================================================================== BUG: KCSAN: data-race in __kernfs_remove / kernfs_iop_permission read-write to 0xffff888101939540 of 8 bytes by task 12145 on cpu 0: kernfs_unlink_sibling fs/kernfs/dir.c:412 [inline] __kernfs_remove+0x2ee/0x440 fs/kernfs/dir.c:1467 kernfs_remove+0x4e/0x70 fs/kernfs/dir.c:1503 sysfs_remove_dir+0x7e/0xa0 fs/sysfs/dir.c:101 __kobject_del+0x9d/0x1a0 lib/kobject.c:597 kobject_del+0x2e/0x50 lib/kobject.c:620 device_del+0x724/0x790 drivers/base/core.c:3823 drop_partition block/partitions/core.c:273 [inline] delete_partition+0xb2/0xc0 block/partitions/core.c:288 bdev_disk_changed+0x156/0xbd0 block/partitions/core.c:670 __loop_clr_fd+0x295/0x3b0 drivers/block/loop.c:1189 lo_release+0xe4/0xf0 drivers/block/loop.c:1743 blkdev_put+0x3f2/0x470 blkdev_release+0x50/0x60 block/fops.c:533 __fput+0x2fd/0x600 fs/file_table.c:384 ____fput+0x15/0x20 fs/file_table.c:412 task_work_run+0x135/0x1a0 kernel/task_work.c:179 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop+0xd1/0xe0 kernel/entry/common.c:171 exit_to_user_mode_prepare+0x6c/0xb0 kernel/entry/common.c:204 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline] syscall_exit_to_user_mode+0x26/0x140 kernel/entry/common.c:297 do_syscall_64+0x4d/0xc0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd read to 0xffff888101939540 of 8 bytes by task 2767 on cpu 1: kernfs_refresh_inode fs/kernfs/inode.c:181 [inline] kernfs_iop_permission+0x165/0x1b0 fs/kernfs/inode.c:289 do_inode_permission fs/namei.c:461 [inline] inode_permission+0x184/0x300 fs/namei.c:528 may_lookup fs/namei.c:1720 [inline] link_path_walk+0x19e/0x7e0 fs/namei.c:2267 path_openat+0x1a1/0x1d10 fs/namei.c:3789 do_filp_open+0xf6/0x200 fs/namei.c:3820 do_sys_openat2+0xab/0x110 fs/open.c:1407 do_sys_open fs/open.c:1422 [inline] __do_sys_openat fs/open.c:1438 [inline] __se_sys_openat fs/open.c:1433 [inline] __x64_sys_openat+0xf3/0x120 fs/open.c:1433 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd value changed: 0x0000000000000090 -> 0x000000000000008f Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 2767 Comm: udevd Not tainted 6.5.0-rc5-syzkaller-00353-gae545c3283dc #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 ================================================================== loop2: p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 loop2: p2 size 50331648 extends beyond EOD, truncated loop2: p3 start 150996480 is beyond EOD, truncated loop2: p5 size 50331648 extends beyond EOD, truncated loop2: p6 size 50331648 extends beyond EOD, truncated loop2: p7 size 50331648 extends beyond EOD, truncated loop2: p8 size 50331648 extends beyond EOD, truncated loop2: p9 size 50331648 extends beyond EOD, truncated loop2: p10 size 50331648 extends beyond EOD, truncated loop2: p11 size 50331648 extends beyond EOD, truncated loop2: p12 size 50331648 extends beyond EOD, truncated loop2: p13 size 50331648 extends beyond EOD, truncated loop2: p14 size 50331648 extends beyond EOD, truncated loop2: p15 size 50331648 extends beyond EOD, truncated loop2: p16 size 50331648 extends beyond EOD, truncated loop2: p17 size 50331648 extends beyond EOD, truncated loop2: p18 size 50331648 extends beyond EOD, truncated loop2: p19 size 50331648 extends beyond EOD, truncated loop2: p20 size 50331648 extends beyond EOD, truncated loop2: p21 size 50331648 extends beyond EOD, truncated loop2: p22 size 50331648 extends beyond EOD, truncated loop2: p23 size 50331648 extends beyond EOD, truncated loop2: p24 size 50331648 extends beyond EOD, truncated loop2: p25 size 50331648 extends beyond EOD, truncated loop2: p26 size 50331648 extends beyond EOD, truncated loop2: p27 size 50331648 extends beyond EOD, truncated loop2: p28 size 50331648 extends beyond EOD, truncated loop2: p29 size 50331648 extends beyond EOD, truncated loop2: p30 size 50331648 extends beyond EOD, truncated loop2: p31 size 50331648 extends beyond EOD, truncated loop2: p32 size 50331648 extends beyond EOD, truncated loop2: p33 size 50331648 extends beyond EOD, truncated loop2: p34 size 50331648 extends beyond