syzbot


Out of 145 bugs, 129 were automatically obsoleted (43 due to revoked reproducers), 16 were invalidated by users.
Applied filters: Label=subsystems:io-uring (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
WARNING in io_req_task_complete io-uring -1 2 101d 191d
KCSAN: data-race in io_sq_offload_create / prepare_creds io-uring 6 1 60d 60d
WARNING in __vmap_pages_range_noflush (2) io-uring -1 C 8 31d 29d
INFO: task hung in io_wq_put_and_exit (5) io-uring input usb 1 C done 9 59d 78d
INFO: task hung in vfs_coredump io-uring 1 syz 3 101d 98d
WARNING: io_uring/io_uring.c:LINE at io_ring_exit_work, CPU: kworker/u8:NUM/NUM io-uring -1 2 114d 111d
INFO: task hung in io_uring_del_tctx_node (4) io-uring 1 C done 8 133d 129d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (4) io-uring 6 8 196d 318d
INFO: task hung in sys_io_uring_enter io-uring 1 1 231d 231d
KMSAN: uninit-value in putname io-uring 7 1 169d 164d
KCSAN: data-race in io_sq_thread / io_sq_thread_stop io-uring 6 4 230d 290d
INFO: task hung in io_uring_alloc_task_context (5) io-uring 1 1 276d 276d
INFO: rcu detected stall in io_uring_enter (4) io-uring 1 1 279d 279d
possible deadlock in io_uring_mmap io-uring 4 1 215d 211d
INFO: rcu detected stall in sys_io_uring_setup (2) io-uring mm 1 2 303d 347d
KCSAN: data-race in io_recv / io_wq_free_work io-uring 6 2 300d 300d
INFO: rcu detected stall in io_handle_tw_list io-uring 1 2 344d 366d
WARNING in io_get_cqe_overflow (2) io-uring -1 C done 9 339d 339d
INFO: task hung in io_wq_worker io-uring 1 1 384d 384d
INFO: rcu detected stall in io_uring_enter (3) io-uring 1 1 396d 396d
INFO: task hung in sys_io_uring_register (3) io-uring 1 1 397d 397d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (3) io-uring 6 2 356d 357d
KCSAN: data-race in __io_queue_proc / io_poll_wake (3) io-uring 6 2 372d 372d
WARNING in io_sq_thread io-uring -1 1 414d 410d
INFO: task hung in io_uring_register (5) io-uring 1 1 453d 453d
KCSAN: data-race in io_submit_sqes / io_uring_poll (8) io-uring 6 18 401d 474d
KCSAN: data-race in io_flush_timeouts / io_issue_sqe io-uring 6 1 403d 403d
INFO: task hung in io_uring_del_tctx_node (3) io-uring 1 1 462d 462d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work (2) io-uring 6 6 411d 423d
INFO: task hung in io_put_sq_data io-uring 1 1 507d 507d
INFO: rcu detected stall in io_uring_enter (2) io-uring 1 1 521d 521d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (11) io-uring 6 1 466d 466d
general protection fault in try_to_wake_up (2) io-uring 19 C done done 3588 447d 1686d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (3) io-uring 6 2 478d 482d
KCSAN: data-race in __flush_work / __flush_work io-uring 6 1 482d 482d
KCSAN: data-race in __io_commit_cqring_flush / io_submit_sqes io-uring 6 1 489d 489d
KCSAN: data-race in io_req_defer_failed / io_wq_free_work io-uring 6 3 494d 521d
kernel BUG in __io_remove_buffers io-uring -1 C error 9 554d 554d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running (2) io-uring 6 5 517d 523d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker io-uring 6 16 513d 524d
INFO: task hung in io_uring_register (4) io-uring 1 1 575d 575d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (10) io-uring 6 1 525d 525d
kernel BUG in put_page io-uring -1 C error 2 555d 555d
KCSAN: data-race in io_submit_sqes / io_uring_poll (7) io-uring 6 1 541d 541d
KCSAN: data-race in __io_queue_proc / io_poll_wake (2) io-uring 6 2 555d 555d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_unregister io-uring 6 1 575d 575d
