BUG: workqueue leaked atomic, lock or RCU: kworker/0:0[8]
preempt=0x00000101 lock=7->0 RCU=0->0 workfn=usb_giveback_urb_bh
INFO: lockdep is turned off.
CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.13.0-rc4-syzkaller-00080-gf1a2241778d9 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: usb_hub_wq hub_event
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
process_one_work+0x11e6/0x1ba0 kernel/workqueue.c:3250
process_scheduled_works kernel/workqueue.c:3310 [inline]
bh_worker+0x5a4/0x8a0 kernel/workqueue.c:3570
workqueue_softirq_action+0x12c/0x190 kernel/workqueue.c:3597
tasklet_hi_action+0x17/0x70 kernel/softirq.c:842
handle_softirqs+0x206/0x8d0 kernel/softirq.c:561
__do_softirq kernel/softirq.c:595 [inline]
invoke_softirq kernel/softirq.c:435 [inline]
__irq_exit_rcu+0xfa/0x160 kernel/softirq.c:662
irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:194
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 f4 44 fa 48 89 df e8 2e 74 45 fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 8d 39 fa 65 8b 05 86 76 10 79 85 c0 74 16 5b
RSP: 0018:ffffc9000008f278 EFLAGS: 00000246
RAX: 0000000000000006 RBX: ffffffff899ddba0 RCX: 1ffffffff1f5c146
RDX: 0000000000000000 RSI: ffffffff8727fee0 RDI: ffffffff874735a0
RBP: 0000000000000283 R08: 0000000000000001 R09: fffffbfff1f57bcf
R10: ffffffff8fabde7f R11: 0000000000000004 R12: 1ffff92000011e57
R13: ffff88810afb323c R14: ffff88810972c100 R15: ffff88810972c118
spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]
usb_hcd_poll_rh_status+0x572/0x7f0 drivers/usb/core/hcd.c:762
dummy_hub_control+0x57d/0x1f00 drivers/usb/gadget/udc/dummy_hcd.c:2369
rh_call_control drivers/usb/core/hcd.c:656 [inline]
rh_urb_enqueue drivers/usb/core/hcd.c:821 [inline]
usb_hcd_submit_urb+0x16b6/0x2090 drivers/usb/core/hcd.c:1529
usb_submit_urb+0x87c/0x1730 drivers/usb/core/urb.c:581
usb_start_wait_urb+0x103/0x4c0 drivers/usb/core/message.c:59
usb_internal_control_msg drivers/usb/core/message.c:103 [inline]
usb_control_msg+0x327/0x4b0 drivers/usb/core/message.c:154
get_port_status drivers/usb/core/hub.c:604 [inline]
hub_ext_port_status+0x14e/0x670 drivers/usb/core/hub.c:621
usb_hub_port_status drivers/usb/core/hub.c:671 [inline]
hub_port_wait_reset drivers/usb/core/hub.c:2928 [inline]
hub_port_reset+0xa62/0x1e60 drivers/usb/core/hub.c:3047
hub_port_init+0x1f9/0x3ab0 drivers/usb/core/hub.c:4893
hub_port_connect drivers/usb/core/hub.c:5450 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
port_event drivers/usb/core/hub.c:5821 [inline]
hub_event+0x2c16/0x4f40 drivers/usb/core/hub.c:5903
process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
process_scheduled_works kernel/workqueue.c:3310 [inline]
worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
----------------
Code disassembly (best guess):
0: f5 cmc
1: 53 push %rbx
2: 48 8b 74 24 10 mov 0x10(%rsp),%rsi
7: 48 89 fb mov %rdi,%rbx
a: 48 83 c7 18 add $0x18,%rdi
e: e8 e6 f4 44 fa call 0xfa44f4f9
13: 48 89 df mov %rbx,%rdi
16: e8 2e 74 45 fa call 0xfa457449
1b: f7 c5 00 02 00 00 test $0x200,%ebp
21: 75 23 jne 0x46
23: 9c pushf
24: 58 pop %rax
25: f6 c4 02 test $0x2,%ah
28: 75 37 jne 0x61
* 2a: bf 01 00 00 00 mov $0x1,%edi <-- trapping instruction
2f: e8 85 8d 39 fa call 0xfa398db9
34: 65 8b 05 86 76 10 79 mov %gs:0x79107686(%rip),%eax # 0x791076c1
3b: 85 c0 test %eax,%eax
3d: 74 16 je 0x55
3f: 5b pop %rbx