Extracting prog: 25.792381684s
Minimizing prog: 30m58.241787089s
Simplifying prog options: 0s
Extracting C: 23.105999086s
Simplifying C: 11m59.453871891s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mount-mkdirat-openat$uhid-write$UHID_CREATE2-syz_usb_connect-write$UHID_INPUT2-open$dir-rmdir-syz_open_procfs-socket$key-sendmsg$key-mprotect-ioctl$UFFDIO_WAKE-syz_clone
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1000000330005006d04000012b0000000000000000000000600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
write$UHID_INPUT2(r2, &(0x7f0000000400)={0xc, {0xb, "11ff010000000000000000"}}, 0x11)
open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000000000/0x1000)=nil, 0x1000})
syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_find_and_get_ns
single: successfully extracted reproducer
found reproducer with 22 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mount-mkdirat-openat$uhid-write$UHID_CREATE2-syz_usb_connect-write$UHID_INPUT2-open$dir-rmdir-syz_open_procfs-socket$key-sendmsg$key-mprotect-ioctl$UFFDIO_WAKE
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1000000330005006d04000012b0000000000000000000000600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
write$UHID_INPUT2(r2, &(0x7f0000000400)={0xc, {0xb, "11ff010000000000000000"}}, 0x11)
open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000000000/0x1000)=nil, 0x1000})

program crashed: BUG: scheduling while atomic in kernfs_find_and_get_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mount-mkdirat-openat$uhid-write$UHID_CREATE2-syz_usb_connect-write$UHID_INPUT2-open$dir-rmdir-syz_open_procfs-socket$key-sendmsg$key-mprotect
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1000000330005006d04000012b0000000000000000000000600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
write$UHID_INPUT2(r2, &(0x7f0000000400)={0xc, {0xb, "11ff010000000000000000"}}, 0x11)
open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mount-mkdirat-openat$uhid-write$UHID_CREATE2-syz_usb_connect-write$UHID_INPUT2-open$dir-rmdir-syz_open_procfs-socket$key-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1000000330005006d04000012b0000000000000000000000600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
write$UHID_INPUT2(r2, &(0x7f0000000400)={0xc, {0xb, "11ff010000000000000000"}}, 0x11)
open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_find_and_get_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mount-mkdirat-openat$uhid-write$UHID_CREATE2-syz_usb_connect-write$UHID_INPUT2-open$dir-rmdir-syz_open_procfs-socket$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1000000330005006d04000012b0000000000000000000000600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
write$UHID_INPUT2(r2, &(0x7f0000000400)={0xc, {0xb, "11ff010000000000000000"}}, 0x11)
open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
socket$key(0xf, 0x3, 0x2)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mount-mkdirat-openat$uhid-write$UHID_CREATE2-syz_usb_connect-write$UHID_INPUT2-open$dir-rmdir-syz_open_procfs-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1000000330005006d04000012b0000000000000000000000600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
write$UHID_INPUT2(r2, &(0x7f0000000400)={0xc, {0xb, "11ff010000000000000000"}}, 0x11)
open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in gadgets_drop
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mount-mkdirat-openat$uhid-write$UHID_CREATE2-syz_usb_connect-write$UHID_INPUT2-open$dir-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1000000330005006d04000012b0000000000000000000000600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
write$UHID_INPUT2(r2, &(0x7f0000000400)={0xc, {0xb, "11ff010000000000000000"}}, 0x11)
open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mount-mkdirat-openat$uhid-write$UHID_CREATE2-syz_usb_connect-write$UHID_INPUT2-open$dir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1000000330005006d04000012b0000000000000000000000600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
write$UHID_INPUT2(r2, &(0x7f0000000400)={0xc, {0xb, "11ff010000000000000000"}}, 0x11)
