usb 2-1: USB disconnect, device number 12 scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00 ------------[ cut here ]------------ timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x6e4/0xb30 kernel/rcu/srcutree.c:706, CPU#1: kworker/1:0/24 Modules linked in: CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(lazy) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Workqueue: usb_hub_wq hub_event RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 kernel/rcu/srcutree.c:706 Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 RSP: 0018:ffffc9000019f558 EFLAGS: 00010206 RAX: 0000000000000003 RBX: ffffe8ffffc16c40 RCX: ffffc90010796000 RDX: ffffe8ffffc16dc0 RSI: ffffffff81a05d3f RDI: ffff8881026fdac0 RBP: ffff888107b17800 R08: 0000000000000005 R09: 00000000ffffffff R10: 0000000000000001 R11: 0000000000000000 R12: ffff88811bfb0300 R13: 0000000000000000 R14: ffffffff8946b338 R15: ffff88811bfb0340 FS: 0000000000000000(0000) GS:ffff8882684d7000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c378120 CR3: 000000011bc8c000 CR4: 00000000003506f0 Call Trace: blk_mq_free_tag_set+0x354/0x550 block/blk-mq.c:4987 scsi_mq_free_tags+0x16/0x20 drivers/scsi/scsi_lib.c:2167 kref_put include/linux/kref.h:65 [inline] scsi_remove_host+0x1d4/0x420 drivers/scsi/hosts.c:193 uas_disconnect+0xe6/0x120 drivers/usb/storage/uas.c:1236 usb_unbind_interface+0x1dd/0x9b0 drivers/usb/core/driver.c:460 device_remove drivers/base/dd.c:618 [inline] device_remove+0x12a/0x180 drivers/base/dd.c:610 __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1372 bus_remove_device+0x2bc/0x560 drivers/base/bus.c:664 device_del+0x376/0x9b0 drivers/base/core.c:3965 usb_disable_device+0x367/0x810 drivers/usb/core/message.c:1484 usb_disconnect+0x2e2/0x9a0 drivers/usb/core/hub.c:2355 hub_port_connect drivers/usb/core/hub.c:5425 [inline] hub_port_connect_change drivers/usb/core/hub.c:5725 [inline] port_event drivers/usb/core/hub.c:5889 [inline] hub_event+0x1d46/0x4510 drivers/usb/core/hub.c:5971 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396 process_scheduled_works kernel/workqueue.c:3479 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x69f/0xc90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245