syzbot


KMSAN: uninit-value in rb_erase

Status: closed as invalid on 2018/06/28 12:38
Subsystems: block
[Documentation on labels]
First crash: 2169d, last: 2168d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in rb_erase (2) media 1 1930d 1930d 0/26 auto-closed as invalid on 2019/07/22 18:27

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in ____rb_erase_color lib/rbtree.c:278 [inline]
BUG: KMSAN: uninit-value in rb_erase+0x135f/0x2bf0 lib/rbtree.c:462
CPU: 0 PID: 1726 Comm: kworker/0:1H Not tainted 4.17.0-rc5+ #103
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: kblockd blk_mq_run_work_fn
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x149/0x260 mm/kmsan/kmsan.c:1084
 __msan_warning_32+0x6e/0xc0 mm/kmsan/kmsan_instr.c:686
 ____rb_erase_color lib/rbtree.c:278 [inline]
 rb_erase+0x135f/0x2bf0 lib/rbtree.c:462
 elv_rb_del+0xa3/0x130 block/elevator.c:364
 deadline_del_rq_rb block/mq-deadline.c:102 [inline]
 deadline_remove_request+0x565/0x680 block/mq-deadline.c:118
 deadline_move_request block/mq-deadline.c:175 [inline]
 __dd_dispatch_request block/mq-deadline.c:364 [inline]
 dd_dispatch_request+0x15d7/0x17d0 block/mq-deadline.c:386
 blk_mq_do_dispatch_sched block/blk-mq-sched.c:108 [inline]
 blk_mq_sched_dispatch_requests+0x9fa/0x1990 block/blk-mq-sched.c:221
 __blk_mq_run_hw_queue+0x3c3/0x460 block/blk-mq.c:1350
 blk_mq_run_work_fn+0x9e/0xe0 block/blk-mq.c:1583
 process_one_work+0x12c6/0x1f60 kernel/workqueue.c:2145
 worker_thread+0x113c/0x24f0 kernel/workqueue.c:2279
 kthread+0x4e3/0x6d0 kernel/kthread.c:241
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:412

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:529
 __write_once_size include/linux/compiler.h:224 [inline]
 __list_del include/linux/list.h:106 [inline]
 __list_del_entry include/linux/list.h:120 [inline]
 list_del_init include/linux/list.h:159 [inline]
 dd_insert_requests+0x763/0x1180 block/mq-deadline.c:532
 blk_mq_sched_insert_requests+0x1ff/0x340 block/blk-mq-sched.c:474
 blk_mq_flush_plug_list+0xfaf/0xfd0 block/blk-mq.c:1705
 blk_flush_plug_list+0x812/0x2110 block/blk-core.c:3689
 blk_schedule_flush_plug include/linux/blkdev.h:1360 [inline]
 io_schedule_prepare kernel/sched/core.c:5141 [inline]
 io_schedule+0xd7/0x3f0 kernel/sched/core.c:5172
 __wbt_wait block/blk-wbt.c:554 [inline]
 wbt_wait+0x866/0x1480 block/blk-wbt.c:601
 blk_mq_make_request+0x561/0x24b0 block/blk-mq.c:1873
 generic_make_request+0x73d/0x18f0 block/blk-core.c:2460
 submit_bio+0x2e8/0x740 block/blk-core.c:2568
 submit_bh_wbc+0xb3b/0xe00 fs/buffer.c:3081
 __block_write_full_page+0x12ea/0x1e10 fs/buffer.c:1763
 block_write_full_page+0x32c/0x440 fs/buffer.c:2949
 blkdev_writepage+0x76/0x90 fs/block_dev.c:566
 __writepage+0xc0/0x200 mm/page-writeback.c:2302
 write_cache_pages+0x124e/0x1800 mm/page-writeback.c:2240
 generic_writepages+0x10f/0x190 mm/page-writeback.c:2326
 blkdev_writepages+0x67/0x80 fs/block_dev.c:1951
 do_writepages+0x185/0x3c0 mm/page-writeback.c:2341
 __filemap_fdatawrite_range+0x4b6/0x500 mm/filemap.c:445
 __filemap_fdatawrite mm/filemap.c:453 [inline]
 filemap_fdatawrite mm/filemap.c:458 [inline]
 filemap_write_and_wait+0x25e/0x950 mm/filemap.c:617
 __sync_blockdev fs/block_dev.c:448 [inline]
 sync_blockdev fs/block_dev.c:457 [inline]
 __blkdev_put+0x2ba/0xc80 fs/block_dev.c:1783
 blkdev_put+0x435/0x570 fs/block_dev.c:1852
 blkdev_close+0xa6/0xf0 fs/block_dev.c:1859
