syzbot


Out of 152 bugs, 133 were automatically obsoleted (43 due to revoked reproducers), 19 were invalidated by users.
Applied filters: Label=subsystems:io-uring (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
KASAN: slab-use-after-free Read in io_poll_remove_entries (2) io-uring 19 1 45d 44d
KCSAN: data-race in io_wq_worker / kthread_is_per_cpu io-uring 6 1 117d 117d
INFO: task hung in io_handle_tw_list io-uring 1 1 157d 157d
general protection fault in io_uring_show_fdinfo (4) io-uring 2 C done 28 80d 79d
general protection fault in io_uring_show_fdinfo (3) io-uring 2 C 9 81d 81d
INFO: rcu detected stall in io_uring_setup bpf io-uring 1 2 179d 187d
KCSAN: data-race in __io_queue_proc / io_poll_wake (4) io-uring 6 4 148d 233d
WARNING in io_req_task_complete io-uring -1 2 196d 285d
KCSAN: data-race in io_sq_offload_create / prepare_creds io-uring 6 1 155d 155d
WARNING in __vmap_pages_range_noflush (2) io-uring -1 C 8 125d 123d
INFO: task hung in io_wq_put_and_exit (5) io-uring input usb 1 C done 9 153d 172d
INFO: task hung in vfs_coredump io-uring 1 syz 3 196d 193d
WARNING: io_uring/io_uring.c:LINE at io_ring_exit_work, CPU: kworker/u8:NUM/NUM io-uring -1 2 209d 205d
INFO: task hung in io_uring_del_tctx_node (4) io-uring 1 C done 8 227d 223d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (4) io-uring 6 8 290d 412d
INFO: task hung in sys_io_uring_enter io-uring 1 1 325d 325d
KMSAN: uninit-value in putname io-uring 7 1 264d 258d
KCSAN: data-race in io_sq_thread / io_sq_thread_stop io-uring 6 4 324d 384d
INFO: task hung in io_uring_alloc_task_context (5) io-uring 1 1 371d 371d
INFO: rcu detected stall in io_uring_enter (4) io-uring 1 1 373d 373d
possible deadlock in io_uring_mmap io-uring 4 1 309d 305d
INFO: rcu detected stall in sys_io_uring_setup (2) io-uring mm 1 2 397d 441d
KCSAN: data-race in io_recv / io_wq_free_work io-uring 6 2 394d 394d
INFO: rcu detected stall in io_handle_tw_list io-uring 1 2 438d 460d
WARNING in io_get_cqe_overflow (2) io-uring -1 C done 9 433d 433d
INFO: task hung in io_wq_worker io-uring 1 1 478d 478d
INFO: rcu detected stall in io_uring_enter (3) io-uring 1 1 490d 490d
INFO: task hung in sys_io_uring_register (3) io-uring 1 1 491d 491d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (3) io-uring 6 2 450d 451d
KCSAN: data-race in __io_queue_proc / io_poll_wake (3) io-uring 6 2 467d 467d
WARNING in io_sq_thread io-uring -1 1 508d 504d
INFO: task hung in io_uring_register (5) io-uring 1 1 547d 547d
KCSAN: data-race in io_submit_sqes / io_uring_poll (8) io-uring 6 18 495d 568d
KCSAN: data-race in io_flush_timeouts / io_issue_sqe io-uring 6 1 497d 497d
INFO: task hung in io_uring_del_tctx_node (3) io-uring 1 1 556d 556d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (2) io-uring 6 6 505d 517d
INFO: task hung in io_put_sq_data io-uring 1 1 601d 601d
INFO: rcu detected stall in io_uring_enter (2) io-uring 1 1 615d 615d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (11) io-uring 6 1 561d 561d
general protection fault in try_to_wake_up (2) io-uring 19 C done done 3588 542d 1780d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (3) io-uring 6 2 572d 577d
KCSAN: data-race in __flush_work / __flush_work io-uring 6 1 576d 576d
KCSAN: data-race in __io_commit_cqring_flush / io_submit_sqes io-uring 6 1 583d 583d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work io-uring 6 3 588d 615d
kernel BUG in __io_remove_buffers io-uring -1 C error 9 648d 649d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running (2) io-uring 6 5 611d 617d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker io-uring 6 16 607d 618d
INFO: task hung in io_uring_register (4) io-uring 1 1 669d 669d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (10) io-uring 6 1 619d 619d
kernel BUG in put_page io-uring -1 C error 2 649d 649d
KCSAN: data-race in io_submit_sqes / io_uring_poll (7) io-uring 6 1 635d 635d
KCSAN: data-race in __io_queue_proc / io_poll_wake (2) io-uring 6 2 649d 649d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_unregister io-uring 6 1 669d 669d
