KCSAN: data-race in blk_mq_free_request / blk_mq_free

KCSAN: data-race in blk_mq_free_request / blk_mq_free_request
Status: moderation: reported on 2020/03/02 02:13
Reported-by: syzbot+b9914ed52d5b1d63f71d@syzkaller.appspotmail.com
First crash: 292d, last: 8d21h

Sample crash report:

==================================================================
BUG: KCSAN: data-race in blk_mq_free_request / blk_mq_free_request

write to 0xffffe8ffffc31008 of 8 bytes by interrupt on cpu 1:
 blk_mq_free_request+0x17d/0x2f0 block/blk-mq.c:528
 __blk_mq_end_request+0x23b/0x260 block/blk-mq.c:564
 blk_mq_end_request+0x37/0x50 block/blk-mq.c:573
 blk_flush_complete_seq+0x37b/0x6d0 block/blk-flush.c:205
 flush_end_io+0x544/0x5d0 block/blk-flush.c:258
 __blk_mq_end_request+0x24b/0x260 block/blk-mq.c:562
 scsi_end_request+0x2ae/0x400 drivers/scsi/scsi_lib.c:601
 scsi_io_completion+0x136/0xf40 drivers/scsi/scsi_lib.c:939
 scsi_finish_command+0x277/0x2c0 drivers/scsi/scsi.c:214
 scsi_softirq_done+0x271/0x400 drivers/scsi/scsi_lib.c:1465
 blk_done_softirq+0x1a5/0x200 block/blk-softirq.c:37
 __do_softirq+0x198/0x360 kernel/softirq.c:292
 asm_call_on_stack+0xf/0x20 arch/x86/entry/entry_64.S:711
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:22 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:48 [inline]
 do_softirq_own_stack+0x5d/0x80 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:387 [inline]
 __irq_exit_rcu+0x115/0x120 kernel/softirq.c:417
 common_interrupt+0x14e/0x1e0 arch/x86/kernel/irq.c:239
 asm_common_interrupt+0x1e/0x40 arch/x86/include/asm/idtentry.h:576
 kblockd_mod_delayed_work_on+0x0/0x40 block/blk-core.c:1755
 __blk_mq_delay_run_hw_queue+0x331/0x340 block/blk-mq.c:1503
 blk_mq_run_hw_queue+0x22e/0x260 block/blk-mq.c:1548
 blk_mq_sched_insert_request+0x2ae/0x330 block/blk-mq-sched.c:496
 blk_mq_make_request+0x716/0x1070 block/blk-mq.c:2106
 do_make_request block/blk-core.c:1084 [inline]
 generic_make_request+0x240/0x5d0 block/blk-core.c:1156
 submit_bio+0x200/0x370 block/blk-core.c:1275
 submit_bh_wbc+0x397/0x3d0 fs/buffer.c:3073
 submit_bh fs/buffer.c:3079 [inline]
 __sync_dirty_buffer+0xfa/0x1a0 fs/buffer.c:3165
 sync_dirty_buffer+0x16/0x20 fs/buffer.c:3178
 ext4_write_inode+0x216/0x330 fs/ext4/inode.c:5165
 write_inode+0x8e/0x250 fs/fs-writeback.c:1312
 __writeback_single_inode+0x31c/0x610 fs/fs-writeback.c:1511
 writeback_single_inode+0x121/0x530 fs/fs-writeback.c:1565
 sync_inode fs/fs-writeback.c:2602 [inline]
 sync_inode_metadata+0x52/0x70 fs/fs-writeback.c:2622
 ext4_fsync_nojournal fs/ext4/fsync.c:92 [inline]
 ext4_sync_file+0x335/0x6e0 fs/ext4/fsync.c:170
 vfs_fsync_range+0x107/0x120 fs/sync.c:200
 generic_write_sync include/linux/fs.h:2882 [inline]
 ext4_buffered_write_iter+0x369/0x3b0 fs/ext4/file.c:277
 ext4_file_write_iter+0x76f/0x1010 include/linux/fs.h:805
 call_write_iter include/linux/fs.h:1908 [inline]
 do_iter_readv_writev+0x321/0x3c0 fs/read_write.c:713
 do_iter_write+0x10e/0x470 fs/read_write.c:1018
 vfs_iter_write+0x4c/0x70 fs/read_write.c:1059
 iter_file_splice_write+0x41a/0x770 fs/splice.c:750
 do_splice_from fs/splice.c:846 [inline]
 direct_splice_actor+0x95/0x160 fs/splice.c:1016
 splice_direct_to_actor+0x365/0x660 fs/splice.c:971
 do_splice_direct+0xf2/0x170 fs/splice.c:1059
 do_sendfile+0x562/0xb10 fs/read_write.c:1540
 __do_sys_sendfile64 fs/read_write.c:1595 [inline]
 __se_sys_sendfile64 fs/read_write.c:1587 [inline]
 __x64_sys_sendfile64+0xa9/0x130 fs/read_write.c:1587
 do_syscall_64+0x51/0xb0 arch/x86/entry/common.c:384
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffffe8ffffc31008 of 8 bytes by task 24363 on cpu 0:
 blk_mq_free_request+0x16a/0x2f0 block/blk-mq.c:528
 blk_put_request+0x11/0x20 block/blk-core.c:636
 blk_attempt_req_merge+0x36/0x50 block/blk-merge.c:831
 elv_attempt_insert_merge+0x54/0x160 block/elevator.c:367
 blk_mq_sched_try_insert_merge+0xd4/0xe0 block/blk-mq-sched.c:406
 dd_insert_request block/mq-deadline.c:496 [inline]
 dd_insert_requests+0x188/0x4f0 block/mq-deadline.c:535
 blk_mq_sched_insert_request+0x2db/0x330 block/blk-mq-sched.c:487
 blk_mq_make_request+0x716/0x1070 block/blk-mq.c:2106
 do_make_request block/blk-core.c:1084 [inline]
 generic_make_request+0x240/0x5d0 block/blk-core.c:1156
 submit_bio+0x200/0x370 block/blk-core.c:1275
 submit_bh_wbc+0x397/0x3d0 fs/buffer.c:3073
 submit_bh fs/buffer.c:3079 [inline]
 __sync_dirty_buffer+0xfa/0x1a0 fs/buffer.c:3165
 sync_dirty_buffer+0x16/0x20 fs/buffer.c:3178
 ext4_write_inode+0x216/0x330 fs/ext4/inode.c:5165
 write_inode+0x8e/0x250 fs/fs-writeback.c:1312