 __fput+0x457/0xa10 fs/file_table.c:209
 ____fput+0x37/0x40 fs/file_table.c:243
 task_work_run+0x243/0x2c0 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x10e1/0x38d0 kernel/exit.c:867
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 get_signal+0xfcb/0x1f40 kernel/signal.c:2482
 do_signal+0xb8/0x1cf0 arch/x86/kernel/signal.c:810
 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline]
 prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196
 syscall_return_slowpath+0xe9/0x700 arch/x86/entry/common.c:265
 do_syscall_64+0x1af/0x230 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:529
 __write_once_size include/linux/compiler.h:224 [inline]
 __list_add include/linux/list.h:66 [inline]
 list_add_tail include/linux/list.h:93 [inline]
 blk_mq_flush_plug_list+0xc01/0xfd0 block/blk-mq.c:1696
 blk_flush_plug_list+0x812/0x2110 block/blk-core.c:3689
 blk_schedule_flush_plug include/linux/blkdev.h:1360 [inline]
 io_schedule_prepare kernel/sched/core.c:5141 [inline]
 io_schedule+0xd7/0x3f0 kernel/sched/core.c:5172
 __wbt_wait block/blk-wbt.c:554 [inline]
 wbt_wait+0x866/0x1480 block/blk-wbt.c:601
 blk_mq_make_request+0x561/0x24b0 block/blk-mq.c:1873
 generic_make_request+0x73d/0x18f0 block/blk-core.c:2460
 submit_bio+0x2e8/0x740 block/blk-core.c:2568
 submit_bh_wbc+0xb3b/0xe00 fs/buffer.c:3081
 __block_write_full_page+0x12ea/0x1e10 fs/buffer.c:1763
 block_write_full_page+0x32c/0x440 fs/buffer.c:2949
 blkdev_writepage+0x76/0x90 fs/block_dev.c:566
 __writepage+0xc0/0x200 mm/page-writeback.c:2302
 write_cache_pages+0x124e/0x1800 mm/page-writeback.c:2240
 generic_writepages+0x10f/0x190 mm/page-writeback.c:2326
 blkdev_writepages+0x67/0x80 fs/block_dev.c:1951
 do_writepages+0x185/0x3c0 mm/page-writeback.c:2341
 __filemap_fdatawrite_range+0x4b6/0x500 mm/filemap.c:445
 __filemap_fdatawrite mm/filemap.c:453 [inline]
 filemap_fdatawrite mm/filemap.c:458 [inline]
 filemap_write_and_wait+0x25e/0x950 mm/filemap.c:617
 __sync_blockdev fs/block_dev.c:448 [inline]
 sync_blockdev fs/block_dev.c:457 [inline]
 __blkdev_put+0x2ba/0xc80 fs/block_dev.c:1783
 blkdev_put+0x435/0x570 fs/block_dev.c:1852
 blkdev_close+0xa6/0xf0 fs/block_dev.c:1859
 __fput+0x457/0xa10 fs/file_table.c:209
 ____fput+0x37/0x40 fs/file_table.c:243
 task_work_run+0x243/0x2c0 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x10e1/0x38d0 kernel/exit.c:867
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 get_signal+0xfcb/0x1f40 kernel/signal.c:2482
 do_signal+0xb8/0x1cf0 arch/x86/kernel/signal.c:810
 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline]
 prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196
 syscall_return_slowpath+0xe9/0x700 arch/x86/entry/common.c:265
 do_syscall_64+0x1af/0x230 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:529
 __write_once_size include/linux/compiler.h:224 [inline]
 __list_del include/linux/list.h:106 [inline]
 __list_del_entry include/linux/list.h:120 [inline]
 list_del_init include/linux/list.h:159 [inline]
 blk_mq_flush_plug_list+0x8f8/0xfd0 block/blk-mq.c:1680
 blk_flush_plug_list+0x812/0x2110 block/blk-core.c:3689
 blk_schedule_flush_plug include/linux/blkdev.h:1360 [inline]
 io_schedule_prepare kernel/sched/core.c:5141 [inline]
 io_schedule+0xd7/0x3f0 kernel/sched/core.c:5172
 __wbt_wait block/blk-wbt.c:554 [inline]
 wbt_wait+0x866/0x1480 block/blk-wbt.c:601
 blk_mq_make_request+0x561/0x24b0 block/blk-mq.c:1873