open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mount-mkdirat-openat$uhid-write$UHID_CREATE2-syz_usb_connect-write$UHID_INPUT2-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1000000330005006d04000012b0000000000000000000000600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
write$UHID_INPUT2(r2, &(0x7f0000000400)={0xc, {0xb, "11ff010000000000000000"}}, 0x11)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_find_and_get_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mount-mkdirat-openat$uhid-write$UHID_CREATE2-syz_usb_connect-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1000000330005006d04000012b0000000000000000000000600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in gadgets_drop
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mount-mkdirat-openat$uhid-write$UHID_CREATE2-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1000000330005006d04000012b0000000000000000000000600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mount-mkdirat-openat$uhid-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mount-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mkdirat-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-syz_clone-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mmap-mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-fsconfig$FSCONFIG_SET_STRING-mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-fsopen-mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program did not crash
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program crashed: BUG: scheduling while atomic in kernfs_drain
a never seen crash title: BUG: scheduling while atomic in kernfs_drain, ignore
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program crashed: BUG: scheduling while atomic in kernfs_drain
a never seen crash title: BUG: scheduling while atomic in kernfs_drain, ignore
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program crashed: BUG: scheduling while atomic in kernfs_remove
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program crashed: BUG: scheduling while atomic in kernfs_remove
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program crashed: BUG: scheduling while atomic in kernfs_find_and_get_ns
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program crashed: BUG: scheduling while atomic in kernfs_remove
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program crashed: BUG: scheduling while atomic in kernfs_find_and_get_ns
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
program crashed: BUG: scheduling while atomic in kernfs_find_and_get_ns
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-rmdir-sendmsg$key
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

program crashed: BUG: scheduling while atomic in kernfs_remove_by_name_ns
validation run: crashed=true
reproducing took 46m9.762477074s
repro crashed as (corrupted=false):
BUG: scheduling while atomic: syz.5.30/409/0x00000002
Modules linked in:
CPU: 0 UID: 0 PID: 409 Comm: syz.5.30 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
 dump_stack+0x19/0x20 lib/dump_stack.c:129
 __schedule_bug+0x12b/0x200 kernel/sched/core.c:6629
 schedule_debug kernel/sched/core.c:6656 [inline]
 __schedule+0xb85/0x20b0 kernel/sched/core.c:7700
 __schedule_loop kernel/sched/core.c:7960 [inline]
 schedule+0xc5/0x240 kernel/sched/core.c:7975
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8032
 rwsem_down_write_slowpath+0x5c9/0x1b60 kernel/locking/rwsem.c:1239
 __down_write_common kernel/locking/rwsem.c:1383 [inline]
 __down_write kernel/locking/rwsem.c:1392 [inline]
 down_write+0x163/0x2b0 kernel/locking/rwsem.c:1659
 kernfs_remove_by_name_ns+0x8c/0x180 fs/kernfs/dir.c:1737
 kernfs_remove_by_name include/linux/kernfs.h:637 [inline]
 sysfs_unmerge_group+0xd7/0x130 fs/sysfs/group.c:399
 rpm_sysfs_remove drivers/base/power/sysfs.c:826 [inline]
 dpm_sysfs_remove+0x7b/0xd0 drivers/base/power/sysfs.c:835
 device_del+0x241/0xcf0 drivers/base/core.c:3856
 device_unregister drivers/base/core.c:3922 [inline]
 device_destroy+0xb0/0x100 drivers/base/core.c:4521
 android_device_destroy+0x118/0x180 drivers/usb/gadget/android_configfs_uevent.c:223
