syzbot


Out of 62 bugs, 44 were automatically obsoleted (43 due to revoked reproducers), 18 were invalidated by users.
Applied filters: WithRepro (drop) Label=subsystems:io-uring (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
memory leak in iovec_from_user (5) io-uring 3 syz 1 164d 160d
memory leak in iovec_from_user (4) io-uring 3 C 1 165d 164d
memory leak in iovec_from_user (3) io-uring 3 C 1 166d 166d
general protection fault in io_uring_show_fdinfo (4) io-uring 2 C done 28 248d 247d
general protection fault in io_uring_show_fdinfo (3) io-uring 2 C 9 248d 248d
WARNING in __vmap_pages_range_noflush (2) io-uring -1 C 8 292d 291d
INFO: task hung in io_wq_put_and_exit (5) io-uring input usb 1 C done 9 320d 339d
INFO: task hung in vfs_coredump io-uring 1 syz 3 363d 360d
INFO: task hung in io_uring_del_tctx_node (4) io-uring 1 C done 8 395d 391d
WARNING in io_get_cqe_overflow (2) io-uring -1 C done 9 600d 600d
general protection fault in try_to_wake_up (2) io-uring 19 C done done 3588 709d 1947d
kernel BUG in __io_remove_buffers io-uring -1 C error 9 816d 816d
kernel BUG in put_page io-uring -1 C error 2 816d 816d
WARNING in unsafe_follow_pfn media io-uring -1 C done 33 1867d 1915d
KMSAN: uninit-value in io_req_cqe_overflow io-uring 7 C 622 1031d 1390d
general protection fault in worker_thread (2) io-uring 2 syz 1 1102d 1098d
INFO: task hung in io_ring_exit_work io-uring 1 C unreliable unreliable 820 1089d 1909d
INFO: task hung in io_wq_put_and_exit (3) io-uring 1 C error unreliable 75 1162d 1557d
INFO: task hung in io_uring_del_tctx_node (2) io-uring 1 C error error 20 1203d 1565d
WARNING in io_ring_exit_work io-uring -1 C done done 3550 1156d 1930d
KASAN: use-after-free Read in io_fallback_tw io-uring 19 C error 33 1259d 1262d
KASAN: use-after-free Read in snd_rawmidi_poll io-uring sound 19 C error 20 1259d 1262d
KASAN: use-after-free Read in io_poll_remove_entries io-uring 19 C done done 751 1179d 1558d
memory leak in create_io_worker (2) io-uring fs 3 C 4 1321d 1586d
INFO: task hung in sys_io_uring_register (2) io-uring 1 syz error error 2 1218d 1214d
INFO: task hung in io_uring_register (3) io-uring 1 syz error error 2 1218d 1214d
KASAN: use-after-free Read in io_wqe_worker (2) io-uring 19 C error done 3 1234d 1266d
BUG: bad usercopy in io_openat2_prep (3) io-uring -1 C 12 1223d 1222d
KASAN: use-after-free Read in tctx_task_work (2) io-uring fs 19 C unreliable 358 1243d 1773d
KASAN: use-after-free Read in io_fallback_req_func io-uring 19 C error 18 1259d 1262d
KASAN: use-after-free Read in create_worker_cb fs io-uring 19 C done 3 1915d 1916d
KASAN: use-after-free Read in sock_def_wakeup sctp io-uring 19 C error 2 1259d 1262d
WARNING in __put_task_struct (3) io-uring mm -1 C error 4 1262d 1262d
KASAN: use-after-free Read in pipe_release (2) fs io-uring 19 C error 2 1262d 1258d
KASAN: use-after-free Read in snd_pcm_post_stop sound io-uring 19 C error 1 1262d 1261d
WARNING in follow_hugetlb_page mm io-uring -1 C inconclusive 34 1504d 1506d
KASAN: slab-out-of-bounds Read in mas_leaf_max_gap mm io-uring 19 syz error 3 1300d 1344d
general protection fault in __io_sync_cancel io-uring 10 C error inconclusive 11 1396d 1403d
general protection fault in io_issue_sqe io-uring fs 12 C done unreliable 502 1402d 1759d
INFO: rcu detected stall in io_ring_exit_work fs io-uring 1 C error 6 1694d 1737d
general protection fault in __io_queue_sqe fs io-uring 2 C done 11 1775d 1776d
KASAN: use-after-free Read in signalfd_cleanup ext4 io-uring 19 C 4 1262d 1262d
general protection fault in __fget_files fs io-uring 2 syz done 2 2063d 2062d
general protection fault in io_uring_flush io-uring fs 2 syz error 1 2100d 2098d
possible deadlock in io_disarm_next fs io-uring 4 C done 5 1527d 1529d
KASAN: use-after-free Read in io_poll_check_events io-uring fs 19 C done 20 1546d 1589d
KASAN: use-after-free Write in __io_free_req fs io-uring 22 syz done 1 1702d 1702d
memory leak in io_submit_sqes (3) fs io-uring 3 C 1 1856d 1855d
general protection fault in __io_arm_poll_handler fs io-uring 2 C done unreliable 3 1756d 1758d
KMSAN: uninit-value in io_fallback_req_func fs io-uring 7 C 8 1527d 1527d
memory leak in anon_inode_getfile io-uring fs 3 C 3 2050d 2056d
memory leak in rw_copy_check_uvector fs io-uring 3 C 1 2136d 2136d
KMSAN: uninit-value in io_req_caches_free fs io-uring 7 C 6 1583d 1659d
KASAN: use-after-free Write in paging32_walk_addr_generic io-uring kvm-x86 22 C done error 6 2047d 2140d
kernel BUG in io_queue_async_work io-uring fs -1 C error unreliable 14 1807d 1811d
WARNING: refcount bug in io_wqe_worker io-uring fs 13 C error error 6 2085d 2119d
INFO: rcu detected stall in tctx_task_work (2) fs io-uring 1 syz unreliable 4 1693d 1700d
WARNING in io_poll_task_func (2) fs io-uring -1 C done 1 1699d 1697d
WARNING in io_poll_task_func fs io-uring -1 C done 4 1700d 1699d
WARNING: ODEBUG bug in __put_task_struct mm io-uring -1 syz done 1 1702d 1700d
INFO: rcu detected stall in tctx_task_work fs io-uring 1 C done 9 1700d 1700d
kernel panic: panic_on_warn set (2) io-uring 2 syz error 1 1754d 1754d