EOD, truncated loop2: p35 size 50331648 extends beyond EOD, truncated loop2: p36 size 50331648 extends beyond EOD, truncated loop2: p37 size 50331648 extends beyond EOD, truncated loop2: p38 size 50331648 extends beyond EOD, truncated loop2: p39 size 50331648 extends beyond EOD, truncated loop2: p40 size 50331648 extends beyond EOD, truncated loop2: p41 size 50331648 extends beyond EOD, truncated loop2: p42 size 50331648 extends beyond EOD, truncated loop2: p43 size 50331648 extends beyond EOD, truncated loop2: p44 size 50331648 extends beyond EOD, truncated loop2: p45 size 50331648 extends beyond EOD, truncated loop2: p46 size 50331648 extends beyond EOD, truncated loop2: p47 size 50331648 extends beyond EOD, truncated loop2: p48 size 50331648 extends beyond EOD, truncated loop2: p49 size 50331648 extends beyond EOD, truncated loop2: p50 size 50331648 extends beyond EOD, truncated loop2: p51 size 50331648 extends beyond EOD, truncated loop2: p52 size 50331648 extends beyond EOD, truncated loop2: p53 size 50331648 extends beyond EOD, truncated loop2: p54 size 50331648 extends beyond EOD, truncated loop2: p55 size 50331648 extends beyond EOD, truncated loop2: p56 size 50331648 extends beyond EOD, truncated loop2: p57 size 50331648 extends beyond EOD, truncated loop2: p58 size 50331648 extends beyond EOD, truncated loop2: p59 size 50331648 extends beyond EOD, truncated loop2: p60 size 50331648 extends beyond EOD, truncated loop2: p61 size 50331648 extends beyond EOD, truncated loop2: p62 size 50331648 extends beyond EOD, truncated loop2: p63 size 50331648 extends beyond EOD, truncated loop2: p64 size 50331648 extends beyond EOD, truncated loop2: p65 size 50331648 extends beyond EOD, truncated loop2: p66 size 50331648 extends beyond EOD, truncated loop2: p67 size 50331648 extends beyond EOD, truncated loop2: p68 size 50331648 extends beyond EOD, truncated loop2: p69 size 50331648 extends beyond EOD, truncated loop2: p70 size 50331648 extends beyond EOD, truncated loop2: p71 size 50331648 extends beyond EOD, truncated loop2: p72 size 50331648 extends beyond EOD, truncated loop2: p73 size 50331648 extends beyond EOD, truncated loop2: p74 size 50331648 extends beyond EOD, truncated loop2: p75 size 50331648 extends beyond EOD, truncated loop2: p76 size 50331648 extends beyond EOD, truncated loop2: p77 size 50331648 extends beyond EOD, truncated loop2: p78 size 50331648 extends beyond EOD, truncated loop2: p79 size 50331648 extends beyond EOD, truncated loop2: p80 size 50331648 extends beyond EOD, truncated loop2: p81 size 50331648 extends beyond EOD, truncated loop2: p82 size 50331648 extends beyond EOD, truncated loop2: p83 size 50331648 extends beyond EOD, truncated loop2: p84 size 50331648 extends beyond EOD, truncated loop2: p85 size 50331648 extends beyond EOD, truncated loop2: p86 size 50331648 extends beyond EOD, truncated loop2: p87 size 50331648 extends beyond EOD, truncated loop2: p88 size 50331648 extends beyond EOD, truncated loop2: p89 size 50331648 extends beyond EOD, truncated loop2: p90 size 50331648 extends beyond EOD, truncated loop2: p91 size 50331648 extends beyond EOD, truncated loop2: p92 size 50331648 extends beyond EOD, truncated loop2: p93 size 50331648 extends beyond EOD, truncated loop2: p94 size 50331648 extends beyond EOD, truncated loop2: p95 size 50331648 extends beyond EOD, truncated loop2: p96 size 50331648 extends beyond EOD, truncated loop2: p97 size 50331648 extends beyond EOD, truncated loop2: p98 size 50331648 extends beyond EOD, truncated loop2: p99 size 50331648 extends beyond EOD, truncated loop2: p100 size 50331648 extends beyond EOD, truncated loop2: p101 size 50331648 extends beyond EOD, truncated loop2: p102 size 50331648 extends beyond EOD, truncated loop2: p103 size 50331648 extends beyond EOD, truncated loop2: p104 size 50331648 extends beyond EOD, truncated loop2: p105 size 50331648 extends beyond EOD, truncated loop2: p106 size 50331648 extends beyond EOD, truncated loop2: p107 size 50331648 extends beyond EOD, truncated loop2: p108 size 50331648 extends beyond EOD, truncated loop2: p109 size 