syzbot


KCSAN: data-race in blk_mq_dispatch_rq_list / blk_mq_run_hw_queue

Status: auto-closed as invalid on 2021/08/10 19:35
Subsystems: block
[Documentation on labels]
First crash: 1518d, last: 1518d
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in blk_mq_dispatch_rq_list / blk_mq_run_hw_queue (3) block 6 1 1272d 1272d 0/29 auto-closed as invalid on 2022/04/13 13:43
upstream KCSAN: data-race in blk_mq_dispatch_rq_list / blk_mq_run_hw_queue (2) block 6 1 1467d 1467d 0/29 auto-closed as invalid on 2021/09/30 19:36

Sample crash report:
==================================================================
BUG: KCSAN: data-race in blk_mq_dispatch_rq_list / blk_mq_run_hw_queue

write to 0xffff88810181cc10 of 8 bytes by task 857 on cpu 1:
 __list_splice include/linux/list.h:444 [inline]
 list_splice_tail_init include/linux/list.h:499 [inline]
 blk_mq_dispatch_rq_list+0xdd7/0x1040 block/blk-mq.c:1428
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:201 [inline]
 blk_mq_do_dispatch_sched+0x3b5/0x640 block/blk-mq-sched.c:214
 __blk_mq_sched_dispatch_requests+0x1eb/0x290 block/blk-mq-sched.c:329
 blk_mq_sched_dispatch_requests+0x9f/0x110 block/blk-mq-sched.c:360
 __blk_mq_run_hw_queue+0xbc/0x140 block/blk-mq.c:1500
 blk_mq_run_work_fn+0x3d/0x50 block/blk-mq.c:1832
 process_one_work+0x3e9/0x8f0 kernel/workqueue.c:2276
 worker_thread+0x636/0xae0 kernel/workqueue.c:2422
 kthread+0x262/0x280 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295

read to 0xffff88810181cc10 of 8 bytes by task 15038 on cpu 0:
 list_empty_careful include/linux/list.h:319 [inline]
 blk_mq_hctx_has_pending block/blk-mq.c:72 [inline]
 blk_mq_run_hw_queue+0x129/0x250 block/blk-mq.c:1626
 blk_mq_sched_insert_request+0x11d/0x250 block/blk-mq-sched.c:479
 blk_mq_submit_bio+0x524/0xe80 block/blk-mq.c:2263
 __submit_bio_noacct_mq block/blk-core.c:1013 [inline]
 submit_bio_noacct+0x6f2/0x7e0 block/blk-core.c:1046
 submit_bio+0x10c/0x190 include/linux/vmstat.h:81
 submit_bh_wbc+0x2f3/0x330 fs/buffer.c:3050
 __block_write_full_page+0x648/0xa10 fs/buffer.c:1805
 block_write_full_page+0x240/0x260 fs/buffer.c:2976
 fat_writepage+0x20/0x30 fs/fat/inode.c:199
 writeout mm/migrate.c:870 [inline]
 fallback_migrate_page mm/migrate.c:894 [inline]
 move_to_new_page+0x2ea/0x670 mm/migrate.c:945
 __unmap_and_move mm/migrate.c:1107 [inline]
 unmap_and_move mm/migrate.c:1174 [inline]
 migrate_pages+0xd5d/0x1540 mm/migrate.c:1448
 do_mbind+0xdc6/0xfc0 mm/mempolicy.c:1359
 kernel_mbind mm/mempolicy.c:1482 [inline]
 __do_sys_mbind mm/mempolicy.c:1489 [inline]
 __se_sys_mbind mm/mempolicy.c:1485 [inline]
 __x64_sys_mbind+0x142/0x170 mm/mempolicy.c:1485
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0xffff88810181cc08 -> 0xffff888101badfc8

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 15038 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/07/06 19:31 upstream 3dbdb38e2869 cca78469 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in blk_mq_dispatch_rq_list / blk_mq_run_hw_queue
* Struck through repros no longer work on HEAD.