syzbot


KCSAN: data-race in __blk_mq_sched_dispatch_requests / __blk_mq_sched_dispatch_requests (8)

Status: auto-closed as invalid on 2022/06/22 21:22
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 198d, last: 198d
similar bugs (7):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __blk_mq_sched_dispatch_requests / __blk_mq_sched_dispatch_requests (6) 1 491d 491d 0/24 auto-closed as invalid on 2021/09/03 00:46
upstream KCSAN: data-race in __blk_mq_sched_dispatch_requests / __blk_mq_sched_dispatch_requests (5) 1 527d 527d 0/24 auto-closed as invalid on 2021/07/29 00:14
upstream KCSAN: data-race in __blk_mq_sched_dispatch_requests / __blk_mq_sched_dispatch_requests 3 824d 855d 0/24 auto-closed as invalid on 2020/10/05 06:08
upstream KCSAN: data-race in __blk_mq_sched_dispatch_requests / __blk_mq_sched_dispatch_requests (7) 4 346d 396d 0/24 auto-closed as invalid on 2022/01/25 22:50
upstream KCSAN: data-race in __blk_mq_sched_dispatch_requests / __blk_mq_sched_dispatch_requests (3) 7 653d 725d 0/24 auto-closed as invalid on 2021/03/24 08:42
upstream KCSAN: data-race in __blk_mq_sched_dispatch_requests / __blk_mq_sched_dispatch_requests (4) 2 567d 613d 0/24 auto-closed as invalid on 2021/06/18 13:35
upstream KCSAN: data-race in __blk_mq_sched_dispatch_requests / __blk_mq_sched_dispatch_requests (2) 3 775d 783d 0/24 auto-closed as invalid on 2020/11/22 21:54

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __blk_mq_sched_dispatch_requests / __blk_mq_sched_dispatch_requests

write to 0xffff8881029bfc10 of 8 bytes by task 154 on cpu 1:
 INIT_LIST_HEAD include/linux/list.h:38 [inline]
 list_splice_init include/linux/list.h:492 [inline]
 __blk_mq_sched_dispatch_requests+0x137/0x270 block/blk-mq-sched.c:287
 blk_mq_sched_dispatch_requests+0x8f/0xf0 block/blk-mq-sched.c:339
 __blk_mq_run_hw_queue+0x7e/0x100 block/blk-mq.c:1974
 __blk_mq_delay_run_hw_queue+0x194/0x390 block/blk-mq.c:2051
 blk_mq_run_hw_queue+0x180/0x310 block/blk-mq.c:2102
 blk_mq_run_hw_queues+0x1c0/0x240 block/blk-mq.c:2165
 blk_mq_requeue_work+0x3cd/0x400 block/blk-mq.c:1315
 process_one_work+0x3d3/0x720 kernel/workqueue.c:2289
 worker_thread+0x618/0xa70 kernel/workqueue.c:2436
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

read to 0xffff8881029bfc10 of 8 bytes by task 6496 on cpu 0:
 list_empty_careful include/linux/list.h:329 [inline]
 __blk_mq_sched_dispatch_requests+0x80/0x270 block/blk-mq-sched.c:284
 blk_mq_sched_dispatch_requests+0x8f/0xf0 block/blk-mq-sched.c:339
 __blk_mq_run_hw_queue+0x7e/0x100 block/blk-mq.c:1974
 __blk_mq_delay_run_hw_queue+0x194/0x390 block/blk-mq.c:2051
 blk_mq_run_hw_queue+0x180/0x310 block/blk-mq.c:2102
 blk_mq_sched_insert_requests+0x1cb/0x2a0 block/blk-mq-sched.c:493
 blk_mq_dispatch_plug_list+0x1e9/0x2c0 block/blk-mq.c:2597
 blk_mq_flush_plug_list+0x2ea/0x340 block/blk-mq.c:2639
 __blk_flush_plug+0x25a/0x2b0 block/blk-core.c:1240
 blk_finish_plug+0x44/0x60 block/blk-core.c:1264
 read_pages+0x759/0x7c0 mm/readahead.c:179
 page_cache_ra_unbounded+0x2a8/0x2e0 mm/readahead.c:261
 do_page_cache_ra mm/readahead.c:291 [inline]
 page_cache_ra_order mm/readahead.c:546 [inline]
 ondemand_readahead+0x5df/0x780 mm/readahead.c:668
 page_cache_sync_ra+0x1a4/0x1b0 mm/readahead.c:695
 page_cache_sync_readahead include/linux/pagemap.h:1185 [inline]
 filemap_get_pages mm/filemap.c:2592 [inline]
 filemap_read+0x3e5/0x1400 mm/filemap.c:2679
 generic_file_read_iter+0x72/0x320 mm/filemap.c:2825
 call_read_iter include/linux/fs.h:2044 [inline]
 generic_file_splice_read+0x1de/0x2c0 fs/splice.c:311
 do_splice_to fs/splice.c:796 [inline]
 splice_direct_to_actor+0x2ac/0x660 fs/splice.c:870
 do_splice_direct+0xfb/0x180 fs/splice.c:979
 do_sendfile+0x3ad/0x900 fs/read_write.c:1246
 __do_sys_sendfile64 fs/read_write.c:1311 [inline]
 __se_sys_sendfile64 fs/read_write.c:1297 [inline]
 __x64_sys_sendfile64+0x10c/0x150 fs/read_write.c:1297
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0xffff888102709048 -> 0xffff8881029bfc08

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 6496 Comm: syz-executor.5 Not tainted 5.18.0-rc7-syzkaller-00015-gef1302160bfb-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/05/18 21:22 upstream ef1302160bfb 50c53f39 .config log report info KCSAN: data-race in __blk_mq_sched_dispatch_requests / __blk_mq_sched_dispatch_requests
* Struck through repros no longer work on HEAD.