WARNING in unsafe_follow_pfn media io-uring -1 C done 33 1700d 1748d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (9) io-uring 6 2 692d 710d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register (2) io-uring 6 1 694d 694d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (8) io-uring 6 2 702d 728d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_register io-uring 6 1 729d 729d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (7) io-uring 6 2 780d 762d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (8) io-uring 6 1 781d 761d
KCSAN: data-race in io_submit_sqes / io_uring_poll (6) io-uring 6 1 791d 762d
KCSAN: data-race in __io_queue_proc / io_poll_wake io-uring 6 1 808d 808d
KMSAN: uninit-value in io_req_cqe_overflow io-uring 7 C 622 863d 1223d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (7) io-uring 6 1 850d 845d
general protection fault in worker_thread (2) io-uring 2 syz 1 935d 931d
KCSAN: data-race in __io_uring_show_fdinfo / io_submit_sqes io-uring 6 1 870d 856d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running io-uring 6 17 866d 851d
INFO: task hung in io_ring_exit_work io-uring 1 C unreliable unreliable 820 922d 1742d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (6) io-uring 6 4 888d 934d
BUG: unable to handle kernel NULL pointer dereference in __io_remove_buffers io-uring 10 1 961d 957d
INFO: task hung in io_wq_put_and_exit (3) io-uring 1 C error unreliable 75 995d 1390d
INFO: task hung in io_uring_del_tctx_node (2) io-uring 1 C error error 20 1035d 1398d
WARNING in io_ring_exit_work io-uring -1 C done done 3550 988d 1763d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register io-uring 6 1 956d 956d
KASAN: use-after-free Read in io_fallback_tw io-uring 19 C error 33 1091d 1095d
KASAN: use-after-free Read in snd_rawmidi_poll io-uring sound 19 C error 20 1091d 1095d
KASAN: use-after-free Read in io_poll_remove_entries io-uring 19 C done done 751 1011d 1391d
memory leak in create_io_worker (2) io-uring fs 3 C 4 1153d 1418d
INFO: task hung in sys_io_uring_register (2) io-uring 1 syz error error 2 1050d 1047d
INFO: task hung in io_uring_register (3) io-uring 1 syz error error 2 1051d 1047d
KASAN: use-after-free Read in io_wqe_worker (2) io-uring 19 C error done 3 1067d 1098d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (5) io-uring 6 1 987d 987d
KCSAN: data-race in io_wqe_activate_free_worker / io_wqe_worker io-uring 6 386 990d 1374d
KCSAN: data-race in io_wq_worker_running / io_wqe_activate_free_worker io-uring 6 599 990d 1348d
KCSAN: data-race in io_submit_sqes / io_uring_poll (5) io-uring 6 21 992d 1181d
INFO: task hung in io_req_task_cancel io-uring 1 1 1051d 1051d
BUG: bad usercopy in io_openat2_prep (3) io-uring -1 C 12 1056d 1055d
KASAN: use-after-free Read in tctx_task_work (2) io-uring fs 19 C unreliable 358 1075d 1606d
KCSAN: data-race in __io_fill_cqe_req / io_timeout io-uring 6 2 1020d 993d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (2) io-uring 6 1 1015d 1015d
INFO: task hung in io_uring_enter io-uring 1 1 1042d 1042d
KCSAN: data-race in io_sqpoll_wait_sq / io_submit_sqes io-uring 6 1 1018d 1018d
KASAN: use-after-free Read in io_fallback_req_func io-uring 19 C error 18 1091d 1095d
KASAN: use-after-free Read in create_worker_cb fs io-uring 19 C done 3 1748d 1749d
KASAN: use-after-free Read in sock_def_wakeup io-uring sctp 19 C error 2 1092d 1095d
WARNING in __put_task_struct (3) io-uring mm -1 C error 4 1094d 1095d
KASAN: use-after-free Read in pipe_release (2) fs io-uring 19 C error 2 1094d 1090d
KASAN: use-after-free Read in snd_pcm_post_stop sound io-uring 19 C error 1 1095d 1094d
WARNING in follow_hugetlb_page mm io-uring -1 C inconclusive 34 1336d 1339d
KASAN: slab-out-of-bounds Read in mas_leaf_max_gap mm io-uring 19 syz error 3 1133d 1177d
general protection fault in __io_sync_cancel io-uring 10 C error inconclusive 11 1229d 1236d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (4) io-uring 6 4 1039d 1080d
