BUG: scheduling while atomic in kernfs_remove

Status: premoderation: reported C repro on 2026/08/03 10:00
Reported-by: syzbot+287d143081695260a94e@syzkaller.appspotmail.com
First crash: 32d, last: 19h14m
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-15 BUG: scheduling while atomic in kernfs_remove 5 1 882d 882d 0/2 auto-obsoleted due to no activity on 2024/07/03 22:44

Sample crash report:
BUG: scheduling while atomic: syz-executor728/349/0x00000002
Modules linked in:
CPU: 0 UID: 0 PID: 349 Comm: syz-executor728 Not tainted syzkaller #0 3aec22cf26281034e067abc904a659b9ba9f7313
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
 dump_stack+0x19/0x20 lib/dump_stack.c:129
 __schedule_bug+0x12b/0x200 kernel/sched/core.c:6627
 schedule_debug kernel/sched/core.c:6654 [inline]
 __schedule+0xb85/0x20b0 kernel/sched/core.c:7698
 __schedule_loop kernel/sched/core.c:7958 [inline]
 schedule+0xc5/0x240 kernel/sched/core.c:7973
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8030
 rwsem_down_write_slowpath+0x5c9/0x1b60 kernel/locking/rwsem.c:1239
 __down_write_common kernel/locking/rwsem.c:1383 [inline]
 __down_write kernel/locking/rwsem.c:1392 [inline]
 down_write+0x163/0x2b0 kernel/locking/rwsem.c:1659
 kernfs_remove+0x87/0xc0 fs/kernfs/dir.c:1568
 sysfs_remove_dir+0xad/0xf0 fs/sysfs/dir.c:101
 __kobject_del+0xe2/0x2c0 lib/kobject.c:604
 kobject_del+0x49/0x80 lib/kobject.c:627
 device_del+0xba7/0xcf0 drivers/base/core.c:3901
 device_unregister drivers/base/core.c:3922 [inline]
 device_destroy+0xb0/0x100 drivers/base/core.c:4521
 android_device_destroy+0x118/0x180 drivers/usb/gadget/android_configfs_uevent.c:223
 gadgets_drop+0x1d/0x30 drivers/usb/gadget/configfs.c:2075
 client_drop_item fs/configfs/dir.c:943 [inline]
 configfs_rmdir+0x8b7/0x9b0 fs/configfs/dir.c:1546
 vfs_rmdir+0x3db/0x560 fs/namei.c:4348
 do_rmdir+0x29a/0x590 fs/namei.c:4407
 __do_sys_rmdir fs/namei.c:4426 [inline]
 __se_sys_rmdir fs/namei.c:4424 [inline]
 __x64_sys_rmdir+0x4b/0x60 fs/namei.c:4424
 x64_sys_call+0xaf7/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:85
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f67bd39f749
Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffbd20ad98 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67bd39f749
RDX: 0031672f74656764 RSI: 72fd93309063071b RDI: 0000200000000240
RBP: 0000000000007fc1 R08: 00007fffbd20adbc R09: 00007fffbd20adbc
R10: 00007fffbd20adbc R11: 0000000000000246 R12: 00007fffbd20adbc
R13: 431bde82d7b634db R14: 00007fffbd20add0 R15: 0000000000000002
 </TASK>
BUG: scheduling while atomic: syz-executor728/349/0x00000000
Modules linked in:
CPU: 0 UID: 0 PID: 349 Comm: syz-executor728 Tainted: G        W          syzkaller #0 3aec22cf26281034e067abc904a659b9ba9f7313
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
 dump_stack+0x19/0x20 lib/dump_stack.c:129
 __schedule_bug+0x12b/0x200 kernel/sched/core.c:6627
 schedule_debug kernel/sched/core.c:6654 [inline]
 __schedule+0xb85/0x20b0 kernel/sched/core.c:7698
 __schedule_loop kernel/sched/core.c:7958 [inline]
 schedule+0xc5/0x240 kernel/sched/core.c:7973
 ptrace_stop+0x528/0x8f0 kernel/signal.c:2373
 ptrace_do_notify kernel/signal.c:2410 [inline]
 ptrace_notify+0x1de/0x290 kernel/signal.c:2422
 ptrace_report_syscall include/linux/ptrace.h:415 [inline]
 ptrace_report_syscall_exit include/linux/ptrace.h:477 [inline]
 syscall_exit_work+0x84/0x150 kernel/entry/common.c:173
 syscall_exit_to_user_mode_prepare+0x21/0x40 kernel/entry/common.c:200
 __syscall_exit_to_user_mode_work kernel/entry/common.c:205 [inline]
 syscall_exit_to_user_mode+0x15/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f67bd39f749
Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffbd20ad98 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f67bd39f749
RDX: 0031672f74656764 RSI: 72fd93309063071b RDI: 0000200000000240
RBP: 0000000000007fc1 R08: 00007fffbd20adbc R09: 00007fffbd20adbc
R10: 00007fffbd20adbc R11: 0000000000000246 R12: 00007fffbd20adbc
R13: 431bde82d7b634db R14: 00007fffbd20add0 R15: 0000000000000002
 </TASK>

Crashes (12):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/27 19:40 android16-6.12 50e8de680435 69a01293 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust BUG: scheduling while atomic in kernfs_remove
2026/08/17 23:11 android16-6.12 b21af26d1628 905244d6 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust BUG: scheduling while atomic in kernfs_remove
2026/09/03 19:21 android16-6.12 1eab233d5fae 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust BUG: scheduling while atomic in kernfs_remove
2026/09/02 23:23 android16-6.12 58b61a547e48 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust BUG: scheduling while atomic in kernfs_remove
2026/09/02 20:35 android16-6.12 58b61a547e48 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust BUG: scheduling while atomic in kernfs_remove
2026/09/01 14:46 android16-6.12 77b3c87e00dc 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust BUG: scheduling while atomic in kernfs_remove
2026/08/31 02:50 android16-6.12 36bee94a7cf9 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust BUG: scheduling while atomic in kernfs_remove
2026/08/22 14:04 android16-6.12 e8c85685a629 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust BUG: scheduling while atomic in kernfs_remove
2026/08/17 22:38 android16-6.12 b21af26d1628 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust BUG: scheduling while atomic in kernfs_remove
2026/08/03 20:46 android16-6.12 5098494bc7f3 6b7c9f71 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust BUG: scheduling while atomic in kernfs_remove
2026/08/03 13:05 android16-6.12 5098494bc7f3 6b7c9f71 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust BUG: scheduling while atomic in kernfs_remove
2026/08/03 09:59 android16-6.12 5098494bc7f3 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust BUG: scheduling while atomic in kernfs_remove
* Struck through repros no longer work on HEAD.