 generic_make_request+0x73d/0x18f0 block/blk-core.c:2460
 submit_bio+0x2e8/0x740 block/blk-core.c:2568
 submit_bh_wbc+0xb3b/0xe00 fs/buffer.c:3081
 __block_write_full_page+0x12ea/0x1e10 fs/buffer.c:1763
 block_write_full_page+0x32c/0x440 fs/buffer.c:2949
 blkdev_writepage+0x76/0x90 fs/block_dev.c:566
 __writepage+0xc0/0x200 mm/page-writeback.c:2302
 write_cache_pages+0x124e/0x1800 mm/page-writeback.c:2240
 generic_writepages+0x10f/0x190 mm/page-writeback.c:2326
 blkdev_writepages+0x67/0x80 fs/block_dev.c:1951
 do_writepages+0x185/0x3c0 mm/page-writeback.c:2341
 __filemap_fdatawrite_range+0x4b6/0x500 mm/filemap.c:445
 __filemap_fdatawrite mm/filemap.c:453 [inline]
 filemap_fdatawrite mm/filemap.c:458 [inline]
 filemap_write_and_wait+0x25e/0x950 mm/filemap.c:617
 __sync_blockdev fs/block_dev.c:448 [inline]
 sync_blockdev fs/block_dev.c:457 [inline]
 __blkdev_put+0x2ba/0xc80 fs/block_dev.c:1783
 blkdev_put+0x435/0x570 fs/block_dev.c:1852
 blkdev_close+0xa6/0xf0 fs/block_dev.c:1859
 __fput+0x457/0xa10 fs/file_table.c:209
 ____fput+0x37/0x40 fs/file_table.c:243
 task_work_run+0x243/0x2c0 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x10e1/0x38d0 kernel/exit.c:867
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 get_signal+0xfcb/0x1f40 kernel/signal.c:2482
 do_signal+0xb8/0x1cf0 arch/x86/kernel/signal.c:810
 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline]
 prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196
 syscall_return_slowpath+0xe9/0x700 arch/x86/entry/common.c:265
 do_syscall_64+0x1af/0x230 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:529
 merge lib/list_sort.c:35 [inline]
 list_sort+0x664/0x1580 lib/list_sort.c:126
 blk_mq_flush_plug_list+0x308/0xfd0 block/blk-mq.c:1672
 blk_flush_plug_list+0x812/0x2110 block/blk-core.c:3689
 blk_schedule_flush_plug include/linux/blkdev.h:1360 [inline]
 io_schedule_prepare kernel/sched/core.c:5141 [inline]
 io_schedule+0xd7/0x3f0 kernel/sched/core.c:5172
 __wbt_wait block/blk-wbt.c:554 [inline]
 wbt_wait+0x866/0x1480 block/blk-wbt.c:601
 blk_mq_make_request+0x561/0x24b0 block/blk-mq.c:1873
 generic_make_request+0x73d/0x18f0 block/blk-core.c:2460
 submit_bio+0x2e8/0x740 block/blk-core.c:2568
 submit_bh_wbc+0xb3b/0xe00 fs/buffer.c:3081
 __block_write_full_page+0x12ea/0x1e10 fs/buffer.c:1763
 block_write_full_page+0x32c/0x440 fs/buffer.c:2949
 blkdev_writepage+0x76/0x90 fs/block_dev.c:566
 __writepage+0xc0/0x200 mm/page-writeback.c:2302
 write_cache_pages+0x124e/0x1800 mm/page-writeback.c:2240
 generic_writepages+0x10f/0x190 mm/page-writeback.c:2326
 blkdev_writepages+0x67/0x80 fs/block_dev.c:1951
 do_writepages+0x185/0x3c0 mm/page-writeback.c:2341
 __filemap_fdatawrite_range+0x4b6/0x500 mm/filemap.c:445
 __filemap_fdatawrite mm/filemap.c:453 [inline]
 filemap_fdatawrite mm/filemap.c:458 [inline]
 filemap_write_and_wait+0x25e/0x950 mm/filemap.c:617
 __sync_blockdev fs/block_dev.c:448 [inline]
 sync_blockdev fs/block_dev.c:457 [inline]
 __blkdev_put+0x2ba/0xc80 fs/block_dev.c:1783
 blkdev_put+0x435/0x570 fs/block_dev.c:1852
 blkdev_close+0xa6/0xf0 fs/block_dev.c:1859
 __fput+0x457/0xa10 fs/file_table.c:209
 ____fput+0x37/0x40 fs/file_table.c:243
 task_work_run+0x243/0x2c0 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x10e1/0x38d0 kernel/exit.c:867
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 get_signal+0xfcb/0x1f40 kernel/signal.c:2482
