program: sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x14) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000001140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000050000000400000000000004000000000000000000f52721d171008707e38d29be2a20d3abf93a4475058c363817d8895e28b8866e1f033d7158414e9d771243cb044ac296"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x103, 0xfffffffffffffffe}) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0xc0884113, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000000440)=ANY=[], 0x1, 0xdb1, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000001100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x86) linkat(r5, &(0x7f0000000180)='./file1\x00', r5, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r6, &(0x7f0000000140)='./file1\x00', r6, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 79.062004][ T4674] Bluetooth: hci0: command tx timeout [ 79.067764][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.070412][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 79.227853][ T5328] loop0: detected capacity change from 0 to 2048 [ 79.278865][ T5328] Alternate GPT is invalid, using primary GPT. [ 79.281441][ T5328] loop0: p1 p2 p3 [ 79.457614][ T4734] Alternate GPT is invalid, using primary GPT. [ 79.460185][ T4734] loop0: p1 p2 p3 [ 79.647761][ T5328] overlay: ./file0 is not a directory [ 79.829975][ T5338] [ 79.830994][ T5338] ====================================================== [ 79.833552][ T5338] WARNING: possible circular locking dependency detected [ 79.836106][ T5338] 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 Not tainted [ 79.838806][ T5338] ------------------------------------------------------ [ 79.841471][ T5338] udevd/5338 is trying to acquire lock: [ 79.843596][ T5338] ffff88805285b0f8 (kn->active#5){++++}-{0:0}, at: __kernfs_remove+0x336/0x570 [ 79.846824][ T5338] [ 79.846824][ T5338] but task is already holding lock: [ 79.849614][ T5338] ffff888032e88358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x17e/0x700 [ 79.853174][ T5338] [ 79.853174][ T5338] which lock already depends on the new lock. [ 79.853174][ T5338] [ 79.857118][ T5338] [ 79.857118][ T5338] the existing dependency chain (in reverse order) is: [ 79.860535][ T5338] [ 79.860535][ T5338] -> #2 (&disk->open_mutex){+.+.}-{4:4}: [ 79.863685][ T5338] lock_acquire+0x116/0x2f0 [ 79.865673][ T5338] __mutex_lock+0x1a5/0x10c0 [ 79.867741][ T5338] bdev_open+0xf7/0xcd0 [ 79.869419][ T5338] bdev_file_open_by_dev+0x1b2/0x230 [ 79.871176][ T5338] disk_scan_partitions+0x1be/0x2b0 [ 79.872916][ T5338] add_disk_fwnode+0xd26/0x1020 [ 79.874891][ T5338] pmem_attach_disk+0xd42/0x1020 [ 79.877020][ T5338] nvdimm_bus_probe+0x147/0x4e0 [ 79.879687][ T5338] really_probe+0x2b9/0xad0 [ 79.881560][ T5338] __driver_probe_device+0x1a2/0x390 [ 79.883845][ T5338] driver_probe_device+0x50/0x430 [ 79.886074][ T5338] __driver_attach+0x45f/0x710 [ 79.888083][ T5338] bus_for_each_dev+0x23e/0x2b0 [ 79.890199][ T5338] bus_add_driver+0x346/0x670 [ 79.892238][ T5338] driver_register+0x23a/0x320 [ 79.894321][ T5338] do_one_initcall+0x24a/0x940 [ 79.896374][ T5338] do_initcall_level+0x157/0x210 [ 79.898573][ T5338] do_initcalls+0x71/0xd0 [ 79.900431][ T5338] kernel_init_freeable+0x432/0x5d0 [ 79.902621][ T5338] kernel_init+0x1d/0x2b0 [ 79.904431][ T5338] ret_from_fork+0x4b/0x80 [ 79.906346][ T5338] ret_from_fork_asm+0x1a/0x30 [ 79.908360][ T5338] [ 79.908360][ T5338] -> #1 (&nvdimm_namespace_key){+.+.}-{4:4}: [ 79.911538][ T5338] lock_acquire+0x116/0x2f0 [ 79.913527][ T5338] __mutex_lock+0x1a5/0x10c0 [ 79.915600][ T5338] uevent_show+0x17d/0x340 [ 79.917607][ T5338] dev_attr_show+0x55/0xc0 [ 79.919589][ T5338] sysfs_kf_seq_show+0x32b/0x4a0 [ 79.921810][ T5338] seq_read_iter+0x461/0xda0 [ 79.923817][ T5338] vfs_read+0x9a0/0xb90 [ 79.925555][ T5338] ksys_read+0x19d/0x2d0 [ 79.927276][ T5338] do_syscall_64+0xf3/0x210 [ 79.929124][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.931466][ T5338] [ 79.931466][ T5338] -> #0 (kn->active#5){++++}-{0:0}: [ 79.934229][ T5338] validate_chain+0xa69/0x24e0 [ 79.936219][ T5338] __lock_acquire+0xad5/0xd80 [ 79.938155][ T5338] lock_acquire+0x116/0x2f0 [ 79.940005][ T5338] kernfs_drain+0x275/0x5e0 [ 79.941883][ T5338] __kernfs_remove+0x336/0x570 [ 79.943842][ T5338] kernfs_remove_by_name_ns+0xad/0x130 [ 79.945998][ T5338] device_del+0x56c/0x9b0 [ 79.947745][ T5338] drop_partition+0x11b/0x180 [ 79.949840][ T5338] bdev_disk_changed+0x2ca/0x14e0 [ 79.951977][ T5338] lo_release+0x540/0x850 [ 79.953925][ T5338] bdev_release+0x5dd/0x700 [ 79.955871][ T5338] blkdev_release+0x15/0x20 [ 79.957866][ T5338] __fput+0x3e9/0x9f0 [ 79.959691][ T5338] fput_close_sync+0x1ef/0x270 [ 79.961748][ T5338] __x64_sys_close+0x7f/0x110 [ 79.963771][ T5338] do_syscall_64+0xf3/0x210 [ 79.965763][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.968202][ T5338] [ 79.968202][ T5338] other info that might help us debug this: [ 79.968202][ T5338] [ 79.972084][ T5338] Chain exists of: [ 79.972084][ T5338] kn->active#5 --> &nvdimm_namespace_key --> &disk->open_mutex [ 79.972084][ T5338] [ 79.977258][ T5338] Possible unsafe locking scenario: [ 79.977258][ T5338] [ 79.980206][ T5338] CPU0 CPU1 [ 79.982335][ T5338] ---- ---- [ 79.984391][ T5338] lock(&disk->open_mutex); [ 79.986187][ T5338] lock(&nvdimm_namespace_key); [ 79.988923][ T5338] lock(&disk->open_mutex); [ 79.991599][ T5338] lock(kn->active#5); [ 79.993201][ T5338] [ 79.993201][ T5338] *** DEADLOCK *** [ 79.993201][ T5338] [ 79.996255][ T5338] 1 lock held by udevd/5338: [ 79.998053][ T5338] #0: ffff888032e88358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x17e/0x700 [ 80.001850][ T5338] [ 80.001850][ T5338] stack backtrace: [ 80.004181][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: udevd Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 80.004196][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.004204][ T5338] Call Trace: [ 80.004210][ T5338] [ 80.004216][ T5338] dump_stack_lvl+0x241/0x360 [ 80.004236][ T5338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.004251][ T5338] ? __pfx__printk+0x10/0x10 [ 80.004266][ T5338] ? print_lock+0x171/0x1a0 [ 80.004283][ T5338] print_circular_bug+0x2e1/0x300 [ 80.004295][ T5338] check_noncircular+0x142/0x160 [ 80.004308][ T5338] validate_chain+0xa69/0x24e0 [ 80.004323][ T5338] ? lockdep_unlock+0x8d/0x120 [ 80.004338][ T5338] __lock_acquire+0xad5/0xd80 [ 80.004353][ T5338] ? up_write+0x1ab/0x590 [ 80.004364][ T5338] lock_acquire+0x116/0x2f0 [ 80.004378][ T5338] ? __kernfs_remove+0x336/0x570 [ 80.004393][ T5338] kernfs_drain+0x275/0x5e0 [ 80.004405][ T5338] ? __kernfs_remove+0x336/0x570 [ 80.004418][ T5338] ? __pfx_kernfs_drain+0x10/0x10 [ 80.004432][ T5338] __kernfs_remove+0x336/0x570 [ 80.004445][ T5338] kernfs_remove_by_name_ns+0xad/0x130 [ 80.004457][ T5338] device_del+0x56c/0x9b0 [ 80.004473][ T5338] ? __pfx_device_del+0x10/0x10 [ 80.004484][ T5338] ? kobject_put+0x446/0x480 [ 80.004497][ T5338] drop_partition+0x11b/0x180 [ 80.004514][ T5338] bdev_disk_changed+0x2ca/0x14e0 [ 80.004524][ T5338] ? kobject_uevent_env+0x54d/0x8e0 [ 80.004541][ T5338] ? __pfx_bdev_disk_changed+0x10/0x10 [ 80.004550][ T5338] ? kobject_uevent_env+0x54d/0x8e0 [ 80.004564][ T5338] lo_release+0x540/0x850 [ 80.004578][ T5338] ? __pfx_lo_release+0x10/0x10 [ 80.004595][ T5338] ? do_raw_spin_unlock+0x58/0x8b0 [ 80.004609][ T5338] ? __pfx_lo_release+0x10/0x10 [ 80.004619][ T5338] bdev_release+0x5dd/0x700 [ 80.004635][ T5338] blkdev_release+0x15/0x20 [ 80.004649][ T5338] ? __pfx_blkdev_release+0x10/0x10 [ 80.004662][ T5338] __fput+0x3e9/0x9f0 [ 80.004676][ T5338] fput_close_sync+0x1ef/0x270 [ 80.004689][ T5338] ? __pfx_fput_close_sync+0x10/0x10 [ 80.004699][ T5338] ? do_raw_spin_unlock+0x58/0x8b0 [ 80.004712][ T5338] ? filp_flush+0x116/0x190 [ 80.004725][ T5338] __x64_sys_close+0x7f/0x110 [ 80.004737][ T5338] do_syscall_64+0xf3/0x210 [ 80.004749][ T5338] ? clear_bhb_loop+0x45/0xa0 [ 80.004760][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.004771][ T5338] RIP: 0033:0x7f04c3b5e0a8 [ 80.004782][ T5338] Code: 48 8b 05 83 9d 0d 00 64 c7 00 16 00 00 00 83 c8 ff 48 83 c4 20 5b c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 5b 48 8b 15 51 9d 0d 00 f7 d8 64 89 02 48 83 [ 80.004791][ T5338] RSP: 002b:00007ffc11b6e7a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 80.004804][ T5338] RAX: ffffffffffffffda RBX: 00007f04c3a950e0 RCX: 00007f04c3b5e0a8 [ 80.004812][ T5338] RDX: 0000562cbc5bb2d6 RSI: 00007ffc11b6dfa8 RDI: 0000000000000008 [ 80.004819][ T5338] RBP: 00005629dec5b440 R08: 0000000000000006 R09: 560cf7c3e590e39c [ 80.004827][ T5338] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000002 [ 80.004833][ T5338] R13: 00005629dec509b0 R14: 0000000000000008 R15: 00005629dec39910 [ 80.004844][ T5338]