50331648 extends beyond EOD, truncated loop2: p110 size 50331648 extends beyond EOD, truncated loop2: p111 size 50331648 extends beyond EOD, truncated loop2: p112 size 50331648 extends beyond EOD, truncated loop2: p113 size 50331648 extends beyond EOD, truncated loop2: p114 size 50331648 extends beyond EOD, truncated loop2: p115 size 50331648 extends beyond EOD, truncated loop2: p116 size 50331648 extends beyond EOD, truncated loop2: p117 size 50331648 extends beyond EOD, truncated loop2: p118 size 50331648 extends beyond EOD, truncated loop2: p119 size 50331648 extends beyond EOD, truncated loop2: p120 size 50331648 extends beyond EOD, truncated loop2: p121 size 50331648 extends beyond EOD, truncated loop2: p122 size 50331648 extends beyond EOD, truncated loop2: p123 size 50331648 extends beyond EOD, truncated loop2: p124 size 50331648 extends beyond EOD, truncated loop2: p125 size 50331648 extends beyond EOD, truncated loop2: p126 size 50331648 extends beyond EOD, truncated loop2: p127 size 50331648 extends beyond EOD, truncated loop2: p128 size 50331648 extends beyond EOD, truncated loop2: p129 size 50331648 extends beyond EOD, truncated loop2: p130 size 50331648 extends beyond EOD, truncated loop2: p131 size 50331648 extends beyond EOD, truncated loop2: p132 size 50331648 extends beyond EOD, truncated loop2: p133 size 50331648 extends beyond EOD, truncated loop2: p134 size 50331648 extends beyond EOD, truncated loop2: p135 size 50331648 extends beyond EOD, truncated loop2: p136 size 50331648 extends beyond EOD, truncated loop2: p137 size 50331648 extends beyond EOD, truncated loop2: p138 size 50331648 extends beyond EOD, truncated loop2: p139 size 50331648 extends beyond EOD, truncated loop2: p140 size 50331648 extends beyond EOD, truncated loop2: p141 size 50331648 extends beyond EOD, truncated loop2: p142 size 50331648 extends beyond EOD, truncated loop2: p143 size 50331648 extends beyond EOD, truncated loop2: p144 size 50331648 extends beyond EOD, truncated loop2: p145 size 50331648 extends beyond EOD, truncated loop2: p146 size 50331648 extends beyond EOD, truncated loop2: p147 size 50331648 extends beyond EOD, truncated loop2: p148 size 50331648 extends beyond EOD, truncated loop2: p149 size 50331648 extends beyond EOD, truncated loop2: p150 size 50331648 extends beyond EOD, truncated loop2: p151 size 50331648 extends beyond EOD, truncated loop2: p152 size 50331648 extends beyond EOD, truncated loop2: p153 size 50331648 extends beyond EOD, truncated loop2: p154 size 50331648 extends beyond EOD, truncated loop2: p155 size 50331648 extends beyond EOD, truncated loop2: p156 size 50331648 extends beyond EOD, truncated loop2: p157 size 50331648 extends beyond EOD, truncated loop2: p158 size 50331648 extends beyond EOD, truncated loop2: p159 size 50331648 extends beyond EOD, truncated loop2: p160 size 50331648 extends beyond EOD, truncated loop2: p161 size 50331648 extends beyond EOD, truncated loop2: p162 size 50331648 extends beyond EOD, truncated loop2: p163 size 50331648 extends beyond EOD, truncated loop2: p164 size 50331648 extends beyond EOD, truncated loop2: p165 size 50331648 extends beyond EOD, truncated loop2: p166 size 50331648 extends beyond EOD, truncated loop2: p167 size 50331648 extends beyond EOD, truncated loop2: p168 size 50331648 extends beyond EOD, truncated loop2: p169 size 50331648 extends beyond EOD, truncated loop2: p170 size 50331648 extends beyond EOD, truncated loop2: p171 size 50331648 extends beyond EOD, truncated loop2: p172 size 50331648 extends beyond EOD, truncated loop2: p173 size 50331648 extends beyond EOD, truncated loop2: p174 size 50331648 extends beyond EOD, truncated loop2: p175 size 50331648 extends beyond EOD, truncated loop2: p176 size 50331648 extends beyond EOD, truncated loop2: p177 size 50331648 extends beyond EOD, truncated loop2: p178 size 50331648 extends beyond EOD, truncated loop2: p179 size 50331648 extends beyond EOD, truncated loop2: p180 size 50331648 extends beyond EOD, truncated loop2: p181 size 50331648 extends beyond EOD, truncated loop2: p182 size 50331648 extends