syzbot


Out of 140 bugs, 127 were automatically obsoleted (43 due to revoked reproducers), 13 were invalidated by users.
Applied filters: Label=subsystems:io-uring (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
WARNING: io_uring/io_uring.c:LINE at io_ring_exit_work, CPU: kworker/u8:NUM/NUM io-uring -1 2 23d 20d
INFO: task hung in io_uring_del_tctx_node (4) io-uring 1 C done 8 42d 38d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (4) io-uring 6 8 105d 227d
INFO: task hung in sys_io_uring_enter io-uring 1 1 140d 140d
KMSAN: uninit-value in putname io-uring 7 1 78d 73d
KCSAN: data-race in io_sq_thread / io_sq_thread_stop io-uring 6 4 139d 199d
INFO: task hung in io_uring_alloc_task_context (5) io-uring 1 1 185d 185d
INFO: rcu detected stall in io_uring_enter (4) io-uring 1 1 188d 188d
possible deadlock in io_uring_mmap io-uring 4 1 124d 120d
INFO: rcu detected stall in sys_io_uring_setup (2) io-uring mm 1 2 212d 256d
KCSAN: data-race in io_recv / io_wq_free_work io-uring 6 2 209d 209d
INFO: rcu detected stall in io_handle_tw_list io-uring 1 2 253d 275d
WARNING in io_get_cqe_overflow (2) io-uring -1 C done 9 248d 248d
INFO: task hung in io_wq_worker io-uring 1 1 293d 293d
INFO: rcu detected stall in io_uring_enter (3) io-uring 1 1 305d 305d
INFO: task hung in sys_io_uring_register (3) io-uring 1 1 306d 306d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (3) io-uring 6 2 265d 266d
KCSAN: data-race in __io_queue_proc / io_poll_wake (3) io-uring 6 2 281d 281d
WARNING in io_sq_thread io-uring -1 1 323d 319d
INFO: task hung in io_uring_register (5) io-uring 1 1 362d 362d
KCSAN: data-race in io_submit_sqes / io_uring_poll (8) io-uring 6 18 310d 383d
KCSAN: data-race in io_flush_timeouts / io_issue_sqe io-uring 6 1 312d 312d
INFO: task hung in io_uring_del_tctx_node (3) io-uring 1 1 371d 371d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (2) io-uring 6 6 320d 332d
INFO: task hung in io_put_sq_data io-uring 1 1 416d 416d
INFO: rcu detected stall in io_uring_enter (2) io-uring 1 1 430d 430d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (11) io-uring 6 1 375d 375d
general protection fault in try_to_wake_up (2) io-uring 19 C done done 3588 356d 1595d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (3) io-uring 6 2 387d 391d
KCSAN: data-race in __flush_work / __flush_work io-uring 6 1 391d 391d
KCSAN: data-race in __io_commit_cqring_flush / io_submit_sqes io-uring 6 1 398d 398d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work io-uring 6 3 403d 430d
kernel BUG in __io_remove_buffers io-uring -1 C error 9 463d 463d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running (2) io-uring 6 5 426d 432d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker io-uring 6 16 422d 433d
INFO: task hung in io_uring_register (4) io-uring 1 1 484d 484d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (10) io-uring 6 1 434d 434d
kernel BUG in put_page io-uring -1 C error 2 464d 464d
KCSAN: data-race in io_submit_sqes / io_uring_poll (7) io-uring 6 1 450d 450d
KCSAN: data-race in __io_queue_proc / io_poll_wake (2) io-uring 6 2 464d 464d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_unregister io-uring 6 1 484d 484d
WARNING in unsafe_follow_pfn media io-uring -1 C done 33 1515d 1562d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (9) io-uring 6 2 507d 525d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register (2) io-uring 6 1 509d 509d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (8) io-uring 6 2 517d 543d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_register io-uring 6 1 543d 543d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (7) io-uring 6 2 595d 577d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (8) io-uring 6 1 596d 576d
