BUG: sleeping function called from invalid context at drivers/usb/core/urb.c:705 in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 5207, name: udevd preempt_count: 100, expected: 0 RCU nest depth: 0, expected: 0 1 lock held by udevd/5207: #0: ffffffff940660f8 (&fsnotify_mark_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:187 [inline] #0: ffffffff940660f8 (&fsnotify_mark_srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:294 [inline] #0: ffffffff940660f8 (&fsnotify_mark_srcu){.+.+}-{0:0}, at: fsnotify_grab_connector+0x4b/0x290 fs/notify/mark.c:806 irq event stamp: 5083107 hardirqs last enabled at (5083106): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline] hardirqs last enabled at (5083106): [] _raw_spin_unlock_irqrestore+0x52/0x80 kernel/locking/spinlock.c:194 hardirqs last disabled at (5083107): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:130 [inline] hardirqs last disabled at (5083107): [] _raw_spin_lock_irqsave+0x52/0x60 kernel/locking/spinlock.c:162 softirqs last enabled at (5083066): [] __do_softirq kernel/softirq.c:656 [inline] softirqs last enabled at (5083066): [] invoke_softirq kernel/softirq.c:496 [inline] softirqs last enabled at (5083066): [] __irq_exit_rcu+0xed/0x150 kernel/softirq.c:723 softirqs last disabled at (5083103): [] __do_softirq kernel/softirq.c:656 [inline] softirqs last disabled at (5083103): [] invoke_softirq kernel/softirq.c:496 [inline] softirqs last disabled at (5083103): [] __irq_exit_rcu+0xed/0x150 kernel/softirq.c:723 Preemption disabled at: [] softirq_handle_begin kernel/softirq.c:463 [inline] [] handle_softirqs+0xf5/0x9d0 kernel/softirq.c:598 CPU: 0 UID: 0 PID: 5207 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 __might_resched.cold+0x1ec/0x232 kernel/sched/core.c:8888 usb_kill_urb+0x8e/0x320 drivers/usb/core/urb.c:705 usb_tx_block+0x91/0x320 drivers/net/wireless/marvell/libertas/if_usb.c:429 if_usb_send_fw_pkt.isra.0+0x2e4/0x550 drivers/net/wireless/marvell/libertas/if_usb.c:366 if_usb_receive_fwload+0x5d3/0x780 drivers/net/wireless/marvell/libertas/if_usb.c:592 __usb_hcd_giveback_urb+0x38d/0x610 drivers/usb/core/hcd.c:1657 usb_hcd_giveback_urb+0x3ca/0x4a0 drivers/usb/core/hcd.c:1741 dummy_timer+0xda1/0x36c0 drivers/usb/gadget/udc/dummy_hcd.c:2005 __run_hrtimer kernel/time/hrtimer.c:1785 [inline] __hrtimer_run_queues+0x50e/0xa70 kernel/time/hrtimer.c:1849 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1866 handle_softirqs+0x1de/0x9d0 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xed/0x150 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0x8f/0xb0 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:__srcu_check_read_flavor+0x6/0x1d0 kernel/rcu/srcutree.c:765 Code: 69 7f 00 48 8b 14 24 eb 96 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 55 <8d> 46 fe 41 54 55 48 89 fd 53 89 f3 48 83 ec 08 83 e0 fd 74 0e 65 RSP: 0018:ffffc9000304f4d8 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff82345e12 RDX: ffff888118dc5880 RSI: 0000000000000001 RDI: ffffffff940660e0 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 R13: ffff88813e476e40 R14: 0000000000000000 R15: ffff88813e476e20 srcu_check_read_flavor include/linux/srcutree.h:374 [inline] srcu_read_unlock include/linux/srcu.h:485 [inline] fsnotify_grab_connector+0x111/0x290 fs/notify/mark.c:817 fsnotify_destroy_marks+0x7a/0x440 fs/notify/mark.c:1046 fsnotify_inode_delete include/linux/fsnotify.h:287 [inline] __destroy_inode+0x212/0x740 fs/inode.c:373 destroy_inode+0x91/0x1c0 