Extracting prog: 1m18.544492201s
Minimizing prog: 25m25.937248103s
Simplifying prog options: 0s
Extracting C: 45.988647546s
Simplifying C: 5m43.191438607s
extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_RUN-mkdirat-open-rmdir-add_key-add_key$user-keyctl$KEYCTL_RESTRICT_KEYRING-add_key-connect$inet6-sendmsg
detailed listing:
executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000010c0)=[@textreal={0x8, 0x0}], 0x1, 0x27, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000001100)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000001180)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
open(&(0x7f0000001000)='./config/usb_gadget/g1\x00', 0x8000, 0x42)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000240)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0c70f5db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb06001b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r2)
r6 = add_key$user(&(0x7f0000000e00), &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)="9da77853643a3ff7295a3e4ade033e7d465d07bf406c0d458282b93034f15c5d696150eed125476688938abbaf8ba49de9630e7159187eaecaca00789d302c49ca5fcaa7a05e1dd173177a17a563cd46b01b50", 0x53, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000007c0)='asymmetric\x00', &(0x7f0000000f00)=@chain={'key_or_keyring:', r6})
add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, &(0x7f0000000880)="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", 0x559, r1)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
single: successfully extracted reproducer
found reproducer with 21 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_RUN-mkdirat-open-rmdir-add_key-add_key$user-keyctl$KEYCTL_RESTRICT_KEYRING-add_key-connect$inet6
detailed listing:
executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000010c0)=[@textreal={0x8, 0x0}], 0x1, 0x27, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000001100)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000001180)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
open(&(0x7f0000001000)='./config/usb_gadget/g1\x00', 0x8000, 0x42)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000240)="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", 0x559, r2)
r6 = add_key$user(&(0x7f0000000e00), &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)="9da77853643a3ff7295a3e4ade033e7d465d07bf406c0d458282b93034f15c5d696150eed125476688938abbaf8ba49de9630e7159187eaecaca00789d302c49ca5fcaa7a05e1dd173177a17a563cd46b01b50", 0x53, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000007c0)='asymmetric\x00', &(0x7f0000000f00)=@chain={'key_or_keyring:', r6})
add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, &(0x7f0000000880)="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", 0x559, r1)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6}, 0x1c)
program crashed: BUG: scheduling while atomic in kernfs_remove
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_RUN-mkdirat-open-rmdir-add_key-add_key$user-keyctl$KEYCTL_RESTRICT_KEYRING-add_key
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000010c0)=[@textreal={0x8, 0x0}], 0x1, 0x27, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000001100)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000001180)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
open(&(0x7f0000001000)='./config/usb_gadget/g1\x00', 0x8000, 0x42)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000240)="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", 0x559, r1)
r5 = add_key$user(&(0x7f0000000e00), &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)="9da77853643a3ff7295a3e4ade033e7d465d07bf406c0d458282b93034f15c5d696150eed125476688938abbaf8ba49de9630e7159187eaecaca00789d302c49ca5fcaa7a05e1dd173177a17a563cd46b01b50", 0x53, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000007c0)='asymmetric\x00', &(0x7f0000000f00)=@chain={'key_or_keyring:', r5})
add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, &(0x7f0000000880)="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", 0x559, r0)
program crashed: BUG: scheduling while atomic in kernfs_drain
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_RUN-mkdirat-open-rmdir-add_key-add_key$user-keyctl$KEYCTL_RESTRICT_KEYRING
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000010c0)=[@textreal={0x8, 0x0}], 0x1, 0x27, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000001100)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000001180)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
open(&(0x7f0000001000)='./config/usb_gadget/g1\x00', 0x8000, 0x42)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000240)="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", 0x559, r1)
r5 = add_key$user(&(0x7f0000000e00), &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)="9da77853643a3ff7295a3e4ade033e7d465d07bf406c0d458282b93034f15c5d696150eed125476688938abbaf8ba49de9630e7159187eaecaca00789d302c49ca5fcaa7a05e1dd173177a17a563cd46b01b50", 0x53, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000007c0)='asymmetric\x00', &(0x7f0000000f00)=@chain={'key_or_keyring:', r5})
