From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-oi1-f199.google.com (mail-oi1-f199.google.com [209.85.167.199]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D11B63D9531 for ; Sun, 16 Aug 2026 11:27:30 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.167.199 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786879652; cv=none; b=P9APEcyOwGSQE36qg0/qSODSVp+pnq3VPVVr4VpxJkAABDx7rFBiP/lmpKY+IW/tkizyxzAoo8UB5K1inZdkNdimusjiUFfnFkGFDQfDlMGHpkhXV4s2Fj73FFd/5jag57+GbCwO90tTn+5fy9SwslgqsfRj2W+M0cIgbS4evhQ= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786879652; c=relaxed/simple; bh=AI99FKBl94LqlY1t6dMwvTnXYDCq0yqRdcAhIzY4Rog=; h=MIME-Version:Date:In-Reply-To:Message-ID:Subject:From:To: Content-Type; b=c5JaQxTsrFcaZIjvUaOmDxRGIyFhB+AGENkk3dQ4TvjFEhEPNJHMkGzld0QCXfbHLsUkiW0WzBLys4Cd6MMVlGZdTZ6HHkF13ZxfMOLUvEgI+Lg4LSHnaBpGLpjA/zjVQYCqRQTwrLkeRBnV9id9R+CQqTPhE11KL2x6sMqOSbA= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.167.199 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com Received: by mail-oi1-f199.google.com with SMTP id 5614622812f47-4ab4ca7ce3fso2942728b6e.0 for ; Sun, 16 Aug 2026 04:27:30 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786879650; x=1787484450; h=content-type:to:from:subject:message-id:in-reply-to:date :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=2AAO9Bi6U1A9bNqUn2mw7ogIFRAYmsU7iq59fK1NMeA=; b=QnRx0w6Lq7LYGAvgVNgRrjSbjt/s1VYYLbO6bhAh2HhDdm1iMVNLpLmWqwkL7icUod 25VEuzilF1hKCPyULDYcfyAOZGklgZoIRO3Go4rSqrqo6mf015BRkWeYVofWWtrBwo8z ZCT9o920WjfC3Zet7251wcqPI5Uye1gjoMYjgb5Vm7SplnnZUpAa85DhdvobayD+Y+AZ RzqOaNRPWFItGSt3AnHh5GR0j9Z+2tnwEoXrsuTYbBSEtYKpxu7DCTnmbFWT/I94O8cO JMslbh3oFzeDU6nO6Ai1lDz61hUoCE9fB/a3+8dBx0v4CDKo6AMKFq6/xs2evqPAlkEu rk4g== X-Gm-Message-State: AOJu0YwTFWmNtpy3H3rZjTk2UQdpIN41X8mfmVW9D5D5jcsFa69kpOEq Ed2ui9ALOjg+3dD1oFcHJGHv3/5+97MW1QA2jrFwJfBGr/DSijdm5O/W5o7x2nVm6/EL6Co49XX 0nhr+oljAPKzPyYQoo++vYY3/3YfGB/1liI3wa8+xKS2IXkcR9uZLFhMxvTE= Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Received: by 2002:a05:6820:4d0a:b0:6ac:a8ef:9a86 with SMTP id 006d021491bc7-6b0d61bed41mr18003918eaf.15.1786879649852; Sun, 16 Aug 2026 04:27:29 -0700 (PDT) Date: Sun, 16 Aug 2026 04:27:29 -0700 In-Reply-To: <6a73bd06.5aeeccc9.207e63.0006.GAE@google.com> X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <6a819ea1.f7a79266.2f965f.0013.GAE@google.com> Subject: Forwarded: [PATCH] mmc: vub300: fix sleeping function call from invalid context in vub300_inactivity_timer_expired From: syzbot To: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Content-Type: text/plain; charset="UTF-8" For archival purposes, forwarding an incoming command email to linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com. *** Subject: [PATCH] mmc: vub300: fix sleeping function call from invalid context in vub300_inactivity_timer_expired Author: jakovnovak30@gmail.com #syz test --- drivers/mmc/host/vub300.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/drivers/mmc/host/vub300.c b/drivers/mmc/host/vub300.c index 2dae474dcd06..fee74c6ab720 100644 --- a/drivers/mmc/host/vub300.c +++ b/drivers/mmc/host/vub300.c @@ -744,7 +744,8 @@ static void vub300_inactivity_timer_expired(struct timer_list *t) struct vub300_mmc_host *vub300 = timer_container_of(vub300, t, inactivity_timer); if (!vub300->interface) { - kref_put(&vub300->kref, vub300_delete); + //kref_put(&vub300->kref, vub300_delete); + vub300_queue_dead_work(vub300); } else if (vub300->cmd) { mod_timer(&vub300->inactivity_timer, jiffies + HZ); } else { -- 2.55.0