syzbot


Out of 164 bugs, 141 were automatically obsoleted (43 due to revoked reproducers), 23 were invalidated by users.
Applied filters: Label=subsystems:io-uring (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
INFO: rcu detected stall in io_wq_worker (2) io-uring prio:high 1 1 106d 106d
KCSAN: data-race in __se_sys_io_uring_enter / io_submit_sqes io-uring 6 1 120d 120d
INFO: task hung in io_uring_register (6) io-uring 1 1 156d 156d
INFO: rcu detected stall in io_fallback_req_func io-uring 1 1 165d 165d
KCSAN: data-race in io_submit_sqes / io_uring_poll (9) io-uring 6 1 132d 132d
INFO: rcu detected stall in io_sq_thread (2) io-uring 1 1 180d 180d
INFO: task hung in io_file_get_fixed io-uring 1 2 224d 236d
WARNING: [time_after(jiffies, timeout)] io_uring/io_uring.c:LINE at io_ring_exit_work, CPU: kworker/u8:NUM/NUM io-uring -1 1 146d 146d
memory leak in iovec_from_user (5) io-uring 3 syz 1 157d 153d
KCSAN: data-race in __io_queue_proc / io_poll_wake (5) io-uring 6 1 211d 211d
memory leak in iovec_from_user (4) io-uring 3 C 1 158d 158d
memory leak in iovec_from_user (3) io-uring 3 C 1 160d 159d
KASAN: slab-use-after-free Read in io_poll_remove_entries (2) io-uring 19 1 206d 205d
KCSAN: data-race in io_wq_worker / kthread_is_per_cpu io-uring 6 1 277d 277d
INFO: task hung in io_handle_tw_list io-uring 1 1 318d 318d
general protection fault in io_uring_show_fdinfo (4) io-uring 2 C done 28 241d 240d
general protection fault in io_uring_show_fdinfo (3) io-uring 2 C 9 242d 241d
INFO: rcu detected stall in io_uring_setup bpf io-uring 1 2 339d 347d
KCSAN: data-race in __io_queue_proc / io_poll_wake (4) io-uring 6 4 309d 394d
WARNING in io_req_task_complete io-uring -1 2 356d 446d
KCSAN: data-race in io_sq_offload_create / prepare_creds io-uring 6 1 315d 315d
WARNING in __vmap_pages_range_noflush (2) io-uring -1 C 8 286d 284d
INFO: task hung in io_wq_put_and_exit (5) io-uring input usb 1 C done 9 313d 332d
INFO: task hung in vfs_coredump io-uring 1 syz 3 356d 353d
WARNING: io_uring/io_uring.c:LINE at io_ring_exit_work, CPU: kworker/u8:NUM/NUM io-uring -1 2 369d 366d
INFO: task hung in io_uring_del_tctx_node (4) io-uring 1 C done 8 388d 384d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (4) io-uring 6 8 451d 573d
INFO: task hung in sys_io_uring_enter io-uring 1 1 486d 486d
KMSAN: uninit-value in putname io-uring 7 1 424d 419d
KCSAN: data-race in io_sq_thread / io_sq_thread_stop io-uring 6 4 485d 545d
INFO: task hung in io_uring_alloc_task_context (5) io-uring 1 1 531d 531d
INFO: rcu detected stall in io_uring_enter (4) io-uring 1 1 534d 534d
possible deadlock in io_uring_mmap io-uring 4 1 470d 466d
INFO: rcu detected stall in sys_io_uring_setup (2) io-uring mm 1 2 558d 602d
KCSAN: data-race in io_recv / io_wq_free_work io-uring 6 2 555d 555d
INFO: rcu detected stall in io_handle_tw_list io-uring 1 2 599d 621d
WARNING in io_get_cqe_overflow (2) io-uring -1 C done 9 594d 594d
INFO: task hung in io_wq_worker io-uring 1 1 638d 638d
INFO: rcu detected stall in io_uring_enter (3) io-uring 1 1 651d 651d
INFO: task hung in sys_io_uring_register (3) io-uring 1 1 652d 652d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (3) io-uring 6 2 610d 612d
KCSAN: data-race in __io_queue_proc / io_poll_wake (3) io-uring 6 2 627d 627d
WARNING in io_sq_thread io-uring -1 1 669d 665d
INFO: task hung in io_uring_register (5) io-uring 1 1 708d 708d
KCSAN: data-race in io_submit_sqes / io_uring_poll (8) io-uring 6 18 656d 729d
KCSAN: data-race in io_flush_timeouts / io_issue_sqe io-uring 6 1 658d 658d
INFO: task hung in io_uring_del_tctx_node (3) io-uring 1 1 717d 717d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (2) io-uring 6 6 666d 678d
INFO: task hung in io_put_sq_data io-uring 1 1 762d 762d
INFO: rcu detected stall in io_uring_enter (2) io-uring 1 1 776d 776d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (11) io-uring 6 1 721d 721d
general protection fault in try_to_wake_up (2) io-uring 19 C done done 3588 702d 1940d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (3) io-uring 6 2 733d 737d
KCSAN: data-race in __flush_work / __flush_work io-uring 6 1 737d 737d
KCSAN: data-race in __io_commit_cqring_flush / io_submit_sqes io-uring 6 1 744d 744d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work io-uring 6 3 749d 776d