program crashed: BUG: scheduling while atomic in kernfs_remove
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_RUN-mkdirat-open-rmdir-add_key-add_key$user
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r0 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000010c0)=[@textreal={0x8, 0x0}], 0x1, 0x27, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000001100)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000001180)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
open(&(0x7f0000001000)='./config/usb_gadget/g1\x00', 0x8000, 0x42)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000240)="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", 0x559, r0)
add_key$user(&(0x7f0000000e00), &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)="9da77853643a3ff7295a3e4ade033e7d465d07bf406c0d458282b93034f15c5d696150eed125476688938abbaf8ba49de9630e7159187eaecaca00789d302c49ca5fcaa7a05e1dd173177a17a563cd46b01b50", 0x53, 0xffffffffffffffff)
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_RUN-mkdirat-open-rmdir-add_key
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r0 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000010c0)=[@textreal={0x8, 0x0}], 0x1, 0x27, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000001100)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000001180)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
open(&(0x7f0000001000)='./config/usb_gadget/g1\x00', 0x8000, 0x42)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000240)="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", 0x559, r0)
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_RUN-mkdirat-open-rmdir
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000010c0)=[@textreal={0x8, 0x0}], 0x1, 0x27, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000001100)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001180)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
open(&(0x7f0000001000)='./config/usb_gadget/g1\x00', 0x8000, 0x42)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_drain
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_RUN-mkdirat-open
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000010c0)=[@textreal={0x8, 0x0}], 0x1, 0x27, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000001100)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001180)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
open(&(0x7f0000001000)='./config/usb_gadget/g1\x00', 0x8000, 0x42)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_RUN-mkdirat-rmdir
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000010c0)=[@textreal={0x8, 0x0}], 0x1, 0x27, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000001100)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001180)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_RUN-rmdir
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000010c0)=[@textreal={0x8, 0x0}], 0x1, 0x27, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000001100)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001180)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS-ioctl$KVM_SET_NESTED_STATE-mkdirat-rmdir
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000010c0)=[@textreal={0x8, 0x0}], 0x1, 0x27, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000001100)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001180)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS-mkdirat-rmdir
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000010c0)=[@textreal={0x8, 0x0}], 0x1, 0x27, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000001100)={0xa3, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-mkdirat-rmdir
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000010c0)=[@textreal={0x8, 0x0}], 0x1, 0x27, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mkdirat-rmdir
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_remove
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-mkdirat-rmdir
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-openat$kvm-mkdirat-rmdir
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x240, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_drain
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mount-mkdirat-rmdir
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mkdirat-mkdirat-rmdir
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-add_key-mount-mkdirat-rmdir
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-add_key$keyring-mkdirat-mount-mkdirat-rmdir
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-rmdir
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0x8000000003c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_remove
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_remove
