BUG: scheduling while atomic: syz.4.363/1507/0x00000002 Modules linked in: CPU: 1 UID: 0 PID: 1507 Comm: syz.4.363 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 __schedule_bug+0x12b/0x200 kernel/sched/core.c:6690 schedule_debug kernel/sched/core.c:6717 [inline] __schedule+0x1752/0x2380 kernel/sched/core.c:7788 __schedule_loop kernel/sched/core.c:8046 [inline] schedule+0xc1/0x170 kernel/sched/core.c:8061 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8118 rwsem_down_read_slowpath+0x88c/0x14c0 kernel/locking/rwsem.c:1136 __down_read_common kernel/locking/rwsem.c:1317 [inline] __down_read kernel/locking/rwsem.c:1330 [inline] down_read+0x95/0xe0 kernel/locking/rwsem.c:1607 kernfs_find_and_get_ns+0x76/0x130 fs/kernfs/dir.c:924 kernfs_find_and_get include/linux/kernfs.h:616 [inline] sysfs_unmerge_group+0x66/0x130 fs/sysfs/group.c:396 dpm_sysfs_remove+0x64/0xd0 drivers/base/power/sysfs.c:833 device_del+0x241/0xcf0 drivers/base/core.c:3856 device_unregister drivers/base/core.c:3922 [inline] device_destroy+0xb0/0x100 drivers/base/core.c:4521 android_device_destroy+0x118/0x180 drivers/usb/gadget/android_configfs_uevent.c:223 gadgets_drop+0x1d/0x30 drivers/usb/gadget/configfs.c:2075 client_drop_item fs/configfs/dir.c:943 [inline] configfs_rmdir+0x8ba/0x9b0 fs/configfs/dir.c:1546 vfs_rmdir+0x3db/0x560 fs/namei.c:4348 do_rmdir+0x29a/0x590 fs/namei.c:4407 __do_sys_rmdir fs/namei.c:4426 [inline] __se_sys_rmdir fs/namei.c:4424 [inline] __x64_sys_rmdir+0x4b/0x60 fs/namei.c:4424 x64_sys_call+0xaf7/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:85 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f803299fb19 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f803384c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 RAX: ffffffffffffffda RBX: 00007f8032c26270 RCX: 00007f803299fb19 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 RBP: 00007f8032a37b70 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f8032c26308 R14: 00007f8032c26270 R15: 00007fff1c32b8f8 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 1507 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 lib/stackdepot.c:633 Modules linked in: CPU: 0 UID: 0 PID: 1507 Comm: syz.4.363 Tainted: G W syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 RIP: 0010:stack_depot_save_flags+0x266/0x800 lib/stackdepot.c:635 Code: 48 83 3d b4 5e 59 06 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 0c b1 19 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 RSP: 0018:ffffc90006dff3c0 EFLAGS: 00010206 RAX: 000000007fffffff RBX: ffff8881f559a100 RCX: 000000000059a100 RDX: ffff8881f559a100 RSI: 0000000000000001 RDI: 00000000a4525afb RBP: ffffc90006dff420 R08: 00000000359b20d0 R09: 000000002d039019 R10: 0000000000000010 R11: ffffffff817790f0 R12: 0000000047d59a10 R13: 0000000000000000 R14: ffffc90006dff480 R15: 0000000000000010 FS: 00007f803384c6c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f803382aff8 CR3: 000000011937c000 CR4: 00000000003526b0 Call Trace: stack_depot_save+0x12/0x20 lib/stackdepot.c:686 save_stack+0x133/0x240 mm/page_owner.c:175 __set_page_owner+0x8e/0x600 mm/page_owner.c:338 set_page_owner include/linux/page_owner.h:35 [inline] post_alloc_hook+0x37d/0x3b0 mm/page_alloc.c:1864 prep_new_page+0x2d/0x180 mm/page_alloc.c:1872 get_page_from_freelist+0x4aea/0x4ba0 mm/page_alloc.c:3949 __alloc_pages_noprof+0x35a/0x7e0 mm/page_alloc.c:5316 alloc_slab_page+0x6b/0x1e0 mm/slub.c:-1 allocate_slab+0x69/0x430 mm/slub.c:2687 new_slab mm/slub.c:2741 [inline] ___slab_alloc+0x591/0x8c0 mm/slub.c:3934 __slab_alloc mm/slub.c:4025 [inline] __slab_alloc_node mm/slub.c:4078 [inline] slab_alloc_node mm/slub.c:4241 [inline] kmem_cache_alloc_lru_noprof+0x295/0x410 mm/slub.c:4274 __d_alloc+0x42/0x8c0 fs/dcache.c:1636 d_alloc+0x4c/0x1c0 fs/dcache.c:1716 lookup_one_qstr_excl+0xcf/0x280 fs/namei.c:1637 do_rmdir+0x1d2/0x590 fs/namei.c:4396 __do_sys_rmdir fs/namei.c:4426 [inline] __se_sys_rmdir fs/namei.c:4424 [inline] __x64_sys_rmdir+0x4b/0x60 fs/namei.c:4424 x64_sys_call+0xaf7/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:85 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f803299fb19 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f803384c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 RAX: ffffffffffffffda RBX: 00007f8032c26270 RCX: 00007f803299fb19 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 RBP: 00007f8032a37b70 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f8032c26308 R14: 00007f8032c26270 R15: 00007fff1c32b8f8 ---[ end trace 0000000000000000 ]--- BUG: scheduling while atomic: syz.4.363/1507/0x00000000 Modules linked in: CPU: 0 UID: 0 PID: 1507 Comm: syz.4.363 Tainted: G W syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 __schedule_bug+0x12b/0x200 kernel/sched/core.c:6690 schedule_debug kernel/sched/core.c:6717 [inline] __schedule+0x1752/0x2380 kernel/sched/core.c:7788 __schedule_loop kernel/sched/core.c:8046 [inline] schedule+0xc1/0x170 kernel/sched/core.c:8061 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8118 rwsem_down_write_slowpath+0x5cb/0x1b60 kernel/locking/rwsem.c:1239 __down_write_common kernel/locking/rwsem.c:1383 [inline] __down_write kernel/locking/rwsem.c:1392 [inline] down_write+0x163/0x2b0 kernel/locking/rwsem.c:1659 inode_lock_nested include/linux/fs.h:852 [inline] do_rmdir+0x1c1/0x590 fs/namei.c:4395 __do_sys_rmdir fs/namei.c:4426 [inline] __se_sys_rmdir fs/namei.c:4424 [inline] __x64_sys_rmdir+0x4b/0x60 fs/namei.c:4424 x64_sys_call+0xaf7/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:85 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f803299fb19 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f803384c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 RAX: ffffffffffffffda RBX: 00007f8032c26270 RCX: 00007f803299fb19 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 RBP: 00007f8032a37b70 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f8032c26308 R14: 00007f8032c26270 R15: 00007fff1c32b8f8