syzbot


Out of 157 bugs, 134 were automatically obsoleted (43 due to revoked reproducers), 23 were invalidated by users.
Applied filters: Label=subsystems:io-uring (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
WARNING: [time_after(jiffies, timeout)] io_uring/io_uring.c:LINE at io_ring_exit_work, CPU: kworker/u8:NUM/NUM io-uring -1 1 4d05h 4d05h
memory leak in iovec_from_user (5) io-uring 3 syz 1 15d 11d
KCSAN: data-race in __io_queue_proc / io_poll_wake (5) io-uring 6 1 69d 69d
memory leak in iovec_from_user (4) io-uring 3 C 1 15d 15d
memory leak in iovec_from_user (3) io-uring 3 C 1 17d 17d
KASAN: slab-use-after-free Read in io_poll_remove_entries (2) io-uring 19 1 63d 62d
KCSAN: data-race in io_wq_worker / kthread_is_per_cpu io-uring 6 1 135d 135d
INFO: task hung in io_handle_tw_list io-uring 1 1 175d 175d
general protection fault in io_uring_show_fdinfo (4) io-uring 2 C done 28 98d 97d
general protection fault in io_uring_show_fdinfo (3) io-uring 2 C 9 99d 99d
INFO: rcu detected stall in io_uring_setup bpf io-uring 1 2 197d 205d
KCSAN: data-race in __io_queue_proc / io_poll_wake (4) io-uring 6 4 166d 251d
WARNING in io_req_task_complete io-uring -1 2 214d 303d
KCSAN: data-race in io_sq_offload_create / prepare_creds io-uring 6 1 173d 173d
WARNING in __vmap_pages_range_noflush (2) io-uring -1 C 8 143d 141d
INFO: task hung in io_wq_put_and_exit (5) io-uring input usb 1 C done 9 171d 190d
INFO: task hung in vfs_coredump io-uring 1 syz 3 214d 211d
WARNING: io_uring/io_uring.c:LINE at io_ring_exit_work, CPU: kworker/u8:NUM/NUM io-uring -1 2 227d 223d
INFO: task hung in io_uring_del_tctx_node (4) io-uring 1 C done 8 245d 241d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (4) io-uring 6 8 308d 430d
INFO: task hung in sys_io_uring_enter io-uring 1 1 343d 343d
KMSAN: uninit-value in putname io-uring 7 1 281d 276d
KCSAN: data-race in io_sq_thread / io_sq_thread_stop io-uring 6 4 342d 402d
INFO: task hung in io_uring_alloc_task_context (5) io-uring 1 1 389d 389d
INFO: rcu detected stall in io_uring_enter (4) io-uring 1 1 391d 391d
possible deadlock in io_uring_mmap io-uring 4 1 327d 323d
INFO: rcu detected stall in sys_io_uring_setup (2) io-uring mm 1 2 415d 459d
KCSAN: data-race in io_recv / io_wq_free_work io-uring 6 2 412d 412d
INFO: rcu detected stall in io_handle_tw_list io-uring 1 2 456d 478d
WARNING in io_get_cqe_overflow (2) io-uring -1 C done 9 451d 451d
INFO: task hung in io_wq_worker io-uring 1 1 496d 496d
INFO: rcu detected stall in io_uring_enter (3) io-uring 1 1 508d 508d
INFO: task hung in sys_io_uring_register (3) io-uring 1 1 509d 509d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (3) io-uring 6 2 468d 469d
KCSAN: data-race in __io_queue_proc / io_poll_wake (3) io-uring 6 2 485d 485d
WARNING in io_sq_thread io-uring -1 1 526d 522d
INFO: task hung in io_uring_register (5) io-uring 1 1 565d 565d
KCSAN: data-race in io_submit_sqes / io_uring_poll (8) io-uring 6 18 513d 586d
KCSAN: data-race in io_flush_timeouts / io_issue_sqe io-uring 6 1 515d 515d
INFO: task hung in io_uring_del_tctx_node (3) io-uring 1 1 574d 574d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (2) io-uring 6 6 523d 535d
INFO: task hung in io_put_sq_data io-uring 1 1 619d 619d
INFO: rcu detected stall in io_uring_enter (2) io-uring 1 1 633d 633d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (11) io-uring 6 1 579d 579d
general protection fault in try_to_wake_up (2) io-uring 19 C done done 3588 560d 1798d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (3) io-uring 6 2 590d 595d
KCSAN: data-race in __flush_work / __flush_work io-uring 6 1 594d 594d
KCSAN: data-race in __io_commit_cqring_flush / io_submit_sqes io-uring 6 1 601d 601d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work io-uring 6 3 606d 633d
kernel BUG in __io_remove_buffers io-uring -1 C error 9 666d 667d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running (2) io-uring 6 5 629d 635d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker io-uring 6 16 625d 636d
INFO: task hung in io_uring_register (4) io-uring 1 1 687d 687d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (10) io-uring 6 1 637d 637d