beyond EOD, truncated loop2: p183 size 50331648 extends beyond EOD, truncated loop2: p184 size 50331648 extends beyond EOD, truncated loop2: p185 size 50331648 extends beyond EOD, truncated loop2: p186 size 50331648 extends beyond EOD, truncated loop2: p187 size 50331648 extends beyond EOD, truncated loop2: p188 size 50331648 extends beyond EOD, truncated loop2: p189 size 50331648 extends beyond EOD, truncated loop2: p190 size 50331648 extends beyond EOD, truncated loop2: p191 size 50331648 extends beyond EOD, truncated loop2: p192 size 50331648 extends beyond EOD, truncated loop2: p193 size 50331648 extends beyond EOD, truncated loop2: p194 size 50331648 extends beyond EOD, truncated loop2: p195 size 50331648 extends beyond EOD, truncated loop2: p196 size 50331648 extends beyond EOD, truncated loop2: p197 size 50331648 extends beyond EOD, truncated loop2: p198 size 50331648 extends beyond EOD, truncated loop2: p199 size 50331648 extends beyond EOD, truncated loop2: p200 size 50331648 extends beyond EOD, truncated loop2: p201 size 50331648 extends beyond EOD, truncated loop2: p202 size 50331648 extends beyond EOD, truncated loop2: p203 size 50331648 extends beyond EOD, truncated loop2: p204 size 50331648 extends beyond EOD, truncated loop2: p205 size 50331648 extends beyond EOD, truncated loop2: p206 size 50331648 extends beyond EOD, truncated loop2: p207 size 50331648 extends beyond EOD, truncated loop2: p208 size 50331648 extends beyond EOD, truncated loop2: p209 size 50331648 extends beyond EOD, truncated loop2: p210 size 50331648 extends beyond EOD, truncated loop2: p211 size 50331648 extends beyond EOD, truncated loop2: p212 size 50331648 extends beyond EOD, truncated loop2: p213 size 50331648 extends beyond EOD, truncated loop2: p214 size 50331648 extends beyond EOD, truncated loop2: p215 size 50331648 extends beyond EOD, truncated loop2: p216 size 50331648 extends beyond EOD, truncated loop2: p217 size 50331648 extends beyond EOD, truncated loop2: p218 size 50331648 extends beyond EOD, truncated loop2: p219 size 50331648 extends beyond EOD, truncated loop2: p220 size 50331648 extends beyond EOD, truncated loop2: p221 size 50331648 extends beyond EOD, truncated loop2: p222 size 50331648 extends beyond EOD, truncated loop2: p223 size 50331648 extends beyond EOD, truncated loop2: p224 size 50331648 extends beyond EOD, truncated loop2: p225 size 50331648 extends beyond EOD, truncated loop2: p226 size 50331648 extends beyond EOD, truncated loop2: p227 size 50331648 extends beyond EOD, truncated loop2: p228 size 50331648 extends beyond EOD, truncated loop2: p229 size 50331648 extends beyond EOD, truncated loop2: p230 size 50331648 extends beyond EOD, truncated loop2: p231 size 50331648 extends beyond EOD, truncated loop2: p232 size 50331648 extends beyond EOD, truncated loop2: p233 size 50331648 extends beyond EOD, truncated loop2: p234 size 50331648 extends beyond EOD, truncated loop2: p235 size 50331648 extends beyond EOD, truncated loop2: p236 size 50331648 extends beyond EOD, truncated loop2: p237 size 50331648 extends beyond EOD, truncated loop2: p238 size 50331648 extends beyond EOD, truncated loop2: p239 size 50331648 extends beyond EOD, truncated loop2: p240 size 50331648 extends beyond EOD, truncated loop2: p241 size 50331648 extends beyond EOD, truncated loop2: p242 size 50331648 extends beyond EOD, truncated loop2: p243 size 50331648 extends beyond EOD, truncated loop2: p244 size 50331648 extends beyond EOD, truncated loop2: p245 size 50331648 extends beyond EOD, truncated loop2: p246 size 50331648 extends beyond EOD, truncated loop2: p247 size 50331648 extends beyond EOD, truncated loop2: p248 size 50331648 extends beyond EOD, truncated loop2: p249 size 50331648 extends beyond EOD, truncated loop2: p250 size 50331648 extends beyond EOD, truncated loop2: p251 size 50331648 extends beyond EOD, truncated loop2: p252 size 50331648 extends beyond EOD, truncated loop2: p253 size 50331648 extends beyond EOD, truncated loop2: p254 size 50331648 extends beyond EOD, truncated loop2: p255 size 50331648 extends beyond EOD, truncated