[v5.15] WARNING in smsusb_start_streaming

1 view

Skip to first unread message

syzbot

unread,

Jul 16, 2023, 7:43:59 PM7/16/23

to syzkaller...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: d54cfc420586 Linux 5.15.120
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=16ca7a8ea80000
kernel config: https://syzkaller.appspot.com/x/.config?x=1cbb66d8f24dbb30
dashboard link: https://syzkaller.appspot.com/bug?extid=f015a8839836ec50ece7
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
userspace arch: arm64
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=170be742a80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=155ea124a80000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/a7edb50fe106/disk-d54cfc42.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/6d9892e76c6e/vmlinux-d54cfc42.xz
kernel image: https://storage.googleapis.com/syzbot-assets/0fd11af6d33e/Image-d54cfc42.gz.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+f015a8...@syzkaller.appspotmail.com

smsusb:smsusb_probe: board id=7, interface number 147
smsusb:smsusb_probe: board id=7, interface number 0
smsusb:siano_media_device_register: media controller created
smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
------------[ cut here ]------------
WARNING: CPU: 0 PID: 13 at kernel/workqueue.c:3084 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted 5.15.120-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
Workqueue: usb_hub_wq hub_event
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __flush_work+0x1b4/0x1c0
lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3084
sp : ffff8000189365a0
x29: ffff8000189366d0 x28: 0000000000000000 x27: ffff800018936808
x26: 0000000000000001 x25: 1fffe0001827b81d x24: dfff800000000000
x23: ffff700003126cb4 x22: ffff0000c13dc100 x21: ffff8000189365c0
x20: 0000000000000001 x19: ffff0000c13dc0e8 x18: ffff8000189364a0
x17: ff80800008335ea8 x16: ffff8000082ea770 x15: 000000000000e09a
x14: 00000000f351f728 x13: ffffffffffffffff x12: 0000000000000000
x11: ff80800008208330 x10: 0000000000000000 x9 : ffff800008208330
x8 : ffff0000c0948000 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0
__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3178
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3214
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_start_streaming+0x3a0/0x424 drivers/media/usb/siano/smsusb.c:199
smsusb_init_device drivers/media/usb/siano/smsusb.c:476 [inline]
smsusb_probe+0x1378/0x1a0c drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:755
driver_probe_device+0x78/0x34c drivers/base/dd.c:785
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:907
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:979
device_initial_probe+0x24/0x34 drivers/base/dd.c:1028
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_set_configuration+0x15e0/0x1b60 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:755
driver_probe_device+0x78/0x34c drivers/base/dd.c:785
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:907
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:979
device_initial_probe+0x24/0x34 drivers/base/dd.c:1028
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_new_device+0x8fc/0x1448 drivers/usb/core/hub.c:2568
hub_port_connect drivers/usb/core/hub.c:5358 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]
port_event drivers/usb/core/hub.c:5648 [inline]
hub_event+0x22e4/0x48c4 drivers/usb/core/hub.c:5730
process_one_work+0x790/0x11b8 kernel/workqueue.c:2307
worker_thread+0x910/0x1034 kernel/workqueue.c:2454
kthread+0x37c/0x45c kernel/kthread.c:319
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
irq event stamp: 45366
hardirqs last enabled at (45365): [<ffff800008208728>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3171
hardirqs last disabled at (45366): [<ffff800011957088>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387
softirqs last enabled at (42620): [<ffff800008020ccc>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last enabled at (42620): [<ffff800008020ccc>] __do_softirq+0xb5c/0xe20 kernel/softirq.c:587
softirqs last disabled at (42569): [<ffff8000081b573c>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (42569): [<ffff8000081b573c>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (42569): [<ffff8000081b573c>] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636
---[ end trace cca84395badfdf62 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 13 at kernel/workqueue.c:3084 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 0 PID: 13 Comm: kworker/0:1 Tainted: G W 5.15.120-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
Workqueue: usb_hub_wq hub_event
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __flush_work+0x1b4/0x1c0
lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3084
sp : ffff8000189365a0
x29: ffff8000189366d0 x28: 0000000000000000 x27: ffff800018936808
x26: 0000000000000001 x25: 1fffe0001827b841 x24: dfff800000000000
x23: ffff700003126cb4 x22: ffff0000c13dc220 x21: ffff8000189365c0
x20: 0000000000000001 x19: ffff0000c13dc208 x18: ffff8000189364a0
x17: ff80800008335ea8 x16: ffff8000082ea770 x15: 000000000000e09a
x14: 1ffff0000291e06a x13: ffffffffffffffff x12: 0000000000000000
x11: ff80800008208330 x10: 0000000000000000 x9 : ffff800008208330
x8 : ffff0000c0948000 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0
__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3178
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3214
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_start_streaming+0x3a0/0x424 drivers/media/usb/siano/smsusb.c:199
smsusb_init_device drivers/media/usb/siano/smsusb.c:476 [inline]
smsusb_probe+0x1378/0x1a0c drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:755
driver_probe_device+0x78/0x34c drivers/base/dd.c:785
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:907
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:979
device_initial_probe+0x24/0x34 drivers/base/dd.c:1028
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_set_configuration+0x15e0/0x1b60 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:755
driver_probe_device+0x78/0x34c drivers/base/dd.c:785
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:907
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:979
device_initial_probe+0x24/0x34 drivers/base/dd.c:1028
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_new_device+0x8fc/0x1448 drivers/usb/core/hub.c:2568
hub_port_connect drivers/usb/core/hub.c:5358 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]
port_event drivers/usb/core/hub.c:5648 [inline]
hub_event+0x22e4/0x48c4 drivers/usb/core/hub.c:5730
process_one_work+0x790/0x11b8 kernel/workqueue.c:2307
worker_thread+0x910/0x1034 kernel/workqueue.c:2454
kthread+0x37c/0x45c kernel/kthread.c:319
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
irq event stamp: 45440
hardirqs last enabled at (45439): [<ffff800008208728>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3171
hardirqs last disabled at (45440): [<ffff800011957088>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387
softirqs last enabled at (45428): [<ffff800008020ccc>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last enabled at (45428): [<ffff800008020ccc>] __do_softirq+0xb5c/0xe20 kernel/softirq.c:587
softirqs last disabled at (45369): [<ffff8000081b573c>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (45369): [<ffff8000081b573c>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (45369): [<ffff8000081b573c>] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636
---[ end trace cca84395badfdf63 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 13 at kernel/workqueue.c:3084 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 0 PID: 13 Comm: kworker/0:1 Tainted: G W 5.15.120-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
Workqueue: usb_hub_wq hub_event
pstate: 80400005 (Nzcv dai