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', 0x0, 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
program did not crash
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
program crashed: BUG: scheduling while atomic in kernfs_drain
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
program crashed: BUG: scheduling while atomic in kernfs_remove
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
program crashed: BUG: scheduling while atomic in kernfs_drain
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./config\x00', &(0x7f0000000f80)='configfs\x00', 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000001040)='./config/usb_gadget/g1\x00')
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
validation run: crashed=true
reproducing took 35m52.243545945s
repro crashed as (corrupted=false):
BUG: scheduling while atomic: syz.2.21/385/0x00000002
Modules linked in:
CPU: 0 UID: 0 PID: 385 Comm: syz.2.21 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
__dump_stack+0x21/0x30 lib/dump_stack.c:94
dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
dump_stack+0x19/0x20 lib/dump_stack.c:129
__schedule_bug+0x12b/0x200 kernel/sched/core.c:6629
schedule_debug kernel/sched/core.c:6656 [inline]
__schedule+0x176d/0x23d0 kernel/sched/core.c:7700
__schedule_loop kernel/sched/core.c:7960 [inline]
schedule+0xc5/0x240 kernel/sched/core.c:7975
schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8032
rwsem_down_write_slowpath+0x5c9/0x1b60 kernel/locking/rwsem.c:1239
__down_write_common kernel/locking/rwsem.c:1383 [inline]
__down_write kernel/locking/rwsem.c:1392 [inline]
down_write+0x163/0x2b0 kernel/locking/rwsem.c:1659
kernfs_remove_by_name_ns+0x8c/0x180 fs/kernfs/dir.c:1737
kernfs_remove_by_name include/linux/kernfs.h:637 [inline]
remove_files fs/sysfs/group.c:28 [inline]
sysfs_remove_group+0x108/0x250 fs/sysfs/group.c:319
dpm_sysfs_remove+0x99/0xd0 drivers/base/power/sysfs.c:837
device_del+0x241/0xcf0 drivers/base/core.c:3856
device_unregister drivers/base/core.c:3922 [inline]
device_destroy+0xb0/0x100 drivers/base/core.c:4521
android_device_destroy+0x118/0x180 drivers/usb/gadget/android_configfs_uevent.c:223
gadgets_drop+0x1d/0x30 drivers/usb/gadget/configfs.c:2075
client_drop_item fs/configfs/dir.c:943 [inline]
configfs_rmdir+0x8b7/0x9b0 fs/configfs/dir.c:1546
vfs_rmdir+0x3db/0x560 fs/namei.c:4348
do_rmdir+0x29a/0x590 fs/namei.c:4407
__do_sys_rmdir fs/namei.c:4426 [inline]
__se_sys_rmdir fs/namei.c:4424 [inline]
__x64_sys_rmdir+0x4b/0x60 fs/namei.c:4424
x64_sys_call+0xaf7/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:85
do_syscall_x64 arch/x86/entry/common.c:47 [inline]
do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f774279e1d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd81ba9308 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
RAX: ffffffffffffffda RBX: 00007f7742a25fa0 RCX: 00007f774279e1d9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001040
RBP: 00007f7742835888 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f7742a25fac R14: 00007f7742a25fa0 R15: 00007f7742a25fa0
BUG: scheduling while atomic: syz.2.21/385/0x00000000
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 0 UID: 0 PID: 385 Comm: syz.2.21 Tainted: G W syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:schedule_debug kernel/sched/core.c:6639 [inline]
RIP: 0010:__schedule+0x155/0x23d0 kernel/sched/core.c:7700
Code: 00 00 48 89 04 24 4c 8d 70 20 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 45 fe 39 fc 4d 8b 36 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 2c fe 39 fc 49 81 3e 9d 6e ac 57
RSP: 0018:ffffc90001b0f4c0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8881f6c4fd40 RCX: ffff888114e54f00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffc90001b0f690 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0f9f334 R12: 1ffff92000361eb0
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000001040 CR3: 0000000129538000 CR4: 00000000003526b0
Call Trace:
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:schedule_debug kernel/sched/core.c:6639 [inline]
RIP: 0010:__schedule+0x155/0x23d0 kernel/sched/core.c:7700
Code: 00 00 48 89 04 24 4c 8d 70 20 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 45 fe 39 fc 4d 8b 36 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 2c fe 39 fc 49 81 3e 9d 6e ac 57
RSP: 0018:ffffc90001b0f4c0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8881f6c4fd40 RCX: ffff888114e54f00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffc90001b0f690 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0f9f334 R12: 1ffff92000361eb0
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000001040 CR3: 0000000129538000 CR4: 00000000003526b0
----------------
Code disassembly (best guess):
0: 00 00 add %al,(%rax)
2: 48 89 04 24 mov %rax,(%rsp)
6: 4c 8d 70 20 lea 0x20(%rax),%r14
a: 4c 89 f0 mov %r14,%rax
d: 48 c1 e8 03 shr $0x3,%rax
