BUG: sleeping function called from invalid context in mmc_free_host

Status: upstream: reported C repro on 2026/08/05 22:45
Subsystems: usb mmc
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+0e06aa1bdc6495bac24b@syzkaller.appspotmail.com
Fix commit: mmc: vub300: Remove the driver for the obsolete HW
Patched on: [ci-upstream-linux-next-kasan-gce-root ci-upstream-rust-kasan-gce], missing on: [ci-qemu-gce-upstream-auto ci-qemu-native-arm64-kvm ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 61d, last: 46m
Cause bisection: failed (error log, bisect log)
  
▶ ▼ ✨ AI Patch Versions (1)
Version Stage Reported Report Link Job
1 moderation 2026/08/07 03:36 Discussion dcef6af0-9740-47ea-949c-72048301deb8
▶ ▼ ✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision
fc199f99 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ BUG: sleeping function called from invalid context in mmc_free_host 2026/08/06 06:47 2026/08/07 02:29 2026/08/07 02:33 c38879ea
dcef6af0 patching ❓ BUG: sleeping function called from invalid context in mmc_free_host 2026/08/06 06:47 2026/08/07 02:10 2026/08/07 03:36 c38879ea
c58c1f2b assessment-security 💥 BUG: sleeping function called from invalid context in mmc_free_host 2026/08/05 00:02 2026/08/05 00:02 2026/08/05 00:02 d4abbeac
▶ ▼ Discussions (3)
Title Replies (including bot) Last reply
[PATCH] mmc: vub300: fix sleeping function called from invalid context 8 (8) 2026/09/20 14:57
[syzbot] Monthly mmc report (Sep 2026) 0 (1) 2026/09/02 20:33
[syzbot] [mmc?] [mm?] BUG: sleeping function called from invalid context in mmc_free_host 0 (1) 2026/08/05 22:45
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 BUG: sleeping function called from invalid context in mmc_free_host 5 1 10d 10d 0/3 upstream: reported on 2026/09/24 13:52
linux-6.6 BUG: sleeping function called from invalid context in mmc_free_host 5 syz, C 436 2h01m 61d 0/2 upstream: reported C repro on 2026/08/04 22:46

Sample crash report:
BUG: sleeping function called from invalid context at kernel/workqueue.c:4561
in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5643, name: kworker/0:4
preempt_count: 101, expected: 0
RCU nest depth: 1, expected: 0
locks held by kworker/0:4/5643: 7, last CPU#0:
 #0: ffff888021ed6140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888021ed6140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888021ed6140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888021ed6140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000358fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000358fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000358fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000358fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff8880297341d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff8880297341d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88807bc991d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88807bc991d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 drivers/usb/core/hub.c:2346
 #4: ffff88801c2cc880 (&root->kernfs_idr_lock){+.+.}-{3:3}, at: spin_lock include/linux/spinlock.h:347 [inline]
 #4: ffff88801c2cc880 (&root->kernfs_idr_lock){+.+.}-{3:3}, at: kernfs_put+0x5db/0x820 fs/kernfs/dir.c:614
 #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
 #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495
 #6: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 0 UID: 0 PID: 5643 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
Workqueue: usb_hub_wq hub_event
Call Trace:
 <IRQ>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 __might_resched+0x36a/0x4c0 kernel/sched/core.c:9264
 __cancel_work_sync+0x6d/0x110 kernel/workqueue.c:4561
 mmc_free_host+0x19/0x40 drivers/mmc/core/host.c:700
 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748
 expire_timers kernel/time/timer.c:1799 [inline]
 __run_timers kernel/time/timer.c:2374 [inline]
 __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386
 run_timer_base kernel/time/timer.c:2395 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405
 handle_softirqs+0x226/0x860 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_acquire+0x232/0x350 kernel/locking/lockdep.c:5947
Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 ca d7 6c ff cc 48 8d 3d b7 36 da
RSP: 0018:ffffc9000358ef40 EFLAGS: 00000292
RAX: 4fc815e725542900 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 000000000572bf0f RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80
RBP: ffff88807ef1be80 R08: ffffffff817811df R09: 0000000000000000
R10: dffffc0000000000 R11: ffffffff81b2c450 R12: ffffffff8ed5c8a0
R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
 rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
 unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:57