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the bug is already fixed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.

If you want to change bug's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the bug is a duplicate of another bug, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,

Jul 19, 2023, 1:30:49 AM7/19/23

to syzkaller...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 61fd484b2cf6 Linux 6.1.38
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=10c3f2aaa80000
kernel config: https://syzkaller.appspot.com/x/.config?x=3b4be05fdc3de90a
dashboard link: https://syzkaller.appspot.com/bug?extid=c872c88797a02d52f9d3

compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
userspace arch: arm64

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1479f774a80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=137a13b6a80000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/710437ee8127/disk-61fd484b.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/a61ff183628e/vmlinux-61fd484b.xz
kernel image: https://storage.googleapis.com/syzbot-assets/522fb55f8194/Image-61fd484b.gz.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:

Reported-by: syzbot+c872c8...@syzkaller.appspotmail.com

smsusb:smsusb_probe: board id=7, interface number 0
smsusb:siano_media_device_register: media controller created
smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
------------[ cut here ]------------

WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Not tainted 6.1.38-syzkaller #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
Workqueue: usb_hub_wq hub_event
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __flush_work+0x1b4/0x1c0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da46560
x29: ffff80001da46690 x28: 0000000000000000 x27: ffff80001da467c8
x26: 0000000000000001 x25: 1fffe0001bcdd41d x24: dfff800000000000
x23: ffff700003b48cac x22: ffff0000de6ea100 x21: ffff80001da46580
x20: 0000000000000001 x19: ffff0000de6ea0e8 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 000000000000eb76
x14: 0000000071cdac34 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3160
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196

smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_start_streaming+0x3a0/0x424 drivers/media/usb/siano/smsusb.c:199
smsusb_init_device drivers/media/usb/siano/smsusb.c:476 [inline]
smsusb_probe+0x1378/0x1a0c drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 8352
hardirqs last enabled at (8351): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (8352): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (4180): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (4180): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (4171): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da46560
x29: ffff80001da46690 x28: 0000000000000000 x27: ffff80001da467c8
x26: 0000000000000001 x25: 1fffe0001bcdd441 x24: dfff800000000000
x23: ffff700003b48cac x22: ffff0000de6ea220 x21: ffff80001da46580
x20: 0000000000000001 x19: ffff0000de6ea208 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 000000000000eb76
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3160
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 8408
hardirqs last enabled at (8407): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (8408): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8396): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (8396): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (8355): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da46560
x29: ffff80001da46690 x28: 0000000000000000 x27: ffff80001da467c8
x26: 0000000000000001 x25: 1fffe0001bcdd465 x24: dfff800000000000
x23: ffff700003b48cac x22: ffff0000de6ea340 x21: ffff80001da46580
x20: 0000000000000001 x19: ffff0000de6ea328 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 000000000000eb76
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3160
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 8448
hardirqs last enabled at (8447): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (8448): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8440): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (8440): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (8411): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da46560
x29: ffff80001da46690 x28: 0000000000000000 x27: ffff80001da467c8
x26: 0000000000000001 x25: 1fffe0001bcdd489 x24: dfff800000000000
x23: ffff700003b48cac x22: ffff0000de6ea460 x21: ffff80001da46580
x20: 0000000000000001 x19: ffff0000de6ea448 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 000000000000eb76
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3160
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 8486
hardirqs last enabled at (8485): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (8486): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8478): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (8478): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (8451): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da46560
x29: ffff80001da46690 x28: 0000000000000000 x27: ffff80001da467c8
x26: 0000000000000001 x25: 1fffe0001bcdd4ad x24: dfff800000000000
x23: ffff700003b48cac x22: ffff0000de6ea580 x21: ffff80001da46580
x20: 0000000000000001 x19: ffff0000de6ea568 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 000000000000eb76
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3160
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 8534
hardirqs last enabled at (8533): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (8534): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8526): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (8526): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (8489): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da46560
x29: ffff80001da46690 x28: 0000000000000000 x27: ffff80001da467c8
x26: 0000000000000001 x25: 1fffe0001bcdd4d1 x24: dfff800000000000
x23: ffff700003b48cac x22: ffff0000de6ea6a0 x21: ffff80001da46580
x20: 0000000000000001 x19: ffff0000de6ea688 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 000000000000eb76
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3160
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 8600
hardirqs last enabled at (8599): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (8600): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8592): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (8592): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (8537): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da46560
x29: ffff80001da46690 x28: 0000000000000000 x27: ffff80001da467c8
x26: 0000000000000001 x25: 1fffe0001bcdd4f5 x24: dfff800000000000
x23: ffff700003b48cac x22: ffff0000de6ea7c0 x21: ffff80001da46580
x20: 0000000000000001 x19: ffff0000de6ea7a8 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 000000000000eb76
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3160
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 8632
hardirqs last enabled at (8631): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (8632): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8624): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (8624): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (8603): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da46560
x29: ffff80001da46690 x28: 0000000000000000 x27: ffff80001da467c8
x26: 0000000000000001 x25: 1fffe0001bcdd519 x24: dfff800000000000
x23: ffff700003b48cac x22: ffff0000de6ea8e0 x21: ffff80001da46580
x20: 0000000000000001 x19: ffff0000de6ea8c8 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 000000000000eb76
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3160
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 8674
hardirqs last enabled at (8673): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (8674): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8666): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (8666): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (8635): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da46560
x29: ffff80001da46690 x28: 0000000000000000 x27: ffff80001da467c8
x26: 0000000000000001 x25: 1fffe0001bcdd53d x24: dfff800000000000
x23: ffff700003b48cac x22: ffff0000de6eaa00 x21: ffff80001da46580
x20: 0000000000000001 x19: ffff0000de6ea9e8 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 000000000000eb76
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3160
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 8720
hardirqs last enabled at (8719): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (8720): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8712): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (8712): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (8677): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da46560
x29: ffff80001da46690 x28: 0000000000000000 x27: ffff80001da467c8
x26: 0000000000000001 x25: 1fffe0001bcdd561 x24: dfff800000000000
x23: ffff700003b48cac x22: ffff0000de6eab20 x21: ffff80001da46580
x20: 0000000000000001 x19: ffff0000de6eab08 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 000000000000eb76
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3160
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 8770
hardirqs last enabled at (8769): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (8770): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8762): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (8762): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (8723): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da465a0
x29: ffff80001da466d0 x28: 0000000000000000 x27: ffff80001da46808
x26: 0000001fffffffc1 x25: 1fffe0001bcdd41d x24: dfff800000000000
x23: ffff700003b48cb4 x22: ffff0000de6ea100 x21: ffff80001da465c0
x20: 0000000000000001 x19: ffff0000de6ea0e8 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 0000000000000000
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3160
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0x98/0x1cc drivers/media/usb/siano/smsusb.c:344
smsusb_probe+0x1418/0x1a0c drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_set_configuration+0x15c0/0x1b40 drivers/usb/core/message.c:2170