 gadgets_drop+0x1d/0x30 drivers/usb/gadget/configfs.c:2075
 client_drop_item fs/configfs/dir.c:943 [inline]
 configfs_rmdir+0x8ba/0x9b0 fs/configfs/dir.c:1546
 vfs_rmdir+0x3db/0x560 fs/namei.c:4348
 do_rmdir+0x29a/0x590 fs/namei.c:4407
 __do_sys_rmdir fs/namei.c:4426 [inline]
 __se_sys_rmdir fs/namei.c:4424 [inline]
 __x64_sys_rmdir+0x4b/0x60 fs/namei.c:4424
 x64_sys_call+0xaf7/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:85
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7efcde99e159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc54cba4c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
RAX: ffffffffffffffda RBX: 00007efcdec25fa0 RCX: 00007efcde99e159
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0
RBP: 00007efcdea3506b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007efcdec25fac R14: 00007efcdec25fa0 R15: 00007efcdec25fa0
 </TASK>
BUG: scheduling while atomic: syz.5.30/409/0x00000000
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 0 UID: 0 PID: 409 Comm: syz.5.30 Tainted: G        W          syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:schedule_debug kernel/sched/core.c:6639 [inline]
RIP: 0010:__schedule+0x14e/0x20b0 kernel/sched/core.c:7700
Code: 00 00 48 89 04 24 4c 8d 70 20 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 2c 6a 3a fc 4d 8b 36 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 13 6a 3a fc 49 81 3e 9d 6e ac 57
RSP: 0018:ffffc9000119f4c0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8881f6e4fa40 RCX: ffff88812a298000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffc9000119f690 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: 1ffff92000233eb0
R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff1103edca0c9
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055a57f2ac310 CR3: 000000010cf12000 CR4: 00000000003526b0
Call Trace:
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:schedule_debug kernel/sched/core.c:6639 [inline]
RIP: 0010:__schedule+0x14e/0x20b0 kernel/sched/core.c:7700
Code: 00 00 48 89 04 24 4c 8d 70 20 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 2c 6a 3a fc 4d 8b 36 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 13 6a 3a fc 49 81 3e 9d 6e ac 57
RSP: 0018:ffffc9000119f4c0 EFLAGS: 00010246

RAX: 0000000000000000 RBX: ffff8881f6e4fa40 RCX: ffff88812a298000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffc9000119f690 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: 1ffff92000233eb0
R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff1103edca0c9
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055a57f2ac310 CR3: 000000010cf12000 CR4: 00000000003526b0
----------------
Code disassembly (best guess):
   0:	00 00                	add    %al,(%rax)
   2:	48 89 04 24          	mov    %rax,(%rsp)
   6:	4c 8d 70 20          	lea    0x20(%rax),%r14
   a:	4c 89 f0             	mov    %r14,%rax
   d:	48 c1 e8 03          	shr    $0x3,%rax
  11:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)
  16:	74 08                	je     0x20
  18:	4c 89 f7             	mov    %r14,%rdi
  1b:	e8 2c 6a 3a fc       	call   0xfc3a6a4c
  20:	4d 8b 36             	mov    (%r14),%r14
  23:	4c 89 f0             	mov    %r14,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1) <-- trapping instruction
  2f:	74 08                	je     0x39
  31:	4c 89 f7             	mov    %r14,%rdi
  34:	e8 13 6a 3a fc       	call   0xfc3a6a4c
  39:	49 81 3e 9d 6e ac 57 	cmpq   $0x57ac6e9d,(%r14)

final repro crashed as (corrupted=false):
BUG: scheduling while atomic: syz.5.30/409/0x00000002
Modules linked in:
CPU: 0 UID: 0 PID: 409 Comm: syz.5.30 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
 dump_stack+0x19/0x20 lib/dump_stack.c:129
 __schedule_bug+0x12b/0x200 kernel/sched/core.c:6629
 schedule_debug kernel/sched/core.c:6656 [inline]
 __schedule+0xb85/0x20b0 kernel/sched/core.c:7700
 __schedule_loop kernel/sched/core.c:7960 [inline]
 schedule+0xc5/0x240 kernel/sched/core.c:7975
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8032
 rwsem_down_write_slowpath+0x5c9/0x1b60 kernel/locking/rwsem.c:1239
