syzbot


Out of 130 bugs, 121 were automatically obsoleted (43 due to revoked reproducers), 9 were invalidated by users.
Applied filters: Label=subsystems:io-uring (drop)
Title Repro Cause bisect Fix bisect Count Last Reported
KCSAN: data-race in io_recv / io_wq_free_work io-uring 2 57d 57d
INFO: rcu detected stall in io_handle_tw_list io-uring 2 101d 123d
WARNING in io_get_cqe_overflow (2) io-uring C done 9 96d 96d
INFO: task hung in io_wq_worker io-uring 1 141d 141d
INFO: rcu detected stall in io_uring_enter (3) io-uring 1 153d 153d
INFO: task hung in sys_io_uring_register (3) io-uring 1 154d 154d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (3) io-uring 2 113d 114d
KCSAN: data-race in __io_queue_proc / io_poll_wake (3) io-uring 2 130d 130d
WARNING in io_sq_thread io-uring 1 171d 167d
INFO: task hung in io_uring_register (5) io-uring 1 210d 210d
KCSAN: data-race in io_submit_sqes / io_uring_poll (8) io-uring 18 158d 231d
KCSAN: data-race in io_flush_timeouts / io_issue_sqe io-uring 1 160d 160d
INFO: task hung in io_uring_del_tctx_node (3) io-uring 1 219d 219d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (2) io-uring 6 168d 180d
INFO: task hung in io_put_sq_data io-uring 1 264d 264d
INFO: rcu detected stall in io_uring_enter (2) io-uring 1 278d 278d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (11) io-uring 1 224d 224d
general protection fault in try_to_wake_up (2) io-uring C done done 3588 205d 1443d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (3) io-uring 2 235d 240d
KCSAN: data-race in __flush_work / __flush_work io-uring 1 239d 239d
KCSAN: data-race in __io_commit_cqring_flush / io_submit_sqes io-uring 1 246d 246d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work io-uring 3 251d 278d
kernel BUG in __io_remove_buffers io-uring C error 9 311d 312d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running (2) io-uring 5 274d 280d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker io-uring 16 270d 281d
INFO: task hung in io_uring_register (4) io-uring 1 332d 332d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (10) io-uring 1 282d 282d
kernel BUG in put_page io-uring C error 2 312d 312d
KCSAN: data-race in io_submit_sqes / io_uring_poll (7) io-uring 1 298d 298d
KCSAN: data-race in __io_queue_proc / io_poll_wake (2) io-uring 2 312d 312d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_unregister io-uring 1 332d 332d
WARNING in unsafe_follow_pfn media io-uring C done 33 1363d 1411d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (9) io-uring 2 355d 373d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register (2) io-uring 1 357d 357d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (8) io-uring 2 365d 391d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_register io-uring 1 392d 392d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (7) io-uring 2 443d 425d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (8) io-uring 1 444d 424d
KCSAN: data-race in io_submit_sqes / io_uring_poll (6) io-uring 1 454d 425d
KCSAN: data-race in __io_queue_proc / io_poll_wake io-uring 1 471d 471d
KMSAN: uninit-value in io_req_cqe_overflow io-uring C 622 526d 886d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (7) io-uring 1 513d 508d
general protection fault in worker_thread (2) io-uring syz 1 598d 594d
KCSAN: data-race in __io_uring_show_fdinfo / io_submit_sqes io-uring 1 533d 519d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running io-uring 17 529d 514d
INFO: task hung in io_ring_exit_work io-uring C unreliable unreliable 820 585d 1405d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (6) io-uring 4 551d 597d
BUG: unable to handle kernel NULL pointer dereference in __io_remove_buffers io-uring 1 624d 620d
INFO: task hung in io_wq_put_and_exit (3) io-uring C error unreliable 75 658d 1053d
INFO: task hung in io_uring_del_tctx_node (2) io-uring C error error 20 698d 1061d
WARNING in io_ring_exit_work io-uring C done done 3550 651d 1426d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register io-uring 1 619d 619d
KASAN: use-after-free Read in io_fallback_tw io-uring C error 33 754d 758d
KASAN: use-after-free Read in snd_rawmidi_poll io-uring sound C error 20 754d 758d
KASAN: use-after-free Read in io_poll_remove_entries io-uring C done done 751 674d 1054d
memory leak in create_io_worker (2) io-uring fs C 4 816d 1081d
INFO: task hung in sys_io_uring_register (2) io-uring syz error error 2 713d 710d
INFO: task hung in io_uring_register (3) io-uring syz error error 2 714d 710d
KASAN: use-after-free Read in io_wqe_worker (2) io-uring C error done 3 730d 761d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (5) io-uring 1 650d 650d
KCSAN: data-race in io_wqe_activate_free_worker / io_wqe_worker io-uring 386 653d 1037d
KCSAN: data-race in io_wq_worker_running / io_wqe_activate_free_worker io-uring 599 653d 1011d
KCSAN: data-race in io_submit_sqes / io_uring_poll (5) io-uring 21 655d 844d
INFO: task hung in io_req_task_cancel io-uring 1 714d 714d