 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:556
 __call_rcu_common kernel/rcu/tree.c:3181 [inline]
 call_rcu+0xee/0x8b0 kernel/rcu/tree.c:3301
 radix_tree_node_free lib/radix-tree.c:310 [inline]
 delete_node+0x1b8/0xa30 lib/radix-tree.c:573
 radix_tree_delete_item+0x2e9/0x400 lib/radix-tree.c:1430
 kernfs_put+0x604/0x820 fs/kernfs/dir.c:615
 sysfs_put include/linux/sysfs.h:808 [inline]
 __kobject_del+0xe8/0x310 lib/kobject.c:605
 kobject_del+0x45/0x60 lib/kobject.c:627
 device_del+0x772/0x8f0 drivers/base/core.c:3985
 device_unregister+0x21/0xf0 drivers/base/core.c:4006
 usb_remove_ep_devs+0x50/0x80 drivers/usb/core/endpoint.c:181
 remove_intf_ep_devs drivers/usb/core/message.c:1326 [inline]
 usb_disable_device+0x357/0x8d0 drivers/usb/core/message.c:1483
 usb_disconnect+0x346/0x9a0 drivers/usb/core/hub.c:2355
 hub_port_connect drivers/usb/core/hub.c:5425 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5725 [inline]
 port_event drivers/usb/core/hub.c:5889 [inline]
 hub_event+0x1bbb/0x4d30 drivers/usb/core/hub.c:5971
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

=============================
WARNING: suspicious RCU usage
syzkaller #0 Tainted: G        W          
-----------------------------
kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
locks held by kworker/0:4/5643: 7, last CPU#0:
 #0: ffff888021ed6140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888021ed6140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888021ed6140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888021ed6140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000358fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000358fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000358fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000358fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff8880297341d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff8880297341d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88807bc991d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88807bc991d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 drivers/usb/core/hub.c:2346
 #4: ffff88801c2cc880 (&root->kernfs_idr_lock){+.+.}-{3:3}, at: spin_lock include/linux/spinlock.h:347 [inline]
 #4: ffff88801c2cc880 (&root->kernfs_idr_lock){+.+.}-{3:3}, at: kernfs_put+0x5db/0x820 fs/kernfs/dir.c:614
 #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
 #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495
 #6: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745

stack backtrace:
CPU: 0 UID: 0 PID: 5643 Comm: kworker/0:4 Tainted: G        W           syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
Workqueue: usb_hub_wq hub_event
Call Trace:
 <IRQ>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 lockdep_rcu_suspicious+0x140/0x1d0 kernel/locking/lockdep.c:6972
 __synchronize_srcu+0x157/0x2f0 kernel/rcu/srcutree.c:1464
 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline]
 wakeup_source_unregister+0x129/0x3f0 drivers/base/power/wakeup.c:237
 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69
 device_release+0xc4/0x1f0 drivers/base/core.c:-1
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x222/0x550 lib/kobject.c:737
 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748
 expire_timers kernel/time/timer.c:1799 [inline]
 __run_timers kernel/time/timer.c:2374 [inline]
 __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386
 run_timer_base kernel/time/timer.c:2395 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405
 handle_softirqs+0x226/0x860 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_acquire+0x232/0x350 kernel/locking/lockdep.c:5947
Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 ca d7 6c ff cc 48 8d 3d b7 36 da
RSP: 0018:ffffc9000358ef40 EFLAGS: 00000292
RAX: 4fc815e725542900 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 000000000572bf0f RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80
RBP: ffff88807ef1be80 R08: ffffffff817811df R09: 0000000000000000
R10: dffffc0000000000 R11: ffffffff81b2c450 R12: ffffffff8ed5c8a0
R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
 rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
 unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:57
 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:556
 __call_rcu_common kernel/rcu/tree.c:3181 [inline]
 call_rcu+0xee/0x8b0 kernel/rcu/tree.c:3301
 radix_tree_node_free lib/radix-tree.c:310 [inline]
 delete_node+0x1b8/0xa30 lib/radix-tree.c:573
 radix_tree_delete_item+0x2e9/0x400 lib/radix-tree.c:1430
 kernfs_put+0x604/0x820 fs/kernfs/dir.c:615
 sysfs_put include/linux/sysfs.h:808 [inline]
 __kobject_del+0xe8/0x310 lib/kobject.c:605
 kobject_del+0x45/0x60 lib/kobject.c:627
 device_del+0x772/0x8f0 drivers/base/core.c:3985