KCSAN: data-race in io_submit_sqes / io_uring_poll (6) io-uring 6 1 606d 577d
KCSAN: data-race in __io_queue_proc / io_poll_wake io-uring 6 1 623d 623d
KMSAN: uninit-value in io_req_cqe_overflow io-uring 7 C 622 678d 1038d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (7) io-uring 6 1 665d 659d
general protection fault in worker_thread (2) io-uring 2 syz 1 750d 746d
KCSAN: data-race in __io_uring_show_fdinfo / io_submit_sqes io-uring 6 1 685d 670d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running io-uring 6 17 680d 666d
INFO: task hung in io_ring_exit_work io-uring 1 C unreliable unreliable 820 737d 1557d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (6) io-uring 6 4 703d 749d
BUG: unable to handle kernel NULL pointer dereference in __io_remove_buffers io-uring 10 1 776d 772d
INFO: task hung in io_wq_put_and_exit (3) io-uring 1 C error unreliable 75 810d 1204d
INFO: task hung in io_uring_del_tctx_node (2) io-uring 1 C error error 20 850d 1212d
WARNING in io_ring_exit_work io-uring -1 C done done 3550 803d 1577d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register io-uring 6 1 770d 770d
KASAN: use-after-free Read in io_fallback_tw io-uring 19 C error 33 906d 910d
KASAN: use-after-free Read in snd_rawmidi_poll io-uring sound 19 C error 20 906d 910d
KASAN: use-after-free Read in io_poll_remove_entries io-uring 19 C done done 751 826d 1206d
memory leak in create_io_worker (2) io-uring fs 3 C 4 968d 1233d
INFO: task hung in sys_io_uring_register (2) io-uring 1 syz error error 2 865d 861d
INFO: task hung in io_uring_register (3) io-uring 1 syz error error 2 865d 861d
KASAN: use-after-free Read in io_wqe_worker (2) io-uring 19 C error done 3 882d 913d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (5) io-uring 6 1 801d 801d
KCSAN: data-race in io_wqe_activate_free_worker / io_wqe_worker io-uring 6 386 805d 1188d
KCSAN: data-race in io_wq_worker_running / io_wqe_activate_free_worker io-uring 6 599 805d 1163d
KCSAN: data-race in io_submit_sqes / io_uring_poll (5) io-uring 6 21 807d 996d
INFO: task hung in io_req_task_cancel io-uring 1 1 866d 866d
BUG: bad usercopy in io_openat2_prep (3) io-uring -1 C 12 870d 869d
KASAN: use-after-free Read in tctx_task_work (2) io-uring fs 19 C unreliable 358 890d 1421d
KCSAN: data-race in __io_fill_cqe_req / io_timeout io-uring 6 2 835d 808d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (2) io-uring 6 1 830d 830d
INFO: task hung in io_uring_enter io-uring 1 1 857d 857d
KCSAN: data-race in io_sqpoll_wait_sq / io_submit_sqes io-uring 6 1 832d 832d
KASAN: use-after-free Read in io_fallback_req_func io-uring 19 C error 18 906d 910d
KASAN: use-after-free Read in create_worker_cb io-uring fs 19 C done 3 1563d 1563d
KASAN: use-after-free Read in sock_def_wakeup sctp io-uring 19 C error 2 907d 909d
WARNING in __put_task_struct (3) io-uring -1 C error 4 909d 910d
KASAN: use-after-free Read in pipe_release (2) io-uring fs 19 C error 2 909d 905d
KASAN: use-after-free Read in snd_pcm_post_stop sound io-uring 19 C error 1 909d 909d
WARNING in follow_hugetlb_page mm io-uring -1 C inconclusive 34 1151d 1154d
KASAN: slab-out-of-bounds Read in mas_leaf_max_gap mm io-uring 19 syz error 3 948d 992d
general protection fault in __io_sync_cancel io-uring 10 C error inconclusive 11 1044d 1050d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (4) io-uring 6 4 854d 895d
general protection fault in io_issue_sqe io-uring fs 12 C done unreliable 502 1049d 1406d
INFO: rcu detected stall in io_ring_exit_work fs io-uring 1 C error 6 1342d 1384d
general protection fault in __io_queue_sqe fs io-uring 2 C done 11 1423d 1424d