11: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1)
16: 74 08 je 0x20
18: 4c 89 f7 mov %r14,%rdi
1b: e8 45 fe 39 fc call 0xfc39fe65
20: 4d 8b 36 mov (%r14),%r14
23: 4c 89 f0 mov %r14,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) <-- trapping instruction
2f: 74 08 je 0x39
31: 4c 89 f7 mov %r14,%rdi
34: e8 2c fe 39 fc call 0xfc39fe65
39: 49 81 3e 9d 6e ac 57 cmpq $0x57ac6e9d,(%r14)
final repro crashed as (corrupted=false):
BUG: scheduling while atomic: syz.2.21/385/0x00000002
Modules linked in:
CPU: 0 UID: 0 PID: 385 Comm: syz.2.21 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
__dump_stack+0x21/0x30 lib/dump_stack.c:94
dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
dump_stack+0x19/0x20 lib/dump_stack.c:129
__schedule_bug+0x12b/0x200 kernel/sched/core.c:6629
schedule_debug kernel/sched/core.c:6656 [inline]
__schedule+0x176d/0x23d0 kernel/sched/core.c:7700
__schedule_loop kernel/sched/core.c:7960 [inline]
schedule+0xc5/0x240 kernel/sched/core.c:7975
schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8032
rwsem_down_write_slowpath+0x5c9/0x1b60 kernel/locking/rwsem.c:1239
__down_write_common kernel/locking/rwsem.c:1383 [inline]
__down_write kernel/locking/rwsem.c:1392 [inline]
down_write+0x163/0x2b0 kernel/locking/rwsem.c:1659
kernfs_remove_by_name_ns+0x8c/0x180 fs/kernfs/dir.c:1737
kernfs_remove_by_name include/linux/kernfs.h:637 [inline]
remove_files fs/sysfs/group.c:28 [inline]
sysfs_remove_group+0x108/0x250 fs/sysfs/group.c:319
dpm_sysfs_remove+0x99/0xd0 drivers/base/power/sysfs.c:837
device_del+0x241/0xcf0 drivers/base/core.c:3856
device_unregister drivers/base/core.c:3922 [inline]
device_destroy+0xb0/0x100 drivers/base/core.c:4521
android_device_destroy+0x118/0x180 drivers/usb/gadget/android_configfs_uevent.c:223
gadgets_drop+0x1d/0x30 drivers/usb/gadget/configfs.c:2075
client_drop_item fs/configfs/dir.c:943 [inline]
configfs_rmdir+0x8b7/0x9b0 fs/configfs/dir.c:1546
vfs_rmdir+0x3db/0x560 fs/namei.c:4348
do_rmdir+0x29a/0x590 fs/namei.c:4407
__do_sys_rmdir fs/namei.c:4426 [inline]
__se_sys_rmdir fs/namei.c:4424 [inline]
__x64_sys_rmdir+0x4b/0x60 fs/namei.c:4424
x64_sys_call+0xaf7/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:85
do_syscall_x64 arch/x86/entry/common.c:47 [inline]
do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f774279e1d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd81ba9308 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
RAX: ffffffffffffffda RBX: 00007f7742a25fa0 RCX: 00007f774279e1d9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001040
RBP: 00007f7742835888 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f7742a25fac R14: 00007f7742a25fa0 R15: 00007f7742a25fa0
BUG: scheduling while atomic: syz.2.21/385/0x00000000
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 0 UID: 0 PID: 385 Comm: syz.2.21 Tainted: G W syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:schedule_debug kernel/sched/core.c:6639 [inline]
RIP: 0010:__schedule+0x155/0x23d0 kernel/sched/core.c:7700
Code: 00 00 48 89 04 24 4c 8d 70 20 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 45 fe 39 fc 4d 8b 36 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 2c fe 39 fc 49 81 3e 9d 6e ac 57
RSP: 0018:ffffc90001b0f4c0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8881f6c4fd40 RCX: ffff888114e54f00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffc90001b0f690 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0f9f334 R12: 1ffff92000361eb0
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000001040 CR3: 0000000129538000 CR4: 00000000003526b0
Call Trace:
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:schedule_debug kernel/sched/core.c:6639 [inline]
RIP: 0010:__schedule+0x155/0x23d0 kernel/sched/core.c:7700
Code: 00 00 48 89 04 24 4c 8d 70 20 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 45 fe 39 fc 4d 8b 36 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 2c fe 39 fc 49 81 3e 9d 6e ac 57
RSP: 0018:ffffc90001b0f4c0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8881f6c4fd40 RCX: ffff888114e54f00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffc90001b0f690 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0f9f334 R12: 1ffff92000361eb0
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000001040 CR3: 0000000129538000 CR4: 00000000003526b0
----------------
Code disassembly (best guess):
0: 00 00 add %al,(%rax)
2: 48 89 04 24 mov %rax,(%rsp)
6: 4c 8d 70 20 lea 0x20(%rax),%r14
a: 4c 89 f0 mov %r14,%rax
d: 48 c1 e8 03 shr $0x3,%rax
11: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1)
16: 74 08 je 0x20
18: 4c 89 f7 mov %r14,%rdi
1b: e8 45 fe 39 fc call 0xfc39fe65
20: 4d 8b 36 mov (%r14),%r14
23: 4c 89 f0 mov %r14,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) <-- trapping instruction
2f: 74 08 je 0x39
31: 4c 89 f7 mov %r14,%rdi
34: e8 2c fe 39 fc call 0xfc39fe65
39: 49 81 3e 9d 6e ac 57 cmpq $0x57ac6e9d,(%r14)