syzbot


KCSAN: data-race in __kernfs_remove / cleanup_glue_dir (5)

Status: auto-closed as invalid on 2021/11/24 14:49
Subsystems: kernfs
[Documentation on labels]
First crash: 916d, last: 916d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __kernfs_remove / cleanup_glue_dir (8) kernfs 3 122d 133d 0/26 auto-obsoleted due to no activity on 2024/01/28 04:07
upstream KCSAN: data-race in __kernfs_remove / cleanup_glue_dir kernfs 2 1313d 1331d 0/26 auto-closed as invalid on 2020/10/24 11:06
upstream KCSAN: data-race in __kernfs_remove / cleanup_glue_dir (4) kernfs 1 1112d 1112d 0/26 auto-closed as invalid on 2021/05/13 08:58
upstream KCSAN: data-race in __kernfs_remove / cleanup_glue_dir (6) kernfs 3 742d 770d 0/26 auto-closed as invalid on 2022/05/18 10:42
upstream KCSAN: data-race in __kernfs_remove / cleanup_glue_dir (2) kernfs 2 1217d 1230d 0/26 auto-closed as invalid on 2021/01/28 08:27
upstream KCSAN: data-race in __kernfs_remove / cleanup_glue_dir (7) kernfs 1 660d 660d 0/26 auto-closed as invalid on 2022/08/08 13:27
upstream KCSAN: data-race in __kernfs_remove / cleanup_glue_dir (3) kernfs 1 1181d 1181d 0/26 auto-closed as invalid on 2021/03/05 09:25

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __kernfs_remove / cleanup_glue_dir

write to 0xffff888101c17bc0 of 8 bytes by task 13333 on cpu 1:
 kernfs_unlink_sibling fs/kernfs/dir.c:397 [inline]
 __kernfs_remove+0x592/0x6d0 fs/kernfs/dir.c:1359
 kernfs_remove+0x1d/0x30 fs/kernfs/dir.c:1385
 sysfs_remove_dir+0x92/0xb0 fs/sysfs/dir.c:102
 __kobject_del lib/kobject.c:620 [inline]
 kobject_del+0xb7/0x110 lib/kobject.c:643
 device_del+0x845/0x8c0 drivers/base/core.c:3595
 device_unregister+0x11/0x30 drivers/base/core.c:3616
 bdi_unregister+0x202/0x270 mm/backing-dev.c:952
 del_gendisk+0x221/0x3e0 block/genhd.c:609
 loop_remove drivers/block/loop.c:2419 [inline]
 loop_control_remove drivers/block/loop.c:2476 [inline]
 loop_control_ioctl+0x3c1/0x430 drivers/block/loop.c:2514
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl+0xcb/0x140 fs/ioctl.c:860
 __x64_sys_ioctl+0x3f/0x50 fs/ioctl.c:860
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888101c17bc0 of 8 bytes by task 13337 on cpu 0:
 kobject_has_children include/linux/kobject.h:135 [inline]
 cleanup_glue_dir+0xce/0x140 drivers/base/core.c:3097
 device_del+0x850/0x8c0 drivers/base/core.c:3596
 device_unregister+0x11/0x30 drivers/base/core.c:3616
 bdi_unregister+0x202/0x270 mm/backing-dev.c:952
 del_gendisk+0x221/0x3e0 block/genhd.c:609
 loop_remove drivers/block/loop.c:2419 [inline]
 loop_control_remove drivers/block/loop.c:2476 [inline]
 loop_control_ioctl+0x3c1/0x430 drivers/block/loop.c:2514
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl+0xcb/0x140 fs/ioctl.c:860
 __x64_sys_ioctl+0x3f/0x50 fs/ioctl.c:860
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x0000000000000002 -> 0x0000000000000001

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 13337 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/10/20 14:45 upstream d9abdee5fd5a 418a00eb .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __kernfs_remove / cleanup_glue_dir
* Struck through repros no longer work on HEAD.