 do_signal+0xb8/0x1cf0 arch/x86/kernel/signal.c:810
 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline]
 prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196
 syscall_return_slowpath+0xe9/0x700 arch/x86/entry/common.c:265
 do_syscall_64+0x1af/0x230 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:529
 merge lib/list_sort.c:27 [inline]
 list_sort+0x4f9/0x1580 lib/list_sort.c:126
 blk_mq_flush_plug_list+0x308/0xfd0 block/blk-mq.c:1672
 blk_flush_plug_list+0x812/0x2110 block/blk-core.c:3689
 blk_schedule_flush_plug include/linux/blkdev.h:1360 [inline]
 io_schedule_prepare kernel/sched/core.c:5141 [inline]
 io_schedule+0xd7/0x3f0 kernel/sched/core.c:5172
 __wbt_wait block/blk-wbt.c:554 [inline]
 wbt_wait+0x866/0x1480 block/blk-wbt.c:601
 blk_mq_make_request+0x561/0x24b0 block/blk-mq.c:1873
 generic_make_request+0x73d/0x18f0 block/blk-core.c:2460
 submit_bio+0x2e8/0x740 block/blk-core.c:2568
 submit_bh_wbc+0xb3b/0xe00 fs/buffer.c:3081
 __block_write_full_page+0x12ea/0x1e10 fs/buffer.c:1763
 block_write_full_page+0x32c/0x440 fs/buffer.c:2949
 blkdev_writepage+0x76/0x90 fs/block_dev.c:566
 __writepage+0xc0/0x200 mm/page-writeback.c:2302
 write_cache_pages+0x124e/0x1800 mm/page-writeback.c:2240
 generic_writepages+0x10f/0x190 mm/page-writeback.c:2326
 blkdev_writepages+0x67/0x80 fs/block_dev.c:1951
 do_writepages+0x185/0x3c0 mm/page-writeback.c:2341
 __filemap_fdatawrite_range+0x4b6/0x500 mm/filemap.c:445
 __filemap_fdatawrite mm/filemap.c:453 [inline]
 filemap_fdatawrite mm/filemap.c:458 [inline]
 filemap_write_and_wait+0x25e/0x950 mm/filemap.c:617
 __sync_blockdev fs/block_dev.c:448 [inline]
 sync_blockdev fs/block_dev.c:457 [inline]
 __blkdev_put+0x2ba/0xc80 fs/block_dev.c:1783
 blkdev_put+0x435/0x570 fs/block_dev.c:1852
 blkdev_close+0xa6/0xf0 fs/block_dev.c:1859
 __fput+0x457/0xa10 fs/file_table.c:209
 ____fput+0x37/0x40 fs/file_table.c:243
 task_work_run+0x243/0x2c0 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x10e1/0x38d0 kernel/exit.c:867
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 get_signal+0xfcb/0x1f40 kernel/signal.c:2482
 do_signal+0xb8/0x1cf0 arch/x86/kernel/signal.c:810
 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline]
 prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196
 syscall_return_slowpath+0xe9/0x700 arch/x86/entry/common.c:265
 do_syscall_64+0x1af/0x230 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:529
 list_sort+0x76f/0x1580 lib/list_sort.c:136
 blk_mq_flush_plug_list+0x308/0xfd0 block/blk-mq.c:1672
 blk_flush_plug_list+0x812/0x2110 block/blk-core.c:3689
 blk_schedule_flush_plug include/linux/blkdev.h:1360 [inline]
 io_schedule_prepare kernel/sched/core.c:5141 [inline]
 io_schedule+0xd7/0x3f0 kernel/sched/core.c:5172
 __wbt_wait block/blk-wbt.c:554 [inline]
 wbt_wait+0x866/0x1480 block/blk-wbt.c:601
 blk_mq_make_request+0x561/0x24b0 block/blk-mq.c:1873
 generic_make_request+0x73d/0x18f0 block/blk-core.c:2460
 submit_bio+0x2e8/0x740 block/blk-core.c:2568
 submit_bh_wbc+0xb3b/0xe00 fs/buffer.c:3081
 __block_write_full_page+0x12ea/0x1e10 fs/buffer.c:1763
 block_write_full_page+0x32c/0x440 fs/buffer.c:2949
 blkdev_writepage+0x76/0x90 fs/block_dev.c:566
 __writepage+0xc0/0x200 mm/page-writeback.c:2302
 write_cache_pages+0x124e/0x1800 mm/page-writeback.c:2240
 generic_writepages+0x10f/0x190 mm/page-writeback.c:2326
 blkdev_writepages+0x67/0x80 fs/block_dev.c:1951