BUG: bad usercopy in io_openat2_prep (3) io-uring C 12 719d 718d
KASAN: use-after-free Read in tctx_task_work (2) io-uring fs C unreliable 358 738d 1269d
KCSAN: data-race in __io_fill_cqe_req / io_timeout io-uring 2 683d 656d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (2) io-uring 1 678d 678d
INFO: task hung in io_uring_enter io-uring 1 705d 705d
KCSAN: data-race in io_sqpoll_wait_sq / io_submit_sqes io-uring 1 681d 681d
KASAN: use-after-free Read in io_fallback_req_func io-uring C error 18 754d 758d
KASAN: use-after-free Read in create_worker_cb io-uring fs C done 3 1411d 1412d
KASAN: use-after-free Read in sock_def_wakeup sctp io-uring C error 2 755d 758d
WARNING in __put_task_struct (3) io-uring C error 4 757d 758d
KASAN: use-after-free Read in pipe_release (2) io-uring fs C error 2 757d 753d
KASAN: use-after-free Read in snd_pcm_post_stop sound io-uring C error 1 758d 757d
WARNING in follow_hugetlb_page mm io-uring C inconclusive 34 999d 1002d
KASAN: slab-out-of-bounds Read in mas_leaf_max_gap mm io-uring syz error 3 796d 840d
general protection fault in __io_sync_cancel io-uring C error inconclusive 11 892d 899d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (4) io-uring 4 702d 743d
general protection fault in io_issue_sqe io-uring fs C done unreliable 502 897d 1255d
INFO: rcu detected stall in io_ring_exit_work fs io-uring C error 6 1190d 1232d
general protection fault in __io_queue_sqe fs io-uring C done 11 1271d 1272d
general protection fault in io_queue_sqe_fallback io-uring 1 725d 721d
KASAN: use-after-free Read in io_wq_put_and_exit io-uring 21 757d 759d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_unregister io-uring 1 710d 710d
KCSAN: data-race in __io_fill_cqe_req / io_uring_poll (2) io-uring 1 725d 725d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel (2) io-uring 1 725d 725d
INFO: task hung in io_uring_alloc_task_context (4) io-uring 2 835d 839d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker (2) io-uring 1 716d 716d
WARNING: refcount bug in io_send_zc_cleanup io-uring 1 735d 731d
KASAN: use-after-free Read in __io_req_task_work_add io-uring 7 754d 758d
KASAN: use-after-free Read in io_poll_task_func io-uring 1 754d 754d
WARNING: ODEBUG bug in __io_put_task io-uring 2 757d 758d
KASAN: use-after-free Read in io_req_caches_free io-uring 1 758d 758d
INFO: task hung in io_uring_register (2) io-uring 1 854d 854d
KASAN: use-after-free Read in signalfd_cleanup ext4 io-uring C 4 757d 758d
general protection fault in __fget_files fs io-uring syz done 2 1558d 1558d
general protection fault in io_uring_flush fs io-uring syz error 1 1595d 1594d
KCSAN: data-race in __io_req_complete_post / io_uring_poll io-uring 29 807d 919d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker io-uring 1 810d 810d
BUG: corrupted list in io_uring_del_tctx_node io-uring 1 868d 867d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel io-uring 1 825d 825d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (3) io-uring 2 839d 867d
KCSAN: data-race in __io_req_complete_post / io_wake_function (2) io-uring 4 844d 873d
possible deadlock in io_disarm_next fs io-uring C done 5 1022d 1025d
INFO: task hung in io_poll_tw_hash_eject io-uring 1 908d 908d
KASAN: use-after-free Read in io_poll_check_events fs io-uring C done 20 1041d 1085d
KASAN: use-after-free Write in __io_free_req fs io-uring syz done 1 1198d 1198d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel io-uring 1 883d 883d
memory leak in io_submit_sqes (3) fs io-uring C 1 1352d 1351d
general protection fault in __io_arm_poll_handler fs io-uring C done unreliable 3 1252d 1253d
KCSAN: data-race in io_submit_sqes / io_uring_poll (4) io-uring 123 896d 1062d
KMSAN: uninit-value in io_fallback_req_func fs io-uring C 8 1023d 1023d
KCSAN: data-race in __do_sys_io_uring_register / io_sqe_buffers_register (3) io-uring 1 899d 899d
memory leak in anon_inode_getfile io-uring fs C 3 1546d 1552d
memory leak in rw_copy_check_uvector io-uring fs C 1 1632d 1632d
KMSAN: uninit-value in io_req_caches_free fs io-uring C 6 1079d 1155d
KASAN: use-after-free Write in paging32_walk_addr_generic io-uring kvm C done error 6 1542d 1636d
kernel BUG in io_queue_async_work fs io-uring C error unreliable 14 1302d 1307d
WARNING: refcount bug in io_wqe_worker io-uring fs C error error 6 1581d 1614d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (2) io-uring 5 907d 943d
KCSAN: data-race in __io_req_complete_post / io_wake_function io-uring 1 909d 909d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (6) io-uring 2 910d 933d
INFO: rcu detected stall in tctx_task_work (2) fs io-uring syz unreliable 4 1189d 1195d
WARNING in io_poll_task_func (2) fs io-uring C done 1 1194d 1192d
WARNING in io_poll_task_func fs io-uring C done 4 1196d 1195d
WARNING: ODEBUG bug in __put_task_struct io-uring syz done 1 1198d 1196d
INFO: rcu detected stall in tctx_task_work io-uring fs C done 9 1196d 1196d
kernel panic: panic_on_warn set (2) io-uring syz error 1 1249d 1249d