syzbot


KCSAN: data-race in lo_ioctl / loop_queue_rq

Status: auto-closed as invalid on 2020/02/19 07:26
Subsystems: block
[Documentation on labels]
First crash: 1609d, last: 1609d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in lo_ioctl / loop_queue_rq (4) block 2 110d 126d 0/26 auto-obsoleted due to no activity on 2024/02/21 17:00
upstream KCSAN: data-race in lo_ioctl / loop_queue_rq (3) block 1 661d 661d 0/26 auto-closed as invalid on 2022/08/20 11:36
upstream KCSAN: data-race in lo_ioctl / loop_queue_rq (2) block 1 1107d 1106d 0/26 auto-closed as invalid on 2021/05/31 09:44

Sample crash report:
==================================================================
BUG: KCSAN: data-race in lo_ioctl / loop_queue_rq

read to 0xffff8880a2c9ad10 of 4 bytes by task 15818 on cpu 0:
 loop_queue_rq+0x71/0x2b0 drivers/block/loop.c:1900
 blk_mq_dispatch_rq_list+0xbe9/0xe40 block/blk-mq.c:1273
 blk_mq_do_dispatch_sched+0x11d/0x260 block/blk-mq-sched.c:115
 blk_mq_sched_dispatch_requests+0x2b4/0x380 block/blk-mq-sched.c:211
 __blk_mq_run_hw_queue+0xb7/0x160 block/blk-mq.c:1403
 __blk_mq_delay_run_hw_queue+0x31b/0x3a0 block/blk-mq.c:1471
 blk_mq_run_hw_queue+0x103/0x1c0 block/blk-mq.c:1508
 blk_mq_sched_insert_requests+0x1ca/0x2e0 block/blk-mq-sched.c:444
 blk_mq_flush_plug_list+0x572/0x6c0 block/blk-mq.c:1772
 blk_flush_plug_list+0x271/0x2a0 block/blk-core.c:1766
 blk_finish_plug block/blk-core.c:1783 [inline]
 blk_finish_plug+0x60/0x84 block/blk-core.c:1779
 read_pages+0xbc/0x2d0 mm/readahead.c:142
 __do_page_cache_readahead+0x353/0x390 mm/readahead.c:212
 ra_submit mm/internal.h:62 [inline]
 ondemand_readahead+0x35d/0x710 mm/readahead.c:492
 page_cache_async_readahead+0x22c/0x250 mm/readahead.c:574
 generic_file_buffered_read mm/filemap.c:2059 [inline]
 generic_file_read_iter+0xffc/0x1440 mm/filemap.c:2324
 blkdev_read_iter+0xb2/0xe0 fs/block_dev.c:2010
 call_read_iter include/linux/fs.h:1889 [inline]
 generic_file_splice_read+0x35c/0x500 fs/splice.c:307
 do_splice_to+0xf2/0x130 fs/splice.c:877
 splice_direct_to_actor+0x1a1/0x510 fs/splice.c:954
 do_splice_direct+0x161/0x1e0 fs/splice.c:1063
 do_sendfile+0x384/0x7f0 fs/read_write.c:1464
 __do_sys_sendfile64 fs/read_write.c:1525 [inline]
 __se_sys_sendfile64 fs/read_write.c:1511 [inline]
 __x64_sys_sendfile64+0x12a/0x140 fs/read_write.c:1511
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff8880a2c9ad10 of 4 bytes by task 15824 on cpu 1:
 loop_clr_fd drivers/block/loop.c:1221 [inline]
 lo_ioctl+0x22b/0xc80 drivers/block/loop.c:1593
 __blkdev_driver_ioctl block/ioctl.c:304 [inline]
 blkdev_ioctl+0x979/0x1160 block/ioctl.c:606
 block_ioctl+0x95/0xc0 fs/block_dev.c:1954
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:509 [inline]
 do_vfs_ioctl+0x991/0xc60 fs/ioctl.c:696
 ksys_ioctl+0xbd/0xe0 fs/ioctl.c:713
 __do_sys_ioctl fs/ioctl.c:720 [inline]
 __se_sys_ioctl fs/ioctl.c:718 [inline]
 __x64_sys_ioctl+0x4c/0x60 fs/ioctl.c:718
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 15824 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/12/11 07:21 https://github.com/google/ktsan.git kcsan ef798c30ba4e 101194eb .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.