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 8846
hardirqs last enabled at (8845): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (8846): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8826): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (8826): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (8773): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da465a0
x29: ffff80001da466d0 x28: 0000000000000000 x27: ffff80001da46808
x26: 0000001fffffffc1 x25: 1fffe0001bcdd441 x24: dfff800000000000
x23: ffff700003b48cb4 x22: ffff0000de6ea220 x21: ffff80001da465c0
x20: 0000000000000001 x19: ffff0000de6ea208 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 0000000000000000
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 8880
hardirqs last enabled at (8879): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (8880): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8872): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (8872): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (8849): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da465a0
x29: ffff80001da466d0 x28: 0000000000000000 x27: ffff80001da46808
x26: 0000001fffffffc1 x25: 1fffe0001bcdd465 x24: dfff800000000000
x23: ffff700003b48cb4 x22: ffff0000de6ea340 x21: ffff80001da465c0
x20: 0000000000000001 x19: ffff0000de6ea328 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 0000000000000000
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 8928
hardirqs last enabled at (8927): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (8928): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8920): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (8920): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (8883): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da465a0
x29: ffff80001da466d0 x28: 0000000000000000 x27: ffff80001da46808
x26: 0000001fffffffc1 x25: 1fffe0001bcdd489 x24: dfff800000000000
x23: ffff700003b48cb4 x22: ffff0000de6ea460 x21: ffff80001da465c0
x20: 0000000000000001 x19: ffff0000de6ea448 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 0000000000000000
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 8970
hardirqs last enabled at (8969): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (8970): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8962): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (8962): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (8931): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da465a0
x29: ffff80001da466d0 x28: 0000000000000000 x27: ffff80001da46808
x26: 0000001fffffffc1 x25: 1fffe0001bcdd4ad x24: dfff800000000000
x23: ffff700003b48cb4 x22: ffff0000de6ea580 x21: ffff80001da465c0
x20: 0000000000000001 x19: ffff0000de6ea568 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 0000000000000000
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 9010
hardirqs last enabled at (9009): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (9010): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (9002): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (9002): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (8973): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da465a0
x29: ffff80001da466d0 x28: 0000000000000000 x27: ffff80001da46808
x26: 0000001fffffffc1 x25: 1fffe0001bcdd4d1 x24: dfff800000000000
x23: ffff700003b48cb4 x22: ffff0000de6ea6a0 x21: ffff80001da465c0
x20: 0000000000000001 x19: ffff0000de6ea688 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 0000000000000000
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 9044
hardirqs last enabled at (9043): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (9044): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (9036): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (9036): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (9013): [<ffff80000802a994>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4230 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 4230 Comm: kworker/1:4 Tainted: G W 6.1.38-syzkaller #0

lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
sp : ffff80001da465a0
x29: ffff80001da466d0 x28: 0000000000000000 x27: ffff80001da46808
x26: 0000001fffffffc1 x25: 1fffe0001bcdd4f5 x24: dfff800000000000
x23: ffff700003b48cb4 x22: ffff0000de6ea7c0 x21: ffff80001da465c0
x20: 0000000000000001 x19: ffff0000de6ea7a8 x18: ffff80001da46460
x17: 0000000000000000 x16: ffff80001205d140 x15: 0000000000000000
x14: 1ffff00002aba0b0 x13: dfff800000000000 x12: 0000000000000005
x11: ff80800008218204 x10: 0000000000000000 x9 : ffff800008218204
x8 : ffff0000c977d340 x7 : 0000000000000000 x6 : 000000000000003f

x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0

usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293

really_probe+0x394/0xacc drivers/base/dd.c:639
__driver_probe_device+0x194/0x3b4 drivers/base/dd.c:783
driver_probe_device+0x78/0x330 drivers/base/dd.c:813
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:941
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1013
device_initial_probe+0x24/0x34 drivers/base/dd.c:1062
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 9104
hardirqs last enabled at (9103): [<ffff8000082185fc>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (9104): [<ffff80001210cb4c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (9096): [<ffff800008020d74>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (9096): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 kernel/softirq.c:600
softirqs last disabled at (9047): [<ffff80000802a

syzbot

unread,

Sep 26, 2023, 10:59:17 PM9/26/23

to syzkaller...@googlegroups.com

syzbot suspects this issue was fixed by commit:

commit 8abb53c5167cfb5bb275512a3da4ec2468478626
Author: Duoming Zhou <duo...@zju.edu.cn>
Date: Mon May 22 23:59:32 2023 +0000

media: usb: siano: Fix warning due to null work_func_t function pointer

bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=112fdc66680000
start commit: 61fd484b2cf6 Linux 6.1.38
git tree: linux-6.1.y

kernel config: https://syzkaller.appspot.com/x/.config?x=3b4be05fdc3de90a
dashboard link: https://syzkaller.appspot.com/bug?extid=c872c88797a02d52f9d3

userspace arch: arm64
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1479f774a80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=137a13b6a80000

If the result looks correct, please mark the issue as fixed by replying with:

#syz fix: media: usb: siano: Fix warning due to null work_func_t function pointer

For information about bisection process see: https://goo.gl/tpsmEJ#bisection

Reply all

Reply to author

Forward

0 new messages