fs/inode.c:395 evict+0x599/0xad0 fs/inode.c:870 iput_final fs/inode.c:1966 [inline] iput fs/inode.c:2015 [inline] iput+0x79d/0xce0 fs/inode.c:1978 dentry_unlink_inode+0x2a1/0x490 fs/dcache.c:467 __dentry_kill+0x1d0/0x600 fs/dcache.c:670 shrink_kill fs/dcache.c:1147 [inline] shrink_dentry_list+0x180/0x5e0 fs/dcache.c:1174 shrink_dcache_tree+0x100/0x570 fs/dcache.c:1620 shrink_dcache_parent fs/dcache.c:1626 [inline] d_invalidate fs/dcache.c:1708 [inline] d_invalidate+0x13a/0x290 fs/dcache.c:1693 lookup_fast+0x3f4/0x600 fs/namei.c:1881 walk_component fs/namei.c:2275 [inline] link_path_walk+0x7a8/0x1b30 fs/namei.c:2653 path_openat+0x1be/0x31a0 fs/namei.c:4832 do_file_open+0x20e/0x430 fs/namei.c:4865 do_sys_openat2+0x10d/0x1e0 fs/open.c:1366 do_sys_open fs/open.c:1372 [inline] __do_sys_openat fs/open.c:1388 [inline] __se_sys_openat fs/open.c:1383 [inline] __x64_sys_openat+0x12d/0x210 fs/open.c:1383 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2f9df0e407 Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff RSP: 002b:00007ffea9f7cd60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f2f9de20880 RCX: 00007f2f9df0e407 RDX: 0000000000080000 RSI: 00007ffea9f7cee0 RDI: ffffffffffffff9c RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 000055f3ed2677f5 R13: 000055f3ed2677f5 R14: 0000000000000001 R15: 000055f3ed282140 BUG: scheduling while atomic: udevd/5207/0x00000101 1 lock held by udevd/5207: #0: ffffffff940660f8 (&fsnotify_mark_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:187 [inline] #0: ffffffff940660f8 (&fsnotify_mark_srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:294 [inline] #0: ffffffff940660f8 (&fsnotify_mark_srcu){.+.+}-{0:0}, at: fsnotify_grab_connector+0x4b/0x290 fs/notify/mark.c:806 Modules linked in: irq event stamp: 5083107 hardirqs last enabled at (5083106): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline] hardirqs last enabled at (5083106): [] _raw_spin_unlock_irqrestore+0x52/0x80 kernel/locking/spinlock.c:194 hardirqs last disabled at (5083107): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:130 [inline] hardirqs last disabled at (5083107): [] _raw_spin_lock_irqsave+0x52/0x60 kernel/locking/spinlock.c:162 softirqs last enabled at (5083066): [] __do_softirq kernel/softirq.c:656 [inline] softirqs last enabled at (5083066): [] invoke_softirq kernel/softirq.c:496 [inline] softirqs last enabled at (5083066): [] __irq_exit_rcu+0xed/0x150 kernel/softirq.c:723 softirqs last disabled at (5083103): [] __do_softirq kernel/softirq.c:656 [inline] softirqs last disabled at (5083103): [] invoke_softirq kernel/softirq.c:496 [inline] softirqs last disabled at (5083103): [] __irq_exit_rcu+0xed/0x150 kernel/softirq.c:723 Preemption disabled at: [] softirq_handle_begin kernel/softirq.c:463 [inline] [] handle_softirqs+0xf5/0x9d0 kernel/softirq.c:598 ---------------- Code disassembly (best guess): 0: 69 7f 00 48 8b 14 24 imul $0x24148b48,0x0(%rdi),%edi 7: eb 96 jmp 0xffffff9f 9: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1) 10: 00 00 00 00 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: 90 nop 1c: 90 nop 1d: 90 nop 1e: 90 nop 1f: 90 nop 20: 90 nop 21: 90 nop 22: 90 nop 23: 90 nop 24: f3 0f 1e fa endbr64 28: 41 55 push %r13 * 2a: 8d 46 fe lea -0x2(%rsi),%eax <-- trapping instruction 2d: 41 54 push %r12 2f: 55 push %rbp 30: 48 89 fd mov %rdi,%rbp 33: 53 push %rbx 34: 89 f3 mov %esi,%ebx 36: 48 83 ec 08 sub $0x8,%rsp 3a: 83 e0 fd and $0xfffffffd,%eax 3d: 74 0e je 0x4d 3f: 65 gs