syzbot

 sign-in | mailing list | source | docs
🐞 Open [108]
🐞 Fixed [70]
🐞 Invalid [174]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

kernel BUG in blk_mq_dispatch_rq_list (4)

Status: upstream: reported C repro on 2022/10/24 04:39
Subsystems: fat
[Documentation on labels]
Reported-by: syzbot+c2989769f21f785cc194@syzkaller.appspotmail.com
Fix commit: block: set .bi_max_vecs as actual allocated vector number
Patched on: [], missing on: [ci2-android-5-10 ci2-android-5-10-perf]
First crash: 764d, last: 507d
Cause bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-10 kernel BUG in blk_mq_dispatch_rq_list (2) C error 7 810d 824d 0/2 closed as dup on 2022/09/14 20:17
android-5-10 kernel BUG in blk_mq_dispatch_rq_list C error 16 854d 1054d 0/2 closed as invalid on 2022/07/28 16:56
android-5-10 kernel BUG in blk_mq_dispatch_rq_list (3) C error 2 789d 778d 0/2 closed as dup on 2022/10/05 23:45
▶ ▼ Last patch testing requests (3)
Created Duration User Patch Repo Result
2022/11/07 04:10 7m jun.nie@linaro.org https://android.googlesource.com/kernel/common 2569063c7140 error
2022/11/04 08:18 15m jun.nie@linaro.org patch android12-5.10-lts log
2022/10/31 06:32 13m jun.nie@linaro.org patch android12-5.10-lts log

Sample crash report:
 kthread+0x349/0x3d0 kernel/kthread.c:313
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:299
---[ end trace 287ffb54abd9e6a0 ]---
blk_update_request: I/O error, dev sda, sector 528448 op 0x1:(WRITE) flags 0xc800 phys_seg 0 prio class 0
------------[ cut here ]------------
kernel BUG at block/blk-mq.c:569!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 103 Comm: kworker/1:1H Tainted: G        W         5.10.160-syzkaller-01321-g003c389455eb #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Workqueue: kblockd blk_mq_requeue_work
RIP: 0010:blk_mq_end_request block/blk-mq.c:569 [inline]
RIP: 0010:blk_mq_dispatch_rq_list+0x17ef/0x1800 block/blk-mq.c:1397
Code: 68 ff e9 63 f5 ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 83 f6 ff ff 4c 89 ef e8 ab 7b 68 ff e9 76 f6 ff ff e8 51 79 2e ff <0f> 0b e8 1a b5 54 02 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41
RSP: 0018:ffffc90000a376e0 EFLAGS: 00010293
RAX: ffffffff823ea85f RBX: ffff88810a97a5c0 RCX: ffff888109422780
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a97a68a
RBP: ffffc90000a37870 R08: ffffffff823d793f R09: ffffffff823d78d5
R10: 0000000000000004 R11: ffff888109422780 R12: dffffc0000000000
R13: ffffc90000a37960 R14: ffffc90000a37800 R15: ffff888109434000
FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020002000 CR3: 00000001061be000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
 blk_mq_do_dispatch_sched+0x63c/0xc60 block/blk-mq-sched.c:200
 __blk_mq_sched_dispatch_requests+0x3de/0x4d0 block/blk-mq-sched.c:317
 blk_mq_sched_dispatch_requests+0xf0/0x160 block/blk-mq-sched.c:348
 __blk_mq_run_hw_queue+0x14d/0x260 block/blk-mq.c:1524
 __blk_mq_delay_run_hw_queue+0x22a/0x570 block/blk-mq.c:1601
 blk_mq_run_hw_queue+0x29d/0x3b0 block/blk-mq.c:1654
 blk_mq_run_hw_queues+0x37c/0x450 block/blk-mq.c:1717
 blk_mq_requeue_work+0x73b/0x780 block/blk-mq.c:821
 process_one_work+0x726/0xc10 kernel/workqueue.c:2296
 worker_thread+0xb27/0x1550 kernel/workqueue.c:2442
 kthread+0x349/0x3d0 kernel/kthread.c:313
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:299
Modules linked in:
---[ end trace 287ffb54abd9e6a1 ]---
RIP: 0010:blk_mq_end_request block/blk-mq.c:569 [inline]
RIP: 0010:blk_mq_dispatch_rq_list+0x17ef/0x1800 block/blk-mq.c:1397
Code: 68 ff e9 63 f5 ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 83 f6 ff ff 4c 89 ef e8 ab 7b 68 ff e9 76 f6 ff ff e8 51 79 2e ff <0f> 0b e8 1a b5 54 02 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41
RSP: 0018:ffffc90000a376e0 EFLAGS: 00010293
RAX: ffffffff823ea85f RBX: ffff88810a97a5c0 RCX: ffff888109422780
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a97a68a
RBP: ffffc90000a37870 R08: ffffffff823d793f R09: ffffffff823d78d5
R10: 0000000000000004 R11: ffff888109422780 R12: dffffc0000000000
R13: ffffc90000a37960 R14: ffffc90000a37800 R15: ffff888109434000
FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020002000 CR3: 00000001061be000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (16):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/12/21 05:56 android12-5.10-lts 003c389455eb d3e76707 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2022/11/07 09:34 android12-5.10-lts 0118fb827bc7 6d752409 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2022/10/24 04:33 android12-5.10-lts 69a9a62c66bb 23bf86af .config strace log report syz C [disk image] [vmlinux] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2023/06/03 15:08 android13-5.10-lts 43c801dc3325 a4ae4f42 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2023/05/07 23:59 android13-5.10-lts 3ad342cf5b2c 90c93c40 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2023/01/20 20:30 android12-5.10-lts 416c4356f372 dd15ff29 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2022/12/26 23:42 android12-5.10-lts 003c389455eb 9da18ae8 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2022/12/07 06:37 android12-5.10-lts 37d3df60cb6a d88f3abb .config console log report syz [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2022/10/19 05:46 android12-5.10-lts c1e111543d3c b31320fc .config console log report syz [disk image] [vmlinux] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2023/07/03 09:08 android13-5.10-lts 28cc6246b5e7 bfc47836 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2023/06/11 18:06 android13-5.10-lts 43c801dc3325 49519f06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2023/06/07 16:57 android13-5.10-lts 43c801dc3325 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2023/04/03 05:05 android12-5.10-lts 416c4356f372 f325deb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2023/03/13 01:09 android12-5.10-lts 416c4356f372 5205ef30 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2022/12/01 06:26 android12-5.10-lts 673a7341bdab 4c2a66e8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
2022/11/20 22:19 android12-5.10-lts 6b31c548a114 5bb70014 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in blk_mq_dispatch_rq_list
* Struck through repros no longer work on HEAD.