kernel BUG in put_page io-uring -1 C error 2 667d 667d
KCSAN: data-race in io_submit_sqes / io_uring_poll (7) io-uring 6 1 653d 653d
KCSAN: data-race in __io_queue_proc / io_poll_wake (2) io-uring 6 2 667d 667d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_unregister io-uring 6 1 687d 687d
WARNING in unsafe_follow_pfn media io-uring -1 C done 33 1718d 1766d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (9) io-uring 6 2 710d 728d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register (2) io-uring 6 1 712d 712d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (8) io-uring 6 2 720d 746d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_register io-uring 6 1 746d 746d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (7) io-uring 6 2 798d 780d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (8) io-uring 6 1 799d 779d
KCSAN: data-race in io_submit_sqes / io_uring_poll (6) io-uring 6 1 809d 780d
KCSAN: data-race in __io_queue_proc / io_poll_wake io-uring 6 1 826d 826d
KMSAN: uninit-value in io_req_cqe_overflow io-uring 7 C 622 881d 1241d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (7) io-uring 6 1 868d 862d
general protection fault in worker_thread (2) io-uring 2 syz 1 953d 949d
KCSAN: data-race in __io_uring_show_fdinfo / io_submit_sqes io-uring 6 1 888d 874d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running io-uring 6 17 884d 869d
INFO: task hung in io_ring_exit_work io-uring 1 C unreliable unreliable 820 940d 1760d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (6) io-uring 6 4 906d 952d
BUG: unable to handle kernel NULL pointer dereference in __io_remove_buffers io-uring 10 1 979d 975d
INFO: task hung in io_wq_put_and_exit (3) io-uring 1 C error unreliable 75 1013d 1408d
INFO: task hung in io_uring_del_tctx_node (2) io-uring 1 C error error 20 1053d 1416d
WARNING in io_ring_exit_work io-uring -1 C done done 3550 1006d 1780d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register io-uring 6 1 974d 974d
KASAN: use-after-free Read in io_fallback_tw io-uring 19 C error 33 1109d 1113d
KASAN: use-after-free Read in snd_rawmidi_poll io-uring sound 19 C error 20 1109d 1113d
KASAN: use-after-free Read in io_poll_remove_entries io-uring 19 C done done 751 1029d 1409d
memory leak in create_io_worker (2) io-uring fs 3 C 4 1171d 1436d
INFO: task hung in sys_io_uring_register (2) io-uring 1 syz error error 2 1068d 1065d
INFO: task hung in io_uring_register (3) io-uring 1 syz error error 2 1069d 1065d
KASAN: use-after-free Read in io_wqe_worker (2) io-uring 19 C error done 3 1085d 1116d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (5) io-uring 6 1 1004d 1004d
KCSAN: data-race in io_wqe_activate_free_worker / io_wqe_worker io-uring 6 386 1008d 1392d
KCSAN: data-race in io_wq_worker_running / io_wqe_activate_free_worker io-uring 6 599 1008d 1366d
KCSAN: data-race in io_submit_sqes / io_uring_poll (5) io-uring 6 21 1010d 1199d
INFO: task hung in io_req_task_cancel io-uring 1 1 1069d 1069d
BUG: bad usercopy in io_openat2_prep (3) io-uring -1 C 12 1074d 1073d
KASAN: use-after-free Read in tctx_task_work (2) io-uring fs 19 C unreliable 358 1093d 1624d
KCSAN: data-race in __io_fill_cqe_req / io_timeout io-uring 6 2 1038d 1011d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (2) io-uring 6 1 1033d 1033d
INFO: task hung in io_uring_enter io-uring 1 1 1060d 1060d
KCSAN: data-race in io_sqpoll_wait_sq / io_submit_sqes io-uring 6 1 1035d 1035d
KASAN: use-after-free Read in io_fallback_req_func io-uring 19 C error 18 1109d 1113d
KASAN: use-after-free Read in create_worker_cb fs io-uring 19 C done 3 1766d 1766d
KASAN: use-after-free Read in sock_def_wakeup sctp io-uring 19 C error 2 1110d 1112d
WARNING in __put_task_struct (3) io-uring mm -1 C error 4 1112d 1113d
KASAN: use-after-free Read in pipe_release (2) fs io-uring 19 C error 2 1112d 1108d
KASAN: use-after-free Read in snd_pcm_post_stop sound io-uring 19 C error 1 1113d 1112d
WARNING in follow_hugetlb_page mm io-uring -1 C inconclusive 34 1354d 1357d
KASAN: slab-out-of-bounds Read in mas_leaf_max_gap mm io-uring 19 syz error 3 1151d 1195d