general protection fault in io_queue_sqe_fallback io-uring 2 1 877d 873d
KASAN: use-after-free Read in io_wq_put_and_exit io-uring 19 21 908d 911d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_unregister io-uring 6 1 862d 862d
KCSAN: data-race in __io_fill_cqe_req / io_uring_poll (2) io-uring 6 1 877d 877d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel (2) io-uring 6 1 877d 877d
INFO: task hung in io_uring_alloc_task_context (4) io-uring 1 2 987d 991d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker (2) io-uring 6 1 868d 868d
WARNING: refcount bug in io_send_zc_cleanup io-uring 13 1 886d 882d
KASAN: use-after-free Read in __io_req_task_work_add io-uring 19 7 906d 910d
KASAN: use-after-free Read in io_poll_task_func io-uring 19 1 906d 906d
WARNING: ODEBUG bug in __io_put_task io-uring -1 2 908d 910d
KASAN: use-after-free Read in io_req_caches_free io-uring 19 1 910d 910d
INFO: task hung in io_uring_register (2) io-uring 1 1 1006d 1006d
KASAN: use-after-free Read in signalfd_cleanup ext4 io-uring 19 C 4 909d 910d
general protection fault in __fget_files fs io-uring 2 syz done 2 1710d 1709d
general protection fault in io_uring_flush fs io-uring 2 syz error 1 1747d 1746d
KCSAN: data-race in __io_req_complete_post / io_uring_poll io-uring 6 29 959d 1071d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker io-uring 6 1 962d 962d
BUG: corrupted list in io_uring_del_tctx_node io-uring 8 1 1019d 1018d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel io-uring 6 1 977d 977d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (3) io-uring 6 2 991d 1019d
KCSAN: data-race in __io_req_complete_post / io_wake_function (2) io-uring 6 4 996d 1025d
possible deadlock in io_disarm_next fs io-uring 4 C done 5 1174d 1177d
INFO: task hung in io_poll_tw_hash_eject io-uring 1 1 1060d 1060d
KASAN: use-after-free Read in io_poll_check_events fs io-uring 19 C done 20 1193d 1237d
KASAN: use-after-free Write in __io_free_req fs io-uring 24 syz done 1 1350d 1350d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel io-uring 6 1 1035d 1035d
memory leak in io_submit_sqes (3) fs io-uring 3 C 1 1504d 1503d
general protection fault in __io_arm_poll_handler fs io-uring 2 C done unreliable 3 1404d 1405d
KCSAN: data-race in io_submit_sqes / io_uring_poll (4) io-uring 6 123 1048d 1213d
KMSAN: uninit-value in io_fallback_req_func fs io-uring 7 C 8 1175d 1175d
KCSAN: data-race in __do_sys_io_uring_register / io_sqe_buffers_register (3) io-uring 6 1 1051d 1051d
memory leak in anon_inode_getfile io-uring fs 3 C 3 1698d 1704d
memory leak in rw_copy_check_uvector io-uring fs 3 C 1 1784d 1783d
KMSAN: uninit-value in io_req_caches_free fs io-uring 7 C 6 1231d 1307d
KASAN: use-after-free Write in paging32_walk_addr_generic io-uring kvm 24 C done error 6 1694d 1787d
kernel BUG in io_queue_async_work fs io-uring -1 C error unreliable 14 1454d 1459d
WARNING: refcount bug in io_wqe_worker io-uring fs 13 C error error 6 1733d 1766d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (2) io-uring 6 5 1059d 1095d
KCSAN: data-race in __io_req_complete_post / io_wake_function io-uring 6 1 1060d 1060d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (6) io-uring 6 2 1062d 1085d
INFO: rcu detected stall in tctx_task_work (2) fs io-uring 1 syz unreliable 4 1341d 1347d
WARNING in io_poll_task_func (2) fs io-uring -1 C done 1 1346d 1344d
WARNING in io_poll_task_func fs io-uring -1 C done 4 1347d 1346d
WARNING: ODEBUG bug in __put_task_struct io-uring -1 syz done 1 1349d 1347d
INFO: rcu detected stall in tctx_task_work io-uring fs 1 C done 9 1348d 1347d
kernel panic: panic_on_warn set (2) io-uring 2 syz error 1 1401d 1401d