 device_unregister+0x21/0xf0 drivers/base/core.c:4006
 usb_remove_ep_devs+0x50/0x80 drivers/usb/core/endpoint.c:181
 remove_intf_ep_devs drivers/usb/core/message.c:1326 [inline]
 usb_disable_device+0x357/0x8d0 drivers/usb/core/message.c:1483
 usb_disconnect+0x346/0x9a0 drivers/usb/core/hub.c:2355
 hub_port_connect drivers/usb/core/hub.c:5425 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5725 [inline]
 port_event drivers/usb/core/hub.c:5889 [inline]
 hub_event+0x1bbb/0x4d30 drivers/usb/core/hub.c:5971
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472
in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5643, name: kworker/0:4
preempt_count: 101, expected: 0
RCU nest depth: 1, expected: 0
locks held by kworker/0:4/5643: 7, last CPU#0:
 #0: ffff888021ed6140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888021ed6140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888021ed6140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888021ed6140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000358fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000358fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000358fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000358fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff8880297341d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff8880297341d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88807bc991d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88807bc991d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 drivers/usb/core/hub.c:2346
 #4: ffff88801c2cc880 (&root->kernfs_idr_lock){+.+.}-{3:3}, at: spin_lock include/linux/spinlock.h:347 [inline]
 #4: ffff88801c2cc880 (&root->kernfs_idr_lock){+.+.}-{3:3}, at: kernfs_put+0x5db/0x820 fs/kernfs/dir.c:614
 #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
 #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495
 #6: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 0 UID: 0 PID: 5643 Comm: kworker/0:4 Tainted: G        W           syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
Workqueue: usb_hub_wq hub_event
Call Trace:
 <IRQ>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 __might_resched+0x36a/0x4c0 kernel/sched/core.c:9264
 __synchronize_srcu+0x1a1/0x2f0 kernel/rcu/srcutree.c:1472
 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline]
 wakeup_source_unregister+0x129/0x3f0 drivers/base/power/wakeup.c:237
 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69
 device_release+0xc4/0x1f0 drivers/base/core.c:-1
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x222/0x550 lib/kobject.c:737
 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748
 expire_timers kernel/time/timer.c:1799 [inline]
 __run_timers kernel/time/timer.c:2374 [inline]
 __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386
 run_timer_base kernel/time/timer.c:2395 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405
 handle_softirqs+0x226/0x860 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_acquire+0x232/0x350 kernel/locking/lockdep.c:5947
Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 ca d7 6c ff cc 48 8d 3d b7 36 da
RSP: 0018:ffffc9000358ef40 EFLAGS: 00000292
RAX: 4fc815e725542900 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 000000000572bf0f RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80
RBP: ffff88807ef1be80 R08: ffffffff817811df R09: 0000000000000000
R10: dffffc0000000000 R11: ffffffff81b2c450 R12: ffffffff8ed5c8a0
R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
 rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
 unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:57
 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:556
 __call_rcu_common kernel/rcu/tree.c:3181 [inline]
 call_rcu+0xee/0x8b0 kernel/rcu/tree.c:3301
 radix_tree_node_free lib/radix-tree.c:310 [inline]
 delete_node+0x1b8/0xa30 lib/radix-tree.c:573
 radix_tree_delete_item+0x2e9/0x400 lib/radix-tree.c:1430
 kernfs_put+0x604/0x820 fs/kernfs/dir.c:615
 sysfs_put include/linux/sysfs.h:808 [inline]
 __kobject_del+0xe8/0x310 lib/kobject.c:605
 kobject_del+0x45/0x60 lib/kobject.c:627
 device_del+0x772/0x8f0 drivers/base/core.c:3985
 device_unregister+0x21/0xf0 drivers/base/core.c:4006
 usb_remove_ep_devs+0x50/0x80 drivers/usb/core/endpoint.c:181
 remove_intf_ep_devs drivers/usb/core/message.c:1326 [inline]
 usb_disable_device+0x357/0x8d0 drivers/usb/core/message.c:1483
 usb_disconnect+0x346/0x9a0 drivers/usb/core/hub.c:2355
 hub_port_connect drivers/usb/core/hub.c:5425 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5725 [inline]
 port_event drivers/usb/core/hub.c:5889 [inline]
 hub_event+0x1bbb/0x4d30 drivers/usb/core/hub.c:5971
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
ODEBUG: object ffffc90000007a80 is NOT on stack ffffc90003588000, but annotated.
