BUG: corrupted list in blk_mq_request_bypass_insert

Status: upstream: reported C repro on 2026/08/29 05:31
Subsystems: block
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+f4353e96f7004ae5a09e@syzkaller.appspotmail.com
First crash: 53d, last: 3d17h
▶ ▼ ✨ AI Jobs (4)
ID Workflow Result Correct Bug Created Started Finished Revision
32c956ac repro-c 💥 BUG: corrupted list in blk_mq_request_bypass_insert 2026/08/31 20:57 2026/08/31 22:11 2026/09/01 10:05 2f52988a
247b7618 repro-c 💥 BUG: corrupted list in blk_mq_request_bypass_insert 2026/08/30 07:26 2026/08/30 07:26 2026/08/30 15:20 2f52988a
f43efdfb assessment-security DenialOfService: ✅ Exploitable: ✅ FilesystemTrigger: ✅ NetworkTrigger: ✅ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ✅ VMHostTrigger: ✅ ❓ BUG: corrupted list in blk_mq_request_bypass_insert 2026/08/25 00:38 2026/08/25 00:38 2026/08/25 01:22 23caa175
cb660c25 assessment-security 💥 BUG: corrupted list in blk_mq_request_bypass_insert 2026/08/24 00:01 2026/08/24 00:01 2026/08/24 01:58 1e72964b
▶ ▼ Discussions (2)
Title Replies (including bot) Last reply
[syzbot] Monthly block report (Oct 2026) 0 (1) 2026/10/06 20:33
[syzbot] [block?] BUG: corrupted list in blk_mq_request_bypass_insert 4 (6) 2026/09/15 01:33

Sample crash report:
 non-slab/vmalloc memory
list_add corruption. prev->next should be next (ffff0000c80ea840), but was ffff0000c8679048. (prev=ffff0000c8679048).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:34!
Internal error: Oops - BUG: 00000000f2000800 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 4386 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
Workqueue: kblockd blk_mq_requeue_work
pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : __list_add_valid_or_report+0x144/0x148 lib/list_debug.c:32
lr : __list_add_valid_or_report+0x144/0x148 lib/list_debug.c:32
sp : ffff80009a1e79f0
x29: ffff80009a1e79f0 x28: ffff80009a1e7aa8 x27: ffff80009a1e7aa0
x26: 1fffe0001901d509 x25: ffff0000c80ea840 x24: ffff0000c80ea848
x23: 1fffe000190cf209 x22: dfff800000000000 x21: ffff0000c8679048
x20: ffff0000c8679048 x19: ffff0000c80ea840 x18: 1fffe00035bde028
x17: 3034386165303863 x16: 3030303066666666 x15: 28207478656e2065
x14: 0000000000000bf8 x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000000 x10: 0000000000000002 x9 : 363462b742da6100
x8 : 363462b742da6100 x7 : ffff8000804823d8 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008048ced8
x2 : 0000000100000001 x1 : ffff0000c4fed880 x0 : 0000000000000075
Call trace:
 __list_add_valid_or_report+0x144/0x148 lib/list_debug.c:32 (P)
 __list_add_valid include/linux/list.h:104 [inline]
 __list_add include/linux/list.h:169 [inline]
 list_add_tail include/linux/list.h:206 [inline]
 blk_mq_request_bypass_insert+0x130/0x1cc block/blk-mq.c:2551
 blk_mq_requeue_work+0x3a4/0x52c block/blk-mq.c:1560
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479
 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560
 kthread+0x304/0x3d4 kernel/kthread.c:436
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
Code: 912f0000 aa1303e1 aa1403e3 979c7a6c (d4210000) 
---[ end trace 0000000000000000 ]---

Crashes (23):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/26 21:08 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e8e60d3ddd25 a3c7249d .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/09/15 01:33 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 5445d6419962 924033e8 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/10/10 23:23 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 71c3e5409eef 4f92358f .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/10/02 04:59 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 7ce5295296b5 6d32eb1f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/10/02 02:12 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 7ce5295296b5 6d32eb1f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/09/26 06:37 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e8e60d3ddd25 a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/09/24 00:04 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 7dc79bb50ab6 0a1606bc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/09/23 04:31 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 38872197cae2 abce1216 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/09/22 11:37 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 38872197cae2 e12281bd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/09/17 23:33 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 5445d6419962 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/09/17 10:40 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 5445d6419962 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/09/15 13:34 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 5445d6419962 81a27d1a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/09/14 21:00 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 5445d6419962 924033e8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/09/04 09:14 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci cee9395acd80 801f0966 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/09/02 22:47 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci f1b8fa82cab7 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/09/02 12:45 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci f1b8fa82cab7 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/09/01 18:36 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci f1b8fa82cab7 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/08/31 08:10 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci f1b8fa82cab7 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/08/29 05:31 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci f1b8fa82cab7 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/08/27 04:46 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 68f892e99df9 a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/08/27 02:40 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 68f892e99df9 a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/08/26 00:11 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 68f892e99df9 614e416a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
2026/08/22 06:46 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 21d6ac051080 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: corrupted list in blk_mq_request_bypass_insert
* Struck through repros no longer work on HEAD.