 __writeback_single_inode+0x31c/0x610 fs/fs-writeback.c:1511
 writeback_single_inode+0x121/0x530 fs/fs-writeback.c:1565
 sync_inode fs/fs-writeback.c:2602 [inline]
 sync_inode_metadata+0x52/0x70 fs/fs-writeback.c:2622
 ext4_fsync_nojournal fs/ext4/fsync.c:92 [inline]
 ext4_sync_file+0x335/0x6e0 fs/ext4/fsync.c:170
 vfs_fsync_range+0x107/0x120 fs/sync.c:200
 generic_write_sync include/linux/fs.h:2882 [inline]
 ext4_buffered_write_iter+0x369/0x3b0 fs/ext4/file.c:277
 ext4_file_write_iter+0x76f/0x1010 include/linux/fs.h:805
 call_write_iter include/linux/fs.h:1908 [inline]
 do_iter_readv_writev+0x321/0x3c0 fs/read_write.c:713
 do_iter_write+0x10e/0x470 fs/read_write.c:1018
 vfs_iter_write+0x4c/0x70 fs/read_write.c:1059
 iter_file_splice_write+0x41a/0x770 fs/splice.c:750
 do_splice_from fs/splice.c:846 [inline]
 direct_splice_actor+0x95/0x160 fs/splice.c:1016
 splice_direct_to_actor+0x365/0x660 fs/splice.c:971
 do_splice_direct+0xf2/0x170 fs/splice.c:1059
 do_sendfile+0x562/0xb10 fs/read_write.c:1540
 __do_sys_sendfile64 fs/read_write.c:1595 [inline]
 __se_sys_sendfile64 fs/read_write.c:1587 [inline]
 __x64_sys_sendfile64+0xa9/0x130 fs/read_write.c:1587
 do_syscall_64+0x51/0xb0 arch/x86/entry/common.c:384
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 24363 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (63):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Maintainers
ci2-upstream-kcsan-gce	2020/08/03 16:23	upstream	bcf87687	96dd3623	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/07/03 12:22	upstream	cdd3bb54	6e569755	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/06/26 11:32	upstream	4a21185c	b202c7a8	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/05/27 11:04	https://github.com/google/ktsan.git kcsan	7c3cd68e	9072c126	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/05/04 18:38	https://github.com/google/ktsan.git kcsan	7c3cd68e	58ae5e18	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/04/29 19:52	https://github.com/google/ktsan.git kcsan	7c3cd68e	ba2806db	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/04/27 19:53	https://github.com/google/ktsan.git kcsan	7c3cd68e	0ce7569e	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/04/19 07:09	https://github.com/google/ktsan.git kcsan	7c3cd68e	365fba24	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/04/10 17:46	https://github.com/google/ktsan.git kcsan	40959e34	a8c6a3f8	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/04/07 19:50	https://github.com/google/ktsan.git kcsan	40959e34	db9bcd4b	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/03/24 19:23	https://github.com/google/ktsan.git kcsan	40959e34	68660b21	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/03/22 23:16	https://github.com/google/ktsan.git kcsan	40959e34	78267cec	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/03/06 21:00	https://github.com/google/ktsan.git kcsan	941e0d91	7fb694ef	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/02/27 02:03	https://github.com/google/ktsan.git kcsan	766d004d	251aabb7	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/02/24 10:23	https://github.com/google/ktsan.git kcsan	766d004d	1253d6f0	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/02/23 22:39	https://github.com/google/ktsan.git kcsan	766d004d	d801cb02	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/02/17 22:26	https://github.com/google/ktsan.git kcsan	b12d66a6	72bfa6f2	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/02/14 13:59	https://github.com/google/ktsan.git kcsan	b12d66a6	5d7b90f1	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/02/04 02:57	https://github.com/google/ktsan.git kcsan	245a4300	93e5e335	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/02/01 20:19	https://github.com/google/ktsan.git kcsan	245a4300	326d4c78	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/28 17:33	https://github.com/google/ktsan.git kcsan	245a4300	c8e81ce4	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/28 11:15	https://github.com/google/ktsan.git kcsan	245a4300	56cd6c9b	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/27 01:09	https://github.com/google/ktsan.git kcsan	245a4300	dd56146d	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/24 09:56	https://github.com/google/ktsan.git kcsan	245a4300	2e95ab33	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/23 18:43	https://github.com/google/ktsan.git kcsan	245a4300	11ebf937	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/21 21:01	https://github.com/google/ktsan.git kcsan	245a4300	8eda0b95	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/16 