KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw

KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue (2)
Status: moderation: reported on 2020/09/05 11:19
Reported-by: syzbot+f5359a7d0291ed059d6a@syzkaller.appspotmail.com
First crash: 452d, last: 19h16m

similar bugs (1):
Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue				17	460d	518d	0/22	closed as invalid on 2020/06/18 14:24

Sample crash report:

==================================================================
BUG: KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue

write to 0xffff888100b3cc10 of 8 bytes by task 24126 on cpu 0:
 __list_add include/linux/list.h:70 [inline]
 list_add include/linux/list.h:86 [inline]
 blk_mq_request_bypass_insert+0x6a/0x150 block/blk-mq.c:1859
 blk_mq_sched_insert_request+0xfc/0x250 block/blk-mq-sched.c:462
 blk_execute_rq_nowait+0xee/0x130 block/blk-exec.c:62
 sg_common_write+0x8df/0x1480 drivers/scsi/sg.c:835
 sg_new_write+0xb32/0xcc0 drivers/scsi/sg.c:773
 sg_ioctl_common drivers/scsi/sg.c:938 [inline]
 sg_ioctl+0xf08/0x18e0 drivers/scsi/sg.c:1164
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl+0xcb/0x140 fs/ioctl.c:860
 __x64_sys_ioctl+0x3f/0x50 fs/ioctl.c:860
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888100b3cc10 of 8 bytes by interrupt on cpu 1:
 list_empty_careful include/linux/list.h:319 [inline]
 blk_mq_hctx_has_pending block/blk-mq.c:72 [inline]
 blk_mq_run_hw_queue+0x129/0x250 block/blk-mq.c:1606
 blk_mq_sched_restart+0x51/0x60 block/blk-mq-sched.c:75
 __blk_mq_free_request+0x160/0x180 block/blk-mq.c:503
 blk_mq_free_request+0x2c8/0x340 block/blk-mq.c:534
 blk_put_request+0x11/0x20 block/blk-core.c:631
 sg_rq_end_io+0x386/0x750 drivers/scsi/sg.c:1392
 __blk_mq_end_request+0x224/0x230 block/blk-mq.c:556
 scsi_end_request+0x28c/0x440 drivers/scsi/scsi_lib.c:576
 scsi_io_completion+0x8eb/0x10c0 drivers/scsi/scsi_lib.c:944
 scsi_finish_command+0x1ba/0x1d0 drivers/scsi/scsi.c:207
 scsi_complete+0x1aa/0x1e0 drivers/scsi/scsi_lib.c:1432
 blk_complete_reqs block/blk-mq.c:577 [inline]
 blk_done_softirq+0x69/0x90 block/blk-mq.c:582
 __do_softirq+0x12c/0x26e kernel/softirq.c:558
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu kernel/softirq.c:636 [inline]
 irq_exit_rcu+0x4e/0xa0 kernel/softirq.c:648
 common_interrupt+0x78/0x90 arch/x86/kernel/irq.c:240
 asm_common_interrupt+0x1e/0x40
 eligible_child kernel/exit.c:974 [inline]
 wait_consider_task+0x187/0x1a10 kernel/exit.c:1294
 do_wait_thread kernel/exit.c:1397 [inline]
 do_wait+0x182/0x640 kernel/exit.c:1514
 kernel_wait4+0x14b/0x1b0 kernel/exit.c:1677
 __do_sys_wait4 kernel/exit.c:1705 [inline]
 __se_sys_wait4 kernel/exit.c:1701 [inline]
 __x64_sys_wait4+0x90/0x120 kernel/exit.c:1701
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0xffff888100b3cc08 -> 0xffff8881028825c8

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 1122 Comm: syz-executor.4 Tainted: G        W         5.15.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================
sd 0:0:1:0: tag#6131 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
sd 0:0:1:0: tag#6131 CDB: opcode=0xe5 (vendor)
sd 0:0:1:0: tag#6131 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
sd 0:0:1:0: tag#6131 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
sd 0:0:1:0: tag#6131 CDB[20]: ba
sd 0:0:1:0: tag#6080 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
sd 0:0:1:0: tag#6080 CDB: opcode=0xe5 (vendor)
sd 0:0:1:0: tag#6080 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
sd 0:0:1:0: tag#6080 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
sd 0:0:1:0: tag#6080 CDB[20]: ba
scsi_io_completion_action: 42 callbacks suppressed
sd 0:0:1:0: tag#6108 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
sd 0:0:1:0: tag#6108 CDB: opcode=0xe5 (vendor)
sd 0:0:1:0: tag#6108 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
sd 0:0:1:0: tag#6108 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
sd 0:0:1:0: tag#6108 CDB[20]: ba
sd 0:0:1:0: tag#6113 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
sd 0:0:1:0: tag#6113 CDB: opcode=0xe5 (vendor)
sd 0:0:1:0: tag#6113 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
sd 0:0:1:0: tag#6113 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
sd 0:0:1:0: tag#6113 CDB[20]: ba
sd 0:0:1:0: tag#6121 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
sd 0:0:1:0: tag#6121 CDB: opcode=0xe5 (vendor)
sd 0:0:1:0: tag#6121 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
sd 0:0:1:0: tag#6121 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
sd 0:0:1:0: tag#6121 CDB[20]: ba
sd 0:0:1:0: tag#6123 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
sd 0:0:1:0: tag#6123 CDB: opcode=0xe5 (vendor)
sd 0:0:1:0: tag#6123 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
sd 0:0:1:0: tag#6123 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
sd 0:0:1:0: tag#6123 CDB[20]: ba
sd 0:0:1:0: tag#6125 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
sd 0:0:1:0: tag#6125 CDB: opcode=0xe5 (vendor)
sd 0:0:1:0: tag#6125 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
sd 0:0:1:0: tag#6125 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
sd 0:0:1:0: tag#6125 CDB[20]: ba
sd 0:0:1:0: tag#6129 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
sd 0:0:1:0: tag#6129 CDB: opcode=0xe5 (vendor)
sd 0:0:1:0: tag#6129 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
sd 0:0:1:0: tag#6129 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
sd 0:0:1:0: tag#6129 CDB[20]: ba