general protection fault in __io_sync_cancel io-uring 10 C error inconclusive 11 1247d 1254d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (4) io-uring 6 4 1057d 1098d
general protection fault in io_issue_sqe io-uring fs 12 C done unreliable 502 1252d 1610d
INFO: rcu detected stall in io_ring_exit_work fs io-uring 1 C error 6 1545d 1587d
general protection fault in __io_queue_sqe fs io-uring 2 C done 11 1626d 1627d
general protection fault in io_queue_sqe_fallback io-uring 2 1 1080d 1076d
KASAN: use-after-free Read in io_wq_put_and_exit io-uring 19 21 1111d 1114d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_unregister io-uring 6 1 1065d 1065d
KCSAN: data-race in __io_fill_cqe_req / io_uring_poll (2) io-uring 6 1 1080d 1080d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel (2) io-uring 6 1 1080d 1080d
INFO: task hung in io_uring_alloc_task_context (4) io-uring 1 2 1190d 1194d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker (2) io-uring 6 1 1071d 1071d
WARNING: refcount bug in io_send_zc_cleanup io-uring 13 1 1090d 1086d
KASAN: use-after-free Read in __io_req_task_work_add io-uring 19 7 1109d 1113d
KASAN: use-after-free Read in io_poll_task_func io-uring 19 1 1109d 1109d
WARNING: ODEBUG bug in __io_put_task io-uring -1 2 1112d 1113d
KASAN: use-after-free Read in io_req_caches_free io-uring 19 1 1113d 1113d
INFO: task hung in io_uring_register (2) io-uring 1 1 1209d 1209d
KASAN: use-after-free Read in signalfd_cleanup ext4 io-uring 19 C 4 1112d 1113d
general protection fault in __fget_files fs io-uring 2 syz done 2 1913d 1913d
general protection fault in io_uring_flush io-uring fs 2 syz error 1 1950d 1949d
KCSAN: data-race in __io_req_complete_post / io_uring_poll io-uring 6 29 1162d 1274d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker io-uring 6 1 1165d 1165d
BUG: corrupted list in io_uring_del_tctx_node io-uring 8 1 1223d 1222d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel io-uring 6 1 1180d 1180d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (3) io-uring 6 2 1194d 1222d
KCSAN: data-race in __io_req_complete_post / io_wake_function (2) io-uring 6 4 1199d 1228d
possible deadlock in io_disarm_next fs io-uring 4 C done 5 1377d 1380d
INFO: task hung in io_poll_tw_hash_eject io-uring 1 1 1263d 1263d
KASAN: use-after-free Read in io_poll_check_events io-uring fs 19 C done 20 1396d 1440d
KASAN: use-after-free Write in __io_free_req fs io-uring 24 syz done 1 1553d 1553d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel io-uring 6 1 1238d 1238d
memory leak in io_submit_sqes (3) fs io-uring 3 C 1 1707d 1706d
general protection fault in __io_arm_poll_handler fs io-uring 2 C done unreliable 3 1607d 1608d
KCSAN: data-race in io_submit_sqes / io_uring_poll (4) io-uring 6 123 1251d 1417d
KMSAN: uninit-value in io_fallback_req_func fs io-uring 7 C 8 1378d 1378d
KCSAN: data-race in __do_sys_io_uring_register / io_sqe_buffers_register (3) io-uring 6 1 1254d 1254d
memory leak in anon_inode_getfile io-uring fs 3 C 3 1901d 1907d
memory leak in rw_copy_check_uvector fs io-uring 3 C 1 1987d 1987d
KMSAN: uninit-value in io_req_caches_free fs io-uring 7 C 6 1434d 1510d
KASAN: use-after-free Write in paging32_walk_addr_generic io-uring kvm-x86 24 C done error 6 1897d 1991d
kernel BUG in io_queue_async_work io-uring fs -1 C error unreliable 14 1657d 1662d
WARNING: refcount bug in io_wqe_worker io-uring fs 13 C error error 6 1936d 1969d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (2) io-uring 6 5 1262d 1298d
KCSAN: data-race in __io_req_complete_post / io_wake_function io-uring 6 1 1264d 1264d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (6) io-uring 6 2 1265d 1288d
INFO: rcu detected stall in tctx_task_work (2) fs io-uring 1 syz unreliable 4 1544d 1550d
WARNING in io_poll_task_func (2) fs io-uring -1 C done 1 1549d 1547d
WARNING in io_poll_task_func fs io-uring -1 C done 4 1551d 1550d
WARNING: ODEBUG bug in __put_task_struct mm io-uring -1 syz done 1 1553d 1551d
INFO: rcu detected stall in tctx_task_work fs io-uring 1 C done 9 1551d 1551d
kernel panic: panic_on_warn set (2) io-uring 2 syz error 1 1604d 1604d