usb 5-1: USB disconnect, device number 61 ------------[ cut here ]------------ timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x6e4/0xb30 kernel/rcu/srcutree.c:706, CPU#0: kworker/0:1/10 Modules linked in: CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: usb_hub_wq hub_event RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 kernel/rcu/srcutree.c:706 Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 RSP: 0018:ffffc900001c7560 EFLAGS: 00010206 RAX: 0000000000000003 RBX: ffffe8ffac0463c0 RCX: 0000000000000000 RDX: ffffe8ffac046540 RSI: ffffffff81f6101f RDI: ffff88801cb0a580 RBP: ffff888013764000 R08: 0000000000000005 R09: 00000000ffffffff R10: 0000000000000001 R11: 0000000000000000 R12: ffff888057140300 R13: 0000000000000000 R14: ffffffff8e6b80b0 R15: ffff888057140340 FS: 0000000000000000(0000) GS:ffff888096968000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002d463fff CR3: 0000000029ba3000 CR4: 0000000000352ef0 Call Trace: blk_mq_free_tag_set+0x354/0x550 block/blk-mq.c:4976 scsi_mq_free_tags+0x16/0x20 drivers/scsi/scsi_lib.c:2168 kref_put include/linux/kref.h:65 [inline] scsi_remove_host+0x18b/0x320 drivers/scsi/hosts.c:192 mts_usb_disconnect+0x94/0x150 drivers/usb/image/microtek.c:757 usb_unbind_interface+0x1dd/0x9e0 drivers/usb/core/driver.c:461 device_remove drivers/base/dd.c:618 [inline] device_remove+0x12a/0x180 drivers/base/dd.c:610 __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1372 bus_remove_device+0x2bc/0x560 drivers/base/bus.c:664 device_del+0x376/0x9b0 drivers/base/core.c:3965 usb_disable_device+0x367/0x810 drivers/usb/core/message.c:1478 usb_disconnect+0x2e2/0x9a0 drivers/usb/core/hub.c:2350 hub_port_connect drivers/usb/core/hub.c:5420 [inline] hub_port_connect_change drivers/usb/core/hub.c:5720 [inline] port_event drivers/usb/core/hub.c:5884 [inline] hub_event+0x1bb1/0x4420 drivers/usb/core/hub.c:5966 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3387 process_scheduled_works kernel/workqueue.c:3470 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3551 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245