BUG: workqueue leaked atomic, lock or RCU: kworker/0:5[5237]
preempt=0x00000101 lock=5->0 RCU=0->0 workfn=usb_giveback_urb_bh
INFO: lockdep is turned off.
CPU: 0 UID: 0 PID: 5237 Comm: kworker/0:5 Not tainted 6.13.0-rc7-syzkaller-g26a6cc10f19a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: usb_hub_wq hub_event
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
process_one_work+0x11e6/0x1ba0 kernel/workqueue.c:3257
process_scheduled_works kernel/workqueue.c:3317 [inline]
bh_worker+0x5a4/0x8a0 kernel/workqueue.c:3577
workqueue_softirq_action+0x12c/0x190 kernel/workqueue.c:3604
tasklet_action+0x14/0x70 kernel/softirq.c:836
handle_softirqs+0x206/0x8d0 kernel/softirq.c:561
__do_softirq kernel/softirq.c:595 [inline]
invoke_softirq kernel/softirq.c:435 [inline]
__irq_exit_rcu+0xfa/0x160 kernel/softirq.c:662
irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:194
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 86 d4 44 fa 48 89 df e8 de 53 45 fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 6d 39 fa 65 8b 05 66 54 10 79 85 c0 74 16 5b
RSP: 0018:ffffc90001f5f358 EFLAGS: 00000246
RAX: 0000000000000002 RBX: ffffffff9358cf80 RCX: 1ffffffff1f5fa67
RDX: 0000000000000000 RSI: ffffffff8727fee0 RDI: ffffffff87473460
RBP: 0000000000000202 R08: 0000000000000001 R09: fffffbfff1f57bd8
R10: ffffffff8fabdec7 R11: 0000000000000005 R12: 0000000000000001
R13: ffffc90001f5f5b0 R14: ffffffff872aa620 R15: 1ffff920003ebe72
debug_object_assert_init+0x1c7/0x2f0 lib/debugobjects.c:1009
debug_timer_assert_init kernel/time/timer.c:845 [inline]
debug_assert_init kernel/time/timer.c:890 [inline]
__mod_timer+0xae/0xdc0 kernel/time/timer.c:1071
add_timer+0x62/0x90 kernel/time/timer.c:1295
schedule_timeout+0x11f/0x280 kernel/time/sleep_timeout.c:98
do_wait_for_common kernel/sched/completion.c:95 [inline]
__wait_for_common+0x3e1/0x600 kernel/sched/completion.c:116
usb_start_wait_urb+0x148/0x4c0 drivers/usb/core/message.c:64
usb_internal_control_msg drivers/usb/core/message.c:103 [inline]
usb_control_msg+0x327/0x4b0 drivers/usb/core/message.c:154
usb_clear_port_feature drivers/usb/core/hub.c:453 [inline]
hub_port_disable+0x1d0/0x610 drivers/usb/core/hub.c:4609
hub_port_init+0x846/0x3ab0 drivers/usb/core/hub.c:5179
hub_port_connect drivers/usb/core/hub.c:5452 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5663 [inline]
port_event drivers/usb/core/hub.c:5823 [inline]
hub_event+0x2c16/0x4f40 drivers/usb/core/hub.c:5905
process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
process_scheduled_works kernel/workqueue.c:3317 [inline]
worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
----------------
Code disassembly (best guess):
0: f5 cmc
1: 53 push %rbx
2: 48 8b 74 24 10 mov 0x10(%rsp),%rsi
7: 48 89 fb mov %rdi,%rbx
a: 48 83 c7 18 add $0x18,%rdi
e: e8 86 d4 44 fa call 0xfa44d499
13: 48 89 df mov %rbx,%rdi
16: e8 de 53 45 fa call 0xfa4553f9
1b: f7 c5 00 02 00 00 test $0x200,%ebp
21: 75 23 jne 0x46
23: 9c pushf
24: 58 pop %rax
25: f6 c4 02 test $0x2,%ah
28: 75 37 jne 0x61
* 2a: bf 01 00 00 00 mov $0x1,%edi <-- trapping instruction
2f: e8 25 6d 39 fa call 0xfa396d59
34: 65 8b 05 66 54 10 79 mov %gs:0x79105466(%rip),%eax # 0x791054a1
3b: 85 c0 test %eax,%eax
3d: 74 16 je 0x55
3f: 5b pop %rbx