WARNING in unsafe_follow_pfn media io-uring -1 C done 33 1606d 1653d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (9) io-uring 6 2 598d 616d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register (2) io-uring 6 1 600d 600d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (8) io-uring 6 2 608d 634d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_buffers_register io-uring 6 1 634d 634d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (7) io-uring 6 2 686d 668d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (8) io-uring 6 1 687d 667d
KCSAN: data-race in io_submit_sqes / io_uring_poll (6) io-uring 6 1 697d 668d
KCSAN: data-race in __io_queue_proc / io_poll_wake io-uring 6 1 714d 714d
KMSAN: uninit-value in io_req_cqe_overflow io-uring 7 C 622 769d 1129d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (7) io-uring 6 1 756d 750d
general protection fault in worker_thread (2) io-uring 2 syz 1 841d 837d
KCSAN: data-race in __io_uring_show_fdinfo / io_submit_sqes io-uring 6 1 776d 761d
KCSAN: data-race in io_wq_activate_free_worker / io_wq_worker_running io-uring 6 17 771d 757d
INFO: task hung in io_ring_exit_work io-uring 1 C unreliable unreliable 820 828d 1648d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (6) io-uring 6 4 794d 840d
BUG: unable to handle kernel NULL pointer dereference in __io_remove_buffers io-uring 10 1 867d 863d
INFO: task hung in io_wq_put_and_exit (3) io-uring 1 C error unreliable 75 901d 1295d
INFO: task hung in io_uring_del_tctx_node (2) io-uring 1 C error error 20 941d 1303d
WARNING in io_ring_exit_work io-uring -1 C done done 3550 894d 1668d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register io-uring 6 1 861d 861d
KASAN: use-after-free Read in io_fallback_tw io-uring 19 C error 33 997d 1001d
KASAN: use-after-free Read in snd_rawmidi_poll io-uring sound 19 C error 20 997d 1001d
KASAN: use-after-free Read in io_poll_remove_entries io-uring 19 C done done 751 917d 1297d
memory leak in create_io_worker (2) io-uring fs 3 C 4 1059d 1324d
INFO: task hung in sys_io_uring_register (2) io-uring 1 syz error error 2 956d 952d
INFO: task hung in io_uring_register (3) io-uring 1 syz error error 2 956d 952d
KASAN: use-after-free Read in io_wqe_worker (2) io-uring 19 C error done 3 973d 1004d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (5) io-uring 6 1 892d 892d
KCSAN: data-race in io_wqe_activate_free_worker / io_wqe_worker io-uring 6 386 896d 1279d
KCSAN: data-race in io_wq_worker_running / io_wqe_activate_free_worker io-uring 6 599 896d 1254d
KCSAN: data-race in io_submit_sqes / io_uring_poll (5) io-uring 6 21 898d 1087d
INFO: task hung in io_req_task_cancel io-uring 1 1 957d 957d
BUG: bad usercopy in io_openat2_prep (3) io-uring -1 C 12 961d 960d
KASAN: use-after-free Read in tctx_task_work (2) io-uring fs 19 C unreliable 358 981d 1512d
KCSAN: data-race in __io_fill_cqe_req / io_timeout io-uring 6 2 926d 899d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel (2) io-uring 6 1 921d 921d
INFO: task hung in io_uring_enter io-uring 1 1 948d 948d
KCSAN: data-race in io_sqpoll_wait_sq / io_submit_sqes io-uring 6 1 923d 923d
KASAN: use-after-free Read in io_fallback_req_func io-uring 19 C error 18 997d 1001d
KASAN: use-after-free Read in create_worker_cb fs io-uring 19 C done 3 1654d 1654d
KASAN: use-after-free Read in sock_def_wakeup io-uring sctp 19 C error 2 998d 1000d
WARNING in __put_task_struct (3) io-uring mm -1 C error 4 1000d 1001d
KASAN: use-after-free Read in pipe_release (2) fs io-uring 19 C error 2 1000d 996d
KASAN: use-after-free Read in snd_pcm_post_stop sound io-uring 19 C error 1 1000d 1000d
WARNING in follow_hugetlb_page mm io-uring -1 C inconclusive 34 1242d 1245d
KASAN: slab-out-of-bounds Read in mas_leaf_max_gap mm io-uring 19 syz error 3 1039d 1083d
general protection fault in __io_sync_cancel io-uring 10 C error inconclusive 11 1135d 1141d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (4) io-uring 6 4 945d 986d
general protection fault in io_issue_sqe io-uring fs 12 C done unreliable 502 1140d 1497d
INFO: rcu detected stall in io_ring_exit_work fs io-uring 1 C error 6 1433d 1475d