------------[ cut here ]------------
1
WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack lib/debugobjects.c:672 [inline], CPU#0: kworker/0:4/5643
WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc lib/debugobjects.c:705 [inline], CPU#0: kworker/0:4/5643
WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798, CPU#0: kworker/0:4/5643
Modules linked in:
CPU: 0 UID: 0 PID: 5643 Comm: kworker/0:4 Tainted: G        W           syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:debug_object_is_on_stack lib/debugobjects.c:672 [inline]
RIP: 0010:lookup_object_or_alloc lib/debugobjects.c:705 [inline]
RIP: 0010:__debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798
Code: 24 fc cc 41 ff c7 44 89 3d 49 10 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 8d 62 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 e1 6a 6d 0a 3b 05 df
RSP: 0018:ffffc900000079b8 EFLAGS: 00010046
RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 4fc815e725542900
RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
RBP: ffff88807ef1bea0 R08: 0000000000000100 R09: 1ffffffff1ed22f4
R10: dffffc0000000000 R11: fffffbfff1ed22f5 R12: ffff8880337412b8
R13: ffff888077f43dc8 R14: dffffc0000000000 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055bf3ea23690 CR3: 000000007133e000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 __synchronize_srcu+0x1d5/0x2f0 kernel/rcu/srcutree.c:1475
 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline]
 wakeup_source_unregister+0x129/0x3f0 drivers/base/power/wakeup.c:237
 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69
 device_release+0xc4/0x1f0 drivers/base/core.c:-1
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x222/0x550 lib/kobject.c:737
 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748
 expire_timers kernel/time/timer.c:1799 [inline]
 __run_timers kernel/time/timer.c:2374 [inline]
 __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386
 run_timer_base kernel/time/timer.c:2395 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405
 handle_softirqs+0x226/0x860 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_acquire+0x232/0x350 kernel/locking/lockdep.c:5947
Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 ca d7 6c ff cc 48 8d 3d b7 36 da
RSP: 0018:ffffc9000358ef40 EFLAGS: 00000292
RAX: 4fc815e725542900 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 000000000572bf0f RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80
RBP: ffff88807ef1be80 R08: ffffffff817811df R09: 0000000000000000
R10: dffffc0000000000 R11: ffffffff81b2c450 R12: ffffffff8ed5c8a0
R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
 rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
 unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:57
 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:556
 __call_rcu_common kernel/rcu/tree.c:3181 [inline]
 call_rcu+0xee/0x8b0 kernel/rcu/tree.c:3301
 radix_tree_node_free lib/radix-tree.c:310 [inline]
 delete_node+0x1b8/0xa30 lib/radix-tree.c:573
 radix_tree_delete_item+0x2e9/0x400 lib/radix-tree.c:1430
 kernfs_put+0x604/0x820 fs/kernfs/dir.c:615
 sysfs_put include/linux/sysfs.h:808 [inline]
 __kobject_del+0xe8/0x310 lib/kobject.c:605
 kobject_del+0x45/0x60 lib/kobject.c:627
 device_del+0x772/0x8f0 drivers/base/core.c:3985
 device_unregister+0x21/0xf0 drivers/base/core.c:4006
 usb_remove_ep_devs+0x50/0x80 drivers/usb/core/endpoint.c:181
 remove_intf_ep_devs drivers/usb/core/message.c:1326 [inline]
 usb_disable_device+0x357/0x8d0 drivers/usb/core/message.c:1483
 usb_disconnect+0x346/0x9a0 drivers/usb/core/hub.c:2355
 hub_port_connect drivers/usb/core/hub.c:5425 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5725 [inline]
 port_event drivers/usb/core/hub.c:5889 [inline]
 hub_event+0x1bbb/0x4d30 drivers/usb/core/hub.c:5971
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
----------------
Code disassembly (best guess), 2 bytes skipped:
   0:	ff                   	ljmp   (bad)
   1:	e8 70 dc 43 0a       	call   0xa43dc76
   6:	f7 44 24 10 00 02 00 	testl  $0x200,0x10(%rsp)
   d:	00
   e:	0f 84 38 ff ff ff    	je     0xffffff4c
  14:	65 48 8b 05 02 37 f2 	mov    %gs:0x11f23702(%rip),%rax        # 0x11f2371e
  1b:	11
  1c:	48 3b 44 24 50       	cmp    0x50(%rsp),%rax
  21:	75 33                	jne    0x56
  23:	fb                   	sti
  24:	48 83 c4 58          	add    $0x58,%rsp
* 28:	5b                   	pop    %rbx <-- trapping instruction
  29:	41 5c                	pop    %r12
  2b:	41 5d                	pop    %r13
  2d:	41 5e                	pop    %r14
  2f:	41 5f                	pop    %r15
  31:	5d                   	pop    %rbp
  32:	e9 ca d7 6c ff       	jmp    0xff6cd801
  37:	cc                   	int3
  38:	48                   	rex.W
  39:	8d                   	.byte 0x8d
  3a:	3d                   	.byte 0x3d
  3b:	b7 36                	mov    $0x36,%bh
  3d:	da                   	.byte 0xda

Crashes (8249):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/04 18:50 upstream 6addb4f38557 57bbd979 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 04:39 upstream a74306e2e676 57bbd979 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 04:27 upstream a74306e2e676 57bbd979 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/03 16:09 upstream e767a4ea70a3 57bbd979 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/03 14:50 upstream e767a4ea70a3 57bbd979 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/02 02:49 upstream d24e8ac715de 6d32eb1f .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/01 14:01 upstream 551c722f4080 38f7f0d1 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/09/27 21:33 upstream efb44d93a620 a3c7249d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/09/27 21:08 upstream efb44d93a620 a3c7249d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/09/26 01:00 upstream aa98230e410f f281d9d2 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/09/25 15:28 upstream 165768bb7026 f281d9d2 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/09/24 07:42 upstream 62f4c998b297 0a1606bc .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: sleeping function called from invalid context in mmc_free_host