20:43	https://github.com/google/ktsan.git kcsan	245a4300	3de7aabb	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/15 15:39	https://github.com/google/ktsan.git kcsan	245a4300	069a5a44	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/14 09:48	https://github.com/google/ktsan.git kcsan	245a4300	32881205	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/13 09:01	https://github.com/google/ktsan.git kcsan	245a4300	53faa9fe	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/12 12:09	https://github.com/google/ktsan.git kcsan	245a4300	31290a45	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/11 13:45	https://github.com/google/ktsan.git kcsan	245a4300	4c04afaa	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/08 13:01	https://github.com/google/ktsan.git kcsan	245a4300	ddc3e859	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/07 03:26	https://github.com/google/ktsan.git kcsan	245a4300	53430d97	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2020/01/03 23:14	https://github.com/google/ktsan.git kcsan	245a4300	68256974	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/12/29 14:26	https://github.com/google/ktsan.git kcsan	245a4300	af6b8ef8	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/12/28 03:30	https://github.com/google/ktsan.git kcsan	245a4300	be5c2c81	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/12/22 19:22	https://github.com/google/ktsan.git kcsan	245a4300	8b967267	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/12/20 10:55	https://github.com/google/ktsan.git kcsan	245a4300	36650b4b	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/12/17 15:30	https://github.com/google/ktsan.git kcsan	245a4300	1af3875f	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/12/17 09:44	https://github.com/google/ktsan.git kcsan	245a4300	d13d7958	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/12/16 10:01	https://github.com/google/ktsan.git kcsan	245a4300	0ae38e44	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/12/15 23:38	https://github.com/google/ktsan.git kcsan	245a4300	eef6e580	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/12/13 18:52	https://github.com/google/ktsan.git kcsan	245a4300	a5c1ab05	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/12/10 07:07	https://github.com/google/ktsan.git kcsan	ef798c30	4b83c8fb	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/12/06 16:46	https://github.com/google/ktsan.git kcsan	ef798c30	85f26751	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/12/05 19:15	https://github.com/google/ktsan.git kcsan	ef798c30	9fd5a512	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/12/05 05:24	https://github.com/google/ktsan.git kcsan	ef798c30	b2088328	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/12/03 15:38	https://github.com/google/ktsan.git kcsan	ef798c30	ab342da3	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/11/27 00:16	https://github.com/google/ktsan.git kcsan	ef798c30	1048481f	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/11/24 03:10	https://github.com/google/ktsan.git kcsan	5863cc79	598ca6c8	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/11/21 19:43	https://github.com/google/ktsan.git kcsan	5863cc79	8098ea0f	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/11/19 16:10	https://github.com/google/ktsan.git kcsan	5863cc79	432c7650	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/11/19 00:54	https://github.com/google/ktsan.git kcsan	5863cc79	d5696d51	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/11/12 08:47	https://github.com/google/ktsan.git kcsan	7f2955e0	048f2d49	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/11/09 06:10	https://github.com/google/ktsan.git kcsan	94c00660	1e35461e	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/11/07 18:44	https://github.com/google/ktsan.git kcsan	94c00660	f39aff9e	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/11/07 03:17	https://github.com/google/ktsan.git kcsan	94c00660	d797d201	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/11/05 16:20	https://github.com/google/ktsan.git kcsan	94c00660	af5c522d	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/10/31 05:42	https://github.com/google/ktsan.git kcsan	05f22368	a41ca8fa	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/10/29 06:36	https://github.com/google/ktsan.git kcsan	05f22368	5ea87a66	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org
ci2-upstream-kcsan-gce	2019/10/24 17:24	https://github.com/google/ktsan.git kcsan	05f22368	d01bb02a	.config	log	report	axboe@kernel.dk, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org