Crashes (382):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Title
ci2-upstream-kcsan-gce	2021/09/19 14:03	upstream	d4d016caa4b8	70b76c1d	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/09/13 09:09	upstream	6880fa6c5660	3ce60af8	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/09/11 15:39	upstream	926de8c4326c	3ce60af8	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/09/10 19:00	upstream	bf9f243f23e6	5ae8508a	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/09/07 06:58	upstream	4b93c544e90e	6ca60148	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/09/05 15:49	upstream	a9c9a6f741cd	d236a457	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/09/02 16:43	upstream	4ac6d90867a4	d0f0970b	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/08/29 06:05	upstream	3f5ad13cb012	be2c130d	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/08/20 21:35	upstream	d992fe5318d8	b599f2fc	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/08/20 09:46	upstream	f87d64319e6f	b599f2fc	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/08/14 18:38	upstream	ba31f97d43be	2489ab88	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/08/12 11:10	upstream	1746f4db5135	6972b106	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/08/11 03:38	upstream	9e723c5380c6	6972b106	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/08/09 10:59	upstream	36a21d51725a	6972b106	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/08/08 03:23	upstream	85a90500f9a1	6972b106	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/08/04 18:52	upstream	d5ad8ec3cfb5	b97d64c9	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/08/01 23:47	upstream	d4affd6b6e81	6c236867	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/31 19:54	upstream	c7d102232649	6c236867	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/31 03:25	upstream	4669e13cd67f	6c236867	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/29 17:37	upstream	7e96bf476270	8a799410	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/29 06:43	upstream	4010a528219e	b44001ce	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/28 08:24	upstream	7d549995d4e0	17d6ab15	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/27 05:35	upstream	ff1176468d36	fd511809	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/25 14:09	upstream	d8079fac1681	4d1b57d4	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/25 09:44	upstream	7ffca2bb9d8b	4d1b57d4	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/24 14:00	upstream	f0fddcec6b62	4d1b57d4	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/20 13:08	upstream	8cae8cd89f05	1b201b48	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/15 19:16	upstream	8096acd7442e	f115ae98	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/12 19:27	upstream	e73f0f0ee754	f415556d	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/12 14:07	upstream	e73f0f0ee754	a4869c92	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/10 02:31	upstream	3dbdb38e2869	8f5a7b8c	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/08 14:16	upstream	3dbdb38e2869	1aade754	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/07/02 18:13	upstream	3dbdb38e2869	55aa55c2	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/06/29 04:23	upstream	122fa8c58831	9d2ab5df	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/06/28 15:46	upstream	62fb9874f5da	9d2ab5df	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/06/27 06:22	upstream	625acffd7ae2	9d2ab5df	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/06/26 14:47	upstream	b7050b242430	9d2ab5df	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/06/24 09:19	upstream	7426cedc7dad	ec865f6a	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/06/24 05:05	upstream	7266f2030eb0	fe4ab389	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/06/22 11:18	upstream	a96bfed64c89	aba2b2fb	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/06/21 18:16	upstream	13311e74253f	aba2b2fb	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/06/20 23:31	upstream	cba5e97280f5	aba2b2fb	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/06/19 22:39	upstream	913ec3c22ef4	aba2b2fb	.config	log	report	info	KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue
ci2-upstream-kcsan-gce	2021/01/17 11:22	upstream	0da0a8a0a0e1	813be542	.config	log	report	info
ci2-upstream-kcsan-gce	2020/09/04 22:27	upstream	c70672d8d316	abf9ba4f	.config	log	report
ci2-upstream-kcsan-gce	2020/09/01 11:12	upstream	b51594df17d0	d5a3ae1f	.config	log	report
ci2-upstream-kcsan-gce	2020/06/24 10:14	upstream	3e08a95294a4	bbad15ae	.config	log	report