 __down_write_common kernel/locking/rwsem.c:1383 [inline]
 __down_write kernel/locking/rwsem.c:1392 [inline]
 down_write+0x163/0x2b0 kernel/locking/rwsem.c:1659
 kernfs_remove_by_name_ns+0x8c/0x180 fs/kernfs/dir.c:1737
 kernfs_remove_by_name include/linux/kernfs.h:637 [inline]
 sysfs_unmerge_group+0xd7/0x130 fs/sysfs/group.c:399
 rpm_sysfs_remove drivers/base/power/sysfs.c:826 [inline]
 dpm_sysfs_remove+0x7b/0xd0 drivers/base/power/sysfs.c:835
 device_del+0x241/0xcf0 drivers/base/core.c:3856
 device_unregister drivers/base/core.c:3922 [inline]
 device_destroy+0xb0/0x100 drivers/base/core.c:4521
 android_device_destroy+0x118/0x180 drivers/usb/gadget/android_configfs_uevent.c:223
 gadgets_drop+0x1d/0x30 drivers/usb/gadget/configfs.c:2075
 client_drop_item fs/configfs/dir.c:943 [inline]
 configfs_rmdir+0x8ba/0x9b0 fs/configfs/dir.c:1546
 vfs_rmdir+0x3db/0x560 fs/namei.c:4348
 do_rmdir+0x29a/0x590 fs/namei.c:4407
 __do_sys_rmdir fs/namei.c:4426 [inline]
 __se_sys_rmdir fs/namei.c:4424 [inline]
 __x64_sys_rmdir+0x4b/0x60 fs/namei.c:4424
 x64_sys_call+0xaf7/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:85
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7efcde99e159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc54cba4c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
RAX: ffffffffffffffda RBX: 00007efcdec25fa0 RCX: 00007efcde99e159
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0
RBP: 00007efcdea3506b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007efcdec25fac R14: 00007efcdec25fa0 R15: 00007efcdec25fa0
 </TASK>
BUG: scheduling while atomic: syz.5.30/409/0x00000000
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 0 UID: 0 PID: 409 Comm: syz.5.30 Tainted: G        W          syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:schedule_debug kernel/sched/core.c:6639 [inline]
RIP: 0010:__schedule+0x14e/0x20b0 kernel/sched/core.c:7700
Code: 00 00 48 89 04 24 4c 8d 70 20 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 2c 6a 3a fc 4d 8b 36 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 13 6a 3a fc 49 81 3e 9d 6e ac 57
RSP: 0018:ffffc9000119f4c0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8881f6e4fa40 RCX: ffff88812a298000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffc9000119f690 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: 1ffff92000233eb0
R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff1103edca0c9
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055a57f2ac310 CR3: 000000010cf12000 CR4: 00000000003526b0
Call Trace:
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:schedule_debug kernel/sched/core.c:6639 [inline]
RIP: 0010:__schedule+0x14e/0x20b0 kernel/sched/core.c:7700
Code: 00 00 48 89 04 24 4c 8d 70 20 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 2c 6a 3a fc 4d 8b 36 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 13 6a 3a fc 49 81 3e 9d 6e ac 57
RSP: 0018:ffffc9000119f4c0 EFLAGS: 00010246

RAX: 0000000000000000 RBX: ffff8881f6e4fa40 RCX: ffff88812a298000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffc9000119f690 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: 1ffff92000233eb0
R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff1103edca0c9
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055a57f2ac310 CR3: 000000010cf12000 CR4: 00000000003526b0
----------------
Code disassembly (best guess):
   0:	00 00                	add    %al,(%rax)
   2:	48 89 04 24          	mov    %rax,(%rsp)
   6:	4c 8d 70 20          	lea    0x20(%rax),%r14
   a:	4c 89 f0             	mov    %r14,%rax
   d:	48 c1 e8 03          	shr    $0x3,%rax
  11:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)
  16:	74 08                	je     0x20
  18:	4c 89 f7             	mov    %r14,%rdi
  1b:	e8 2c 6a 3a fc       	call   0xfc3a6a4c
  20:	4d 8b 36             	mov    (%r14),%r14
  23:	4c 89 f0             	mov    %r14,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1) <-- trapping instruction
  2f:	74 08                	je     0x39
  31:	4c 89 f7             	mov    %r14,%rdi
  34:	e8 13 6a 3a fc       	call   0xfc3a6a4c
  39:	49 81 3e 9d 6e ac 57 	cmpq   $0x57ac6e9d,(%r14)