2026/08/05 01:10 upstream 848acc8ffe1b d4abbeac .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/08/04 23:21 upstream 848acc8ffe1b d4abbeac .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/08/04 16:58 upstream 848acc8ffe1b d4abbeac .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/05 11:23 upstream a90ee4305c4a 57bbd979 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/05 01:41 upstream 6addb4f38557 57bbd979 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/05 00:51 upstream 6addb4f38557 57bbd979 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 07:24 upstream a74306e2e676 57bbd979 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/03 06:03 upstream ce1e0223d8ad 57bbd979 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/03 02:25 upstream ce1e0223d8ad 57bbd979 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/02 20:48 upstream ce1e0223d8ad 57bbd979 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/02 04:40 upstream d24e8ac715de 6d32eb1f .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/01 08:41 upstream 551c722f4080 38f7f0d1 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/30 18:47 upstream 551c722f4080 892a21ec .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/30 08:08 upstream 6f8319e3e9a4 7808aef4 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/30 05:30 upstream 6f8319e3e9a4 7808aef4 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/30 04:33 upstream 6f8319e3e9a4 7808aef4 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/29 14:47 upstream 72d3fcf802c4 7bf4ea23 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/28 04:12 upstream 104484baf748 a3c7249d .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/27 16:54 upstream fd179f8a05be a3c7249d .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/27 03:07 upstream fd179f8a05be a3c7249d .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/25 22:00 upstream 165768bb7026 f281d9d2 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/24 23:18 upstream 62f4c998b297 3c3cdf19 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/24 16:46 upstream 62f4c998b297 3c3cdf19 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/24 04:21 upstream fe2ec83746e5 0a1606bc .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/24 01:29 upstream fe2ec83746e5 0a1606bc .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/23 02:47 upstream 50d05c7c76c9 3e2106e5 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/22 22:53 upstream 50d05c7c76c9 3e2106e5 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/22 14:29 upstream 50d05c7c76c9 e12281bd .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/22 09:56 upstream 50d05c7c76c9 e12281bd .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/21 20:50 upstream 50d05c7c76c9 853b104b .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/21 11:31 upstream 50d05c7c76c9 853b104b .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/21 07:21 upstream 50d05c7c76c9 853b104b .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/05 10:47 upstream a90ee4305c4a 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/05 09:02 upstream a90ee4305c4a 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/05 06:41 upstream a90ee4305c4a 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/05 05:38 upstream a90ee4305c4a 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/05 05:36 upstream a90ee4305c4a 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/05 03:38 upstream a90ee4305c4a 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/05 01:57 upstream a90ee4305c4a 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 22:21 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 21:20 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 21:07 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 20:06 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 18:57 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 18:49 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 16:07 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 14:44 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 13:23 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 10:53 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 08:57 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 07:55 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 05:22 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 05:12 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 04:48 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 02:54 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 02:39 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 02:39 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 01:33 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 00:33 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/03 23:37 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/03 21:48 upstream e767a4ea70a3 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/03 20:28 upstream e767a4ea70a3 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/10/02 21:40 upstream ce1e0223d8ad 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: sleeping function called from invalid context in mmc_free_host
2026/10/05 08:39 upstream a90ee4305c4a 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/05 04:32 upstream a90ee4305c4a 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 23:44 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 17:36 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 16:35 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 14:35 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 12:54 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 11:53 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 10:14 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 07:00 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 06:43 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 05:57 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 05:32 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 04:15 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/10/04 04:08 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: sleeping function called from invalid context in mmc_free_host
2026/09/03 18:23 linux-next 32b6ef9a5d0e 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in mmc_free_host
2026/09/03 16:29 linux-next 32b6ef9a5d0e 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in mmc_free_host
* Struck through repros no longer work on HEAD.