 do_writepages+0x185/0x3c0 mm/page-writeback.c:2341
 __filemap_fdatawrite_range+0x4b6/0x500 mm/filemap.c:445
 __filemap_fdatawrite mm/filemap.c:453 [inline]
 filemap_fdatawrite mm/filemap.c:458 [inline]
 filemap_write_and_wait+0x25e/0x950 mm/filemap.c:617
 __sync_blockdev fs/block_dev.c:448 [inline]
 sync_blockdev fs/block_dev.c:457 [inline]
 __blkdev_put+0x2ba/0xc80 fs/block_dev.c:1783
 blkdev_put+0x435/0x570 fs/block_dev.c:1852
 blkdev_close+0xa6/0xf0 fs/block_dev.c:1859
 __fput+0x457/0xa10 fs/file_table.c:209
 ____fput+0x37/0x40 fs/file_table.c:243
 task_work_run+0x243/0x2c0 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x10e1/0x38d0 kernel/exit.c:867
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 get_signal+0xfcb/0x1f40 kernel/signal.c:2482
 do_signal+0xb8/0x1cf0 arch/x86/kernel/signal.c:810
 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline]
 prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196
 syscall_return_slowpath+0xe9/0x700 arch/x86/entry/common.c:265
 do_syscall_64+0x1af/0x230 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:529
 __write_once_size include/linux/compiler.h:224 [inline]
 __list_add include/linux/list.h:66 [inline]
 list_add_tail include/linux/list.h:93 [inline]
 blk_mq_make_request+0x22fc/0x24b0 block/blk-mq.c:1923
 generic_make_request+0x73d/0x18f0 block/blk-core.c:2460
 submit_bio+0x2e8/0x740 block/blk-core.c:2568
 submit_bh_wbc+0xb3b/0xe00 fs/buffer.c:3081
 __block_write_full_page+0x12ea/0x1e10 fs/buffer.c:1763
 block_write_full_page+0x32c/0x440 fs/buffer.c:2949
 blkdev_writepage+0x76/0x90 fs/block_dev.c:566
 __writepage+0xc0/0x200 mm/page-writeback.c:2302
 write_cache_pages+0x124e/0x1800 mm/page-writeback.c:2240
 generic_writepages+0x10f/0x190 mm/page-writeback.c:2326
 blkdev_writepages+0x67/0x80 fs/block_dev.c:1951
 do_writepages+0x185/0x3c0 mm/page-writeback.c:2341
 __filemap_fdatawrite_range+0x4b6/0x500 mm/filemap.c:445
 __filemap_fdatawrite mm/filemap.c:453 [inline]
 filemap_fdatawrite mm/filemap.c:458 [inline]
 filemap_write_and_wait+0x25e/0x950 mm/filemap.c:617
 __sync_blockdev fs/block_dev.c:448 [inline]
 sync_blockdev fs/block_dev.c:457 [inline]
 __blkdev_put+0x2ba/0xc80 fs/block_dev.c:1783
 blkdev_put+0x435/0x570 fs/block_dev.c:1852
 blkdev_close+0xa6/0xf0 fs/block_dev.c:1859
 __fput+0x457/0xa10 fs/file_table.c:209
 ____fput+0x37/0x40 fs/file_table.c:243
 task_work_run+0x243/0x2c0 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x10e1/0x38d0 kernel/exit.c:867
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 get_signal+0xfcb/0x1f40 kernel/signal.c:2482
 do_signal+0xb8/0x1cf0 arch/x86/kernel/signal.c:810
 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline]
 prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196
 syscall_return_slowpath+0xe9/0x700 arch/x86/entry/common.c:265
 do_syscall_64+0x1af/0x230 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
Local variable description: ----bio.addr@blk_mq_make_request
Variable was created at:
 blk_mq_make_request+0xb2/0x24b0 block/blk-mq.c:1848
 generic_make_request+0x73d/0x18f0 block/blk-core.c:2460
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/05/31 01:45 https://github.com/google/kmsan.git master 8fc8ecd1c58a 2f93b54f .config console log report ci-upstream-kmsan-gce
2018/05/30 13:12 https://github.com/google/kmsan.git master 8fc8ecd1c58a 2f93b54f .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.