue_sqe fs io-uring C done 11 1260d 1261d
general protection fault in io_queue_sqe_fallback io-uring 1 714d 710d
KASAN: use-after-free Read in io_wq_put_and_exit io-uring 21 746d 748d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_unregister io-uring 1 699d 699d
KCSAN: data-race in __io_fill_cqe_req / io_uring_poll (2) io-uring 1 714d 714d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel (2) io-uring 1 714d 714d
INFO: task hung in io_uring_alloc_task_context (4) io-uring 2 824d 828d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker (2) io-uring 1 705d 705d
WARNING: refcount bug in io_send_zc_cleanup io-uring 1 724d 720d
KASAN: use-after-free Read in __io_req_task_work_add io-uring 7 743d 747d
KASAN: use-after-free Read in io_poll_task_func io-uring 1 743d 743d
WARNING: ODEBUG bug in __io_put_task io-uring 2 746d 747d
KASAN: use-after-free Read in io_req_caches_free io-uring 1 747d 747d
INFO: task hung in io_uring_register (2) io-uring 1 843d 843d
KASAN: use-after-free Read in signalfd_cleanup ext4 io-uring C 4 746d 747d
general protection fault in __fget_files fs io-uring syz done 2 1547d 1547d
general protection fault in io_uring_flush fs io-uring syz error 1 1584d 1583d
KCSAN: data-race in __io_req_complete_post / io_uring_poll io-uring 29 796d 908d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker io-uring 1 799d 799d
BUG: corrupted list in io_uring_del_tctx_node io-uring 1 857d 856d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel io-uring 1 814d 814d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (3) io-uring 2 828d 856d
KCSAN: data-race in __io_req_complete_post / io_wake_function (2) io-uring 4 833d 863d
possible deadlock in io_disarm_next fs io-uring C done 5 1011d 1014d
INFO: task hung in io_poll_tw_hash_eject io-uring 1 897d 897d
KASAN: use-after-free Read in io_poll_check_events fs io-uring C done 20 1030d 1074d
KASAN: use-after-free Write in __io_free_req fs io-uring syz done 1 1187d 1187d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel io-uring 1 872d 872d
memory leak in io_submit_sqes (3) fs io-uring C 1 1341d 1340d
general protection fault in __io_arm_poll_handler fs io-uring C done unreliable 3 1241d 1243d
KCSAN: data-race in io_submit_sqes / io_uring_poll (4) io-uring 123 885d 1051d
KMSAN: uninit-value in io_fallback_req_func fs io-uring C 8 1012d 1012d
KCSAN: data-race in __do_sys_io_uring_register / io_sqe_buffers_register (3) io-uring 1 888d 888d
memory leak in anon_inode_getfile io-uring fs C 3 1535d 1541d
memory leak in rw_copy_check_uvector io-uring fs C 1 1621d 1621d
KMSAN: uninit-value in io_req_caches_free fs io-uring C 6 1068d 1144d
KASAN: use-after-free Write in paging32_walk_addr_generic io-uring kvm C done error 6 1531d 1625d
kernel BUG in io_queue_async_work fs io-uring C error unreliable 14 1291d 1296d
WARNING: refcount bug in io_wqe_worker io-uring fs C error error 6 1570d 1604d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (2) io-uring 5 896d 932d
KCSAN: data-race in __io_req_complete_post / io_wake_function io-uring 1 898d 898d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (6) io-uring 2 899d 922d
INFO: rcu detected stall in tctx_task_work (2) fs io-uring syz unreliable 4 1178d 1184d
WARNING in io_poll_task_func (2) fs io-uring C done 1 1183d 1181d
WARNING in io_poll_task_func fs io-uring C done 4 1185d 1184d
WARNING: ODEBUG bug in __put_task_struct io-uring syz done 1 1187d 1185d
INFO: rcu detected stall in tctx_task_work io-uring fs C done 9 1185d 1185d
kernel panic: panic_on_warn set (2) io-uring syz error 1 1238d 1238d