syzbot


KCSAN: data-race in blk_mq_run_hw_queue / blk_mq_sched_dispatch_requests

Status: closed as invalid on 2019/11/19 14:54
Subsystems: block
[Documentation on labels]
First crash: 2177d, last: 2160d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in blk_mq_run_hw_queue / blk_mq_sched_dispatch_requests (2) block 6 10 2052d 2135d 0/29 auto-closed as invalid on 2020/05/07 20:56

Sample crash report:
==================================================================
BUG: KCSAN: data-race in blk_mq_run_hw_queue / blk_mq_sched_dispatch_requests

read to 0xffff88812a262010 of 8 bytes by task 14640 on cpu 0:
 list_empty_careful include/linux/list.h:287 [inline]
 blk_mq_hctx_has_pending block/blk-mq.c:69 [inline]
 blk_mq_run_hw_queue+0x11a/0x1c0 block/blk-mq.c:1504
 blk_mq_sched_insert_requests+0x1ca/0x2e0 block/blk-mq-sched.c:444
 blk_mq_flush_plug_list+0x572/0x6c0 block/blk-mq.c:1772
 blk_flush_plug_list+0x271/0x2a0 block/blk-core.c:1766
 blk_finish_plug block/blk-core.c:1783 [inline]
 blk_finish_plug+0x60/0x84 block/blk-core.c:1779
 do_blockdev_direct_IO+0x48b6/0x78c0 fs/direct-io.c:1355
 __blockdev_direct_IO+0x86/0xa0 fs/direct-io.c:1412
 ext4_direct_IO_write fs/ext4/inode.c:3742 [inline]
 ext4_direct_IO+0x76c/0xfb0 fs/ext4/inode.c:3871
 generic_file_direct_write+0x14d/0x2e0 mm/filemap.c:3208
 __generic_file_write_iter+0x17e/0x380 mm/filemap.c:3391
 ext4_file_write_iter+0x1bd/0xa00 fs/ext4/file.c:268
 call_write_iter include/linux/fs.h:1895 [inline]
 do_iter_readv_writev+0x487/0x5b0 fs/read_write.c:693
 do_iter_write fs/read_write.c:970 [inline]
 do_iter_write+0x13b/0x3c0 fs/read_write.c:951
 vfs_iter_write+0x5c/0x80 fs/read_write.c:983
 iter_file_splice_write+0x4c0/0x7f0 fs/splice.c:746
 do_splice_from fs/splice.c:848 [inline]
 direct_splice_actor+0xa0/0xc0 fs/splice.c:1020
 splice_direct_to_actor+0x215/0x510 fs/splice.c:975
 do_splice_direct+0x161/0x1e0 fs/splice.c:1063
 do_sendfile+0x384/0x7f0 fs/read_write.c:1464
 __do_sys_sendfile64 fs/read_write.c:1525 [inline]
 __se_sys_sendfile64 fs/read_write.c:1511 [inline]
 __x64_sys_sendfile64+0x12a/0x140 fs/read_write.c:1511
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff88812a262010 of 8 bytes by task 2501 on cpu 1:
 INIT_LIST_HEAD include/linux/list.h:29 [inline]
 list_splice_init include/linux/list.h:451 [inline]
 blk_mq_sched_dispatch_requests+0x239/0x380 block/blk-mq-sched.c:190
 __blk_mq_run_hw_queue+0xb7/0x160 block/blk-mq.c:1403
 __blk_mq_delay_run_hw_queue+0x31b/0x3a0 block/blk-mq.c:1471
 blk_mq_run_hw_queue+0x103/0x1c0 block/blk-mq.c:1508
 blk_mq_run_hw_queues+0xac/0xf0 block/blk-mq.c:1525
 blk_mq_requeue_work+0x3a9/0x460 block/blk-mq.c:775
 process_one_work+0x3d4/0x890 kernel/workqueue.c:2269
 worker_thread+0xa0/0x800 kernel/workqueue.c:2415
 kthread+0x1d4/0x200 drivers/block/aoe/aoecmd.c:1253
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 2501 Comm: kworker/1:1H Not tainted 5.4.0-rc6+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: kblockd blk_mq_requeue_work
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/11/11 18:20 https://github.com/google/ktsan.git kcsan 94c006602e13 377d77fa .config console log report ci2-upstream-kcsan-gce
2019/10/25 12:16 https://github.com/google/ktsan.git kcsan 05f2236801fe 04ca72cd .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.