syzbot


BUG: scheduling while atomic in kernfs_remove

Status: premoderation: reported on 2024/04/04 22:39
Reported-by: syzbot+6089043b175397aed421@syzkaller.appspotmail.com
First crash: 30d, last: 30d

Sample crash report:
BUG: scheduling while atomic: syz-executor.4/10462/0x00000002
Modules linked in:
Preemption disabled at:
[<ffffffff8165ea9a>] is_module_text_address+0x1a/0x140 kernel/module.c:4811
CPU: 1 PID: 10462 Comm: syz-executor.4 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x151/0x1b7 lib/dump_stack.c:106
 dump_stack+0x15/0x17 lib/dump_stack.c:113
 __schedule_bug+0x195/0x260 kernel/sched/core.c:5707
 schedule_debug kernel/sched/core.c:5734 [inline]
 __schedule+0xd19/0x1590 kernel/sched/core.c:6402
 schedule+0x11f/0x1e0 kernel/sched/core.c:6595
 rwsem_down_write_slowpath+0xde4/0x1d70 kernel/locking/rwsem.c:1207
 __down_write_common kernel/locking/rwsem.c:1341 [inline]
 __down_write kernel/locking/rwsem.c:1350 [inline]
 down_write+0x29/0x30 kernel/locking/rwsem.c:1603
 kernfs_remove+0x70/0x90 fs/kernfs/dir.c:1418
 sysfs_remove_group+0x278/0x2a0 fs/sysfs/group.c:291
 sysfs_remove_groups+0x56/0xb0 fs/sysfs/group.c:313
 device_remove_groups drivers/base/core.c:2490 [inline]
 device_remove_attrs+0xc6/0x140 drivers/base/core.c:2690
 device_del+0x65b/0xe90 drivers/base/core.c:3591
 netdev_unregister_kobject+0x18b/0x260 net/core/net-sysfs.c:1980
 unregister_netdevice_many+0x1295/0x17c0 net/core/dev.c:11132
 unregister_netdevice_queue+0x2e6/0x350 net/core/dev.c:11038
 unregister_netdevice include/linux/netdevice.h:3052 [inline]
 __tun_detach+0xcf9/0x14c0 drivers/net/tun.c:685
 tun_detach drivers/net/tun.c:701 [inline]
 tun_chr_close+0x92/0x140 drivers/net/tun.c:3434
 __fput+0x3fe/0x910 fs/file_table.c:280
 ____fput+0x15/0x20 fs/file_table.c:308
 task_work_run+0x129/0x190 kernel/task_work.c:164
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 exit_to_user_mode_loop+0xc4/0xe0 kernel/entry/common.c:175
 exit_to_user_mode_prepare+0x5a/0xa0 kernel/entry/common.c:208
 __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
 syscall_exit_to_user_mode+0x26/0x160 kernel/entry/common.c:301
 do_syscall_64+0x49/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f150e54ed5a
Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24
RSP: 002b:00007ffda5fc45c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000008 RCX: 00007f150e54ed5a
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
RBP: 0000000000000032 R08: 0000001b31920000 R09: 00000000000005ac
R10: 00000000812e7ea3 R11: 0000000000000293 R12: 00007f150e0d3540
R13: ffffffffffffffff R14: 00007f150e0d2000 R15: 000000000001c67d
 </TASK>

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/04 22:38 android13-5.15-lts 993bed180178 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15-perf BUG: scheduling while atomic in kernfs_remove
* Struck through repros no longer work on HEAD.