kernel BUG in __io_remove_buffers io-uring -1 C error 9 809d 809d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running (2) io-uring 6 5 772d 778d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker io-uring 6 16 768d 779d
INFO: task hung in io_uring_register (4) io-uring 1 1 830d 830d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (10) io-uring 6 1 780d 780d
kernel BUG in put_page io-uring -1 C error 2 810d 810d
KCSAN: data-race in io_submit_sqes / io_uring_poll (7) io-uring 6 1 796d 796d
KCSAN: data-race in __io_queue_proc / io_poll_wake (2) io-uring 6 2 809d 810d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_unregister io-uring 6 1 830d 830d
WARNING in unsafe_follow_pfn media io-uring -1 C done 33 1861d 1908d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (9) io-uring 6 2 853d 871d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register (2) io-uring 6 1 855d 855d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (8) io-uring 6 2 862d 889d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_register io-uring 6 1 889d 889d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (7) io-uring 6 2 941d 923d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (8) io-uring 6 1 942d 922d
KCSAN: data-race in io_submit_sqes / io_uring_poll (6) io-uring 6 1 952d 923d
KCSAN: data-race in __io_queue_proc / io_poll_wake io-uring 6 1 969d 969d
KMSAN: uninit-value in io_req_cqe_overflow io-uring 7 C 622 1024d 1383d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (7) io-uring 6 1 1011d 1005d
general protection fault in worker_thread (2) io-uring 2 syz 1 1095d 1091d
KCSAN: data-race in __io_uring_show_fdinfo / io_submit_sqes io-uring 6 1 1031d 1016d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running io-uring 6 17 1026d 1012d
INFO: task hung in io_ring_exit_work io-uring 1 C unreliable unreliable 820 1083d 1903d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (6) io-uring 6 4 1049d 1095d
BUG: unable to handle kernel NULL pointer dereference in __io_remove_buffers io-uring 10 1 1122d 1118d
INFO: task hung in io_wq_put_and_exit (3) io-uring 1 C error unreliable 75 1156d 1550d
INFO: task hung in io_uring_del_tctx_node (2) io-uring 1 C error error 20 1196d 1558d
WARNING in io_ring_exit_work io-uring -1 C done done 3550 1149d 1923d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register io-uring 6 1 1116d 1116d
KASAN: use-after-free Read in io_fallback_tw io-uring 19 C error 33 1252d 1256d
KASAN: use-after-free Read in snd_rawmidi_poll io-uring sound 19 C error 20 1252d 1256d
KASAN: use-after-free Read in io_poll_remove_entries io-uring 19 C done done 751 1172d 1552d
memory leak in create_io_worker (2) io-uring fs 3 C 4 1314d 1579d
INFO: task hung in sys_io_uring_register (2) io-uring 1 syz error error 2 1211d 1207d
INFO: task hung in io_uring_register (3) io-uring 1 syz error error 2 1211d 1207d
KASAN: use-after-free Read in io_wqe_worker (2) io-uring 19 C error done 3 1228d 1259d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (5) io-uring 6 1 1147d 1147d
KCSAN: data-race in io_wqe_activate_free_worker / io_wqe_worker io-uring 6 386 1151d 1534d
KCSAN: data-race in io_wq_worker_running / io_wqe_activate_free_worker io-uring 6 599 1151d 1509d
KCSAN: data-race in io_submit_sqes / io_uring_poll (5) io-uring 6 21 1153d 1341d
INFO: task hung in io_req_task_cancel io-uring 1 1 1211d 1211d
BUG: bad usercopy in io_openat2_prep (3) io-uring -1 C 12 1216d 1215d
KASAN: use-after-free Read in tctx_task_work (2) io-uring fs 19 C unreliable 358 1236d 1767d
KCSAN: data-race in __io_fill_cqe_req / io_timeout io-uring 6 2 1180d 1154d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (2) io-uring 6 1 1175d 1175d
INFO: task hung in io_uring_enter io-uring 1 1 1203d 1203d
KCSAN: data-race in io_sqpoll_wait_sq / io_submit_sqes io-uring 6 1 1178d 1178d
KASAN: use-after-free Read in io_fallback_req_func io-uring 19 C error 18 1252d 1256d
KASAN: use-after-free Read in create_worker_cb fs io-uring 19 C done 3 1908d 1909d
KASAN: use-after-free Read in sock_def_wakeup sctp io-uring 19 C error 2 1253d 1255d
WARNING in __put_task_struct (3) io-uring mm -1 C error 4 1255d 1256d
KASAN: use-after-free Read in pipe_release (2) fs io-uring 19 C error 2 1255d 1251d
KASAN: use-after-free Read in snd_pcm_post_stop sound io-uring 19 C error 1 1255d 1255d
