Out of 63 bugs, 45 were automatically obsoleted (44 due to revoked reproducers), 18 were invalidated by users.
Applied filters: WithRepro (drop) Label=subsystems:io-uring (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
WARNING: refcount bug in zcrx_unregister_user prio:normal io-uring net 13 syz 7 65d 60d
memory leak in iovec_from_user (5) io-uring 3 syz 1 270d 266d
memory leak in iovec_from_user (4) io-uring 3 syz, C 1 270d 270d
memory leak in iovec_from_user (3) io-uring 3 syz, C 1 272d 272d
general protection fault in io_uring_show_fdinfo (4) io-uring 2 syz, C done 28 353d 353d
general protection fault in io_uring_show_fdinfo (3) io-uring 2 syz, C 9 354d 354d
WARNING in __vmap_pages_range_noflush (2) io-uring -1 syz, C 8 398d 397d
INFO: task hung in io_wq_put_and_exit (5) io-uring input usb 1 syz, C done 9 426d 445d
INFO: task hung in vfs_coredump io-uring 1 syz 3 469d 466d
INFO: task hung in io_uring_del_tctx_node (4) io-uring 1 syz, C done 8 500d 496d
WARNING in io_get_cqe_overflow (2) io-uring -1 syz, C done 9 706d 706d
general protection fault in try_to_wake_up (2) io-uring 19 syz, C done done 3588 815d 2053d
kernel BUG in __io_remove_buffers io-uring -1 syz, C error 9 921d 922d
kernel BUG in put_page io-uring -1 syz, C error 2 922d 922d
WARNING in unsafe_follow_pfn media io-uring -1 syz, C done 33 1973d 2021d
KMSAN: uninit-value in io_req_cqe_overflow io-uring 7 syz, C 622 1136d 1496d
general protection fault in worker_thread (2) io-uring 2 syz 1 1208d 1204d
INFO: task hung in io_ring_exit_work io-uring 1 syz, C unreliable unreliable 820 1195d 2015d
INFO: task hung in io_wq_put_and_exit (3) io-uring 1 syz, C error unreliable 75 1268d 1663d
INFO: task hung in io_uring_del_tctx_node (2) io-uring 1 syz, C error error 20 1309d 1671d
WARNING in io_ring_exit_work io-uring -1 syz, C done done 3550 1261d 2036d
KASAN: use-after-free Read in io_fallback_tw io-uring 19 syz, C error 33 1364d 1368d
KASAN: use-after-free Read in snd_rawmidi_poll io-uring sound 19 syz, C error 20 1364d 1368d
KASAN: use-after-free Read in io_poll_remove_entries io-uring 19 syz, C done done 751 1285d 1664d
memory leak in create_io_worker (2) io-uring fs 3 syz, C 4 1426d 1691d
INFO: task hung in sys_io_uring_register (2) io-uring 1 syz error error 2 1324d 1320d
INFO: task hung in io_uring_register (3) io-uring 1 syz error error 2 1324d 1320d
KASAN: use-after-free Read in io_wqe_worker (2) io-uring 19 syz, C error done 3 1340d 1371d
BUG: bad usercopy in io_openat2_prep (3) io-uring -1 syz, C 12 1329d 1328d
KASAN: use-after-free Read in tctx_task_work (2) io-uring fs 19 syz, C unreliable 358 1348d 1879d
KASAN: use-after-free Read in io_fallback_req_func io-uring 19 syz, C error 18 1364d 1368d
KASAN: use-after-free Read in create_worker_cb fs io-uring 19 syz, C done 3 2021d 2022d
KASAN: use-after-free Read in sock_def_wakeup sctp io-uring 19 syz, C error 2 1365d 1368d
WARNING in __put_task_struct (3) io-uring mm -1 syz, C error 4 1368d 1368d
KASAN: use-after-free Read in pipe_release (2) fs io-uring 19 syz, C error 2 1368d 1364d
KASAN: use-after-free Read in snd_pcm_post_stop sound io-uring 19 syz, C error 1 1368d 1367d
WARNING in follow_hugetlb_page mm io-uring -1 syz, C inconclusive 34 1609d 1612d
KASAN: slab-out-of-bounds Read in mas_leaf_max_gap mm io-uring 19 syz error 3 1406d 1450d
general protection fault in __io_sync_cancel io-uring 10 syz, C error inconclusive 11 1502d 1509d
general protection fault in io_issue_sqe io-uring fs 12 syz, C done unreliable 502 1508d 1865d
INFO: rcu detected stall in io_ring_exit_work fs io-uring 1 syz, C error 6 1800d 1842d
general protection fault in __io_queue_sqe fs io-uring 2 syz, C done 11 1881d 1882d
KASAN: use-after-free Read in signalfd_cleanup ext4 io-uring 19 syz, C 4 1368d 1368d
general protection fault in __fget_files fs io-uring 2 syz done 2 2168d 2168d
general protection fault in io_uring_flush io-uring fs 2 syz error 1 2206d 2204d
possible deadlock in io_disarm_next fs io-uring 4 syz, C done 5 1632d 1635d
KASAN: use-after-free Read in io_poll_check_events io-uring fs 19 syz, C done 20 1651d 1695d
KASAN: use-after-free Write in __io_free_req fs io-uring 22 syz done 1 1808d 1808d
memory leak in io_submit_sqes (3) fs io-uring 3 syz, C 1 1962d 1961d
general protection fault in __io_arm_poll_handler fs io-uring 2 syz, C done unreliable 3 1862d 1864d
KMSAN: uninit-value in io_fallback_req_func fs io-uring 7 syz, C 8 1633d 1633d
memory leak in anon_inode_getfile io-uring fs 3 syz, C 3 2156d 2162d
memory leak in rw_copy_check_uvector fs io-uring 3 syz, C 1 2242d 2242d
KMSAN: uninit-value in io_req_caches_free fs io-uring 7 syz, C 6 1689d 1765d
KASAN: use-after-free Write in paging32_walk_addr_generic io-uring kvm-x86 22 syz, C done error 6 2152d 2246d
kernel BUG in io_queue_async_work io-uring fs -1 syz, C error unreliable 14 1912d 1917d
WARNING: refcount bug in io_wqe_worker io-uring fs 13 syz, C error error 6 2191d 2225d
INFO: rcu detected stall in tctx_task_work (2) fs io-uring 1 syz unreliable 4 1799d 1806d
WARNING in io_poll_task_func (2) fs io-uring -1 syz, C done 1 1805d 1803d
WARNING in io_poll_task_func fs io-uring -1 syz, C done 4 1806d 1805d
WARNING: ODEBUG bug in __put_task_struct mm io-uring -1 syz done 1 1808d 1806d
INFO: rcu detected stall in tctx_task_work fs io-uring 1 syz, C done 9 1806d 1806d
kernel panic: panic_on_warn set (2) io-uring 2 syz error 1 1859d 1859d