general protection fault in io_issue_sqe io-uring fs 12 C done unreliable 502 1234d 1592d
INFO: rcu detected stall in io_ring_exit_work fs io-uring 1 C error 6 1527d 1569d
general protection fault in __io_queue_sqe fs io-uring 2 C done 11 1608d 1609d
general protection fault in io_queue_sqe_fallback io-uring 2 1 1062d 1058d
KASAN: use-after-free Read in io_wq_put_and_exit io-uring 19 21 1094d 1096d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_unregister io-uring 6 1 1047d 1047d
KCSAN: data-race in __io_fill_cqe_req / io_uring_poll (2) io-uring 6 1 1062d 1062d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel (2) io-uring 6 1 1062d 1062d
INFO: task hung in io_uring_alloc_task_context (4) io-uring 1 2 1172d 1176d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker (2) io-uring 6 1 1053d 1053d
WARNING: refcount bug in io_send_zc_cleanup io-uring 13 1 1072d 1068d
KASAN: use-after-free Read in __io_req_task_work_add io-uring 19 7 1091d 1095d
KASAN: use-after-free Read in io_poll_task_func io-uring 19 1 1091d 1091d
WARNING: ODEBUG bug in __io_put_task io-uring -1 2 1094d 1095d
KASAN: use-after-free Read in io_req_caches_free io-uring 19 1 1095d 1095d
INFO: task hung in io_uring_register (2) io-uring 1 1 1191d 1191d
KASAN: use-after-free Read in signalfd_cleanup io-uring ext4 19 C 4 1094d 1095d
general protection fault in __fget_files fs io-uring 2 syz done 2 1895d 1895d
general protection fault in io_uring_flush fs io-uring 2 syz error 1 1932d 1931d
KCSAN: data-race in __io_req_complete_post / io_uring_poll io-uring 6 29 1144d 1256d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker io-uring 6 1 1147d 1147d
BUG: corrupted list in io_uring_del_tctx_node io-uring 8 1 1205d 1204d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel io-uring 6 1 1162d 1162d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (3) io-uring 6 2 1176d 1204d
KCSAN: data-race in __io_req_complete_post / io_wake_function (2) io-uring 6 4 1181d 1210d
possible deadlock in io_disarm_next fs io-uring 4 C done 5 1359d 1362d
INFO: task hung in io_poll_tw_hash_eject io-uring 1 1 1245d 1245d
KASAN: use-after-free Read in io_poll_check_events fs io-uring 19 C done 20 1378d 1422d
KASAN: use-after-free Write in __io_free_req fs io-uring 24 syz done 1 1535d 1535d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel io-uring 6 1 1220d 1220d
memory leak in io_submit_sqes (3) fs io-uring 3 C 1 1689d 1688d
general protection fault in __io_arm_poll_handler fs io-uring 2 C done unreliable 3 1589d 1590d
KCSAN: data-race in io_submit_sqes / io_uring_poll (4) io-uring 6 123 1233d 1399d
KMSAN: uninit-value in io_fallback_req_func fs io-uring 7 C 8 1360d 1360d
KCSAN: data-race in __do_sys_io_uring_register / io_sqe_buffers_register (3) io-uring 6 1 1236d 1236d
memory leak in anon_inode_getfile io-uring fs 3 C 3 1883d 1889d
memory leak in rw_copy_check_uvector fs io-uring 3 C 1 1969d 1969d
KMSAN: uninit-value in io_req_caches_free fs io-uring 7 C 6 1416d 1492d
KASAN: use-after-free Write in paging32_walk_addr_generic io-uring kvm-x86 24 C done error 6 1879d 1973d
kernel BUG in io_queue_async_work fs io-uring -1 C error unreliable 14 1639d 1644d
WARNING: refcount bug in io_wqe_worker io-uring fs 13 C error error 6 1918d 1951d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (2) io-uring 6 5 1244d 1280d
KCSAN: data-race in __io_req_complete_post / io_wake_function io-uring 6 1 1246d 1246d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (6) io-uring 6 2 1247d 1270d
INFO: rcu detected stall in tctx_task_work (2) fs io-uring 1 syz unreliable 4 1526d 1532d
WARNING in io_poll_task_func (2) fs io-uring -1 C done 1 1531d 1529d
WARNING in io_poll_task_func fs io-uring -1 C done 4 1533d 1532d
WARNING: ODEBUG bug in __put_task_struct mm io-uring -1 syz done 1 1535d 1533d
INFO: rcu detected stall in tctx_task_work fs io-uring 1 C done 9 1533d 1533d
kernel panic: panic_on_warn set (2) io-uring 2 syz error 1 1586d 1586d