WARNING in follow_hugetlb_page mm io-uring -1 C inconclusive 34 1497d 1500d
KASAN: slab-out-of-bounds Read in mas_leaf_max_gap mm io-uring 19 syz error 3 1294d 1338d
general protection fault in __io_sync_cancel io-uring 10 C error inconclusive 11 1390d 1396d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (4) io-uring 6 4 1200d 1241d
general protection fault in io_issue_sqe io-uring fs 12 C done unreliable 502 1395d 1752d
INFO: rcu detected stall in io_ring_exit_work fs io-uring 1 C error 6 1687d 1730d
general protection fault in __io_queue_sqe fs io-uring 2 C done 11 1769d 1769d
general protection fault in io_queue_sqe_fallback io-uring 2 1 1223d 1219d
KASAN: use-after-free Read in io_wq_put_and_exit io-uring 19 21 1254d 1257d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_unregister io-uring 6 1 1208d 1208d
KCSAN: data-race in __io_fill_cqe_req / io_uring_poll (2) io-uring 6 1 1223d 1223d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel (2) io-uring 6 1 1223d 1223d
INFO: task hung in io_uring_alloc_task_context (4) io-uring 1 2 1332d 1337d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker (2) io-uring 6 1 1214d 1214d
WARNING: refcount bug in io_send_zc_cleanup io-uring 13 1 1232d 1228d
KASAN: use-after-free Read in __io_req_task_work_add io-uring 19 7 1252d 1256d
KASAN: use-after-free Read in io_poll_task_func io-uring 19 1 1252d 1252d
WARNING: ODEBUG bug in __io_put_task io-uring -1 2 1254d 1256d
KASAN: use-after-free Read in io_req_caches_free io-uring 19 1 1256d 1256d
INFO: task hung in io_uring_register (2) io-uring 1 1 1352d 1352d
KASAN: use-after-free Read in signalfd_cleanup ext4 io-uring 19 C 4 1255d 1256d
general protection fault in __fget_files fs io-uring 2 syz done 2 2056d 2055d
general protection fault in io_uring_flush io-uring fs 2 syz error 1 2093d 2092d
KCSAN: data-race in __io_req_complete_post / io_uring_poll io-uring 6 29 1305d 1417d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker io-uring 6 1 1308d 1308d
BUG: corrupted list in io_uring_del_tctx_node io-uring 8 1 1365d 1364d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel io-uring 6 1 1323d 1323d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (3) io-uring 6 2 1337d 1365d
KCSAN: data-race in __io_req_complete_post / io_wake_function (2) io-uring 6 4 1342d 1371d
possible deadlock in io_disarm_next fs io-uring 4 C done 5 1520d 1523d
INFO: task hung in io_poll_tw_hash_eject io-uring 1 1 1406d 1406d
KASAN: use-after-free Read in io_poll_check_events io-uring fs 19 C done 20 1539d 1583d
KASAN: use-after-free Write in __io_free_req fs io-uring 22 syz done 1 1695d 1695d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel io-uring 6 1 1381d 1381d
memory leak in io_submit_sqes (3) fs io-uring 3 C 1 1850d 1849d
general protection fault in __io_arm_poll_handler fs io-uring 2 C done unreliable 3 1749d 1751d
KCSAN: data-race in io_submit_sqes / io_uring_poll (4) io-uring 6 123 1394d 1559d
KMSAN: uninit-value in io_fallback_req_func fs io-uring 7 C 8 1521d 1521d
KCSAN: data-race in __do_sys_io_uring_register / io_sqe_buffers_register (3) io-uring 6 1 1397d 1397d
memory leak in anon_inode_getfile io-uring fs 3 C 3 2043d 2049d
memory leak in rw_copy_check_uvector fs io-uring 3 C 1 2129d 2129d
KMSAN: uninit-value in io_req_caches_free fs io-uring 7 C 6 1576d 1653d
KASAN: use-after-free Write in paging32_walk_addr_generic io-uring kvm-x86 22 C done error 6 2040d 2133d
kernel BUG in io_queue_async_work io-uring fs -1 C error unreliable 14 1800d 1805d
WARNING: refcount bug in io_wqe_worker io-uring fs 13 C error error 6 2078d 2112d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (2) io-uring 6 5 1405d 1441d
KCSAN: data-race in __io_req_complete_post / io_wake_function io-uring 6 1 1406d 1406d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (6) io-uring 6 2 1408d 1431d
INFO: rcu detected stall in tctx_task_work (2) fs io-uring 1 syz unreliable 4 1687d 1693d
WARNING in io_poll_task_func (2) fs io-uring -1 C done 1 1692d 1690d
WARNING in io_poll_task_func fs io-uring -1 C done 4 1693d 1692d
WARNING: ODEBUG bug in __put_task_struct mm io-uring -1 syz done 1 1695d 1693d
INFO: rcu detected stall in tctx_task_work fs io-uring 1 C done 9 1694d 1693d
kernel panic: panic_on_warn set (2) io-uring 2 syz error 1 1747d 1747d