general protection fault in __io_queue_sqe fs io-uring 2 C done 11 1514d 1515d
general protection fault in io_queue_sqe_fallback io-uring 2 1 968d 964d
KASAN: use-after-free Read in io_wq_put_and_exit io-uring 19 21 999d 1002d
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_unregister io-uring 6 1 953d 953d
KCSAN: data-race in __io_fill_cqe_req / io_uring_poll (2) io-uring 6 1 968d 968d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel (2) io-uring 6 1 968d 968d
INFO: task hung in io_uring_alloc_task_context (4) io-uring 1 2 1078d 1082d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker (2) io-uring 6 1 959d 959d
WARNING: refcount bug in io_send_zc_cleanup io-uring 13 1 977d 973d
KASAN: use-after-free Read in __io_req_task_work_add io-uring 19 7 997d 1001d
KASAN: use-after-free Read in io_poll_task_func io-uring 19 1 997d 997d
WARNING: ODEBUG bug in __io_put_task io-uring -1 2 999d 1001d
KASAN: use-after-free Read in io_req_caches_free io-uring 19 1 1001d 1001d
INFO: task hung in io_uring_register (2) io-uring 1 1 1097d 1097d
KASAN: use-after-free Read in signalfd_cleanup io-uring ext4 19 C 4 1000d 1001d
general protection fault in __fget_files fs io-uring 2 syz done 2 1801d 1800d
general protection fault in io_uring_flush fs io-uring 2 syz error 1 1838d 1837d
KCSAN: data-race in __io_req_complete_post / io_uring_poll io-uring 6 29 1050d 1162d
KCSAN: data-race in io_worker_handle_work / io_wqe_activate_free_worker io-uring 6 1 1053d 1053d
BUG: corrupted list in io_uring_del_tctx_node io-uring 8 1 1110d 1109d
KCSAN: data-race in io_worker_handle_work / io_wq_worker_cancel io-uring 6 1 1068d 1068d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (3) io-uring 6 2 1082d 1110d
KCSAN: data-race in __io_req_complete_post / io_wake_function (2) io-uring 6 4 1087d 1116d
possible deadlock in io_disarm_next fs io-uring 4 C done 5 1265d 1268d
INFO: task hung in io_poll_tw_hash_eject io-uring 1 1 1151d 1151d
KASAN: use-after-free Read in io_poll_check_events fs io-uring 19 C done 20 1284d 1328d
KASAN: use-after-free Write in __io_free_req fs io-uring 24 syz done 1 1441d 1441d
KCSAN: data-race in io_wq_submit_work / io_wq_worker_cancel io-uring 6 1 1126d 1126d
memory leak in io_submit_sqes (3) fs io-uring 3 C 1 1595d 1594d
general protection fault in __io_arm_poll_handler fs io-uring 2 C done unreliable 3 1495d 1496d
KCSAN: data-race in io_submit_sqes / io_uring_poll (4) io-uring 6 123 1139d 1304d
KMSAN: uninit-value in io_fallback_req_func fs io-uring 7 C 8 1266d 1266d
KCSAN: data-race in __do_sys_io_uring_register / io_sqe_buffers_register (3) io-uring 6 1 1142d 1142d
memory leak in anon_inode_getfile io-uring fs 3 C 3 1789d 1795d
memory leak in rw_copy_check_uvector fs io-uring 3 C 1 1875d 1874d
KMSAN: uninit-value in io_req_caches_free fs io-uring 7 C 6 1322d 1398d
KASAN: use-after-free Write in paging32_walk_addr_generic io-uring kvm-x86 24 C done error 6 1785d 1878d
kernel BUG in io_queue_async_work fs io-uring -1 C error unreliable 14 1545d 1550d
WARNING: refcount bug in io_wqe_worker io-uring fs 13 C error error 6 1824d 1857d
KCSAN: data-race in io_sq_thread / io_sq_thread_park (2) io-uring 6 5 1150d 1186d
KCSAN: data-race in __io_req_complete_post / io_wake_function io-uring 6 1 1151d 1151d
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (6) io-uring 6 2 1153d 1176d
INFO: rcu detected stall in tctx_task_work (2) fs io-uring 1 syz unreliable 4 1432d 1438d
WARNING in io_poll_task_func (2) fs io-uring -1 C done 1 1437d 1435d
WARNING in io_poll_task_func fs io-uring -1 C done 4 1438d 1437d
WARNING: ODEBUG bug in __put_task_struct mm io-uring -1 syz done 1 1440d 1438d
INFO: rcu detected stall in tctx_task_work fs io-uring 1 C done 9 1439d 1438d
kernel panic: panic_on_warn set (2) io-uring 2 syz error 1 1492d 1492d