[BUG] ushc_request -- URB submitted while already active: WARN in usb_submit_urb

From: Farhad Alemi

Date: Fri Aug 28 2026 - 01:41:47 EST


Hello,

As part of the kernel research at ASU's SEFCOM
lab, we hit the crash below. Crash reports can be found here:

https://github.com/farhad-alemi/public_bug_reports/tree/main/160-mmc-ushc-urb-submitted-while-active/

WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18c0,
CPU#1: kworker/1:2/992
Workqueue: events_freezable mmc_rescan
RIP: 0010:usb_submit_urb+0x7e/0x18c0
Call Trace:
usb_submit_urb+0x7e/0x18c0
ushc_request+0x3ce/0x8f0
mmc_start_request+0x202/0x2d0
mmc_wait_for_req+0xd9/0x240
mmc_wait_for_cmd+0x183/0x2a0
sdio_reset+0x1fa/0x3a0
mmc_rescan+0x6d3/0x1020
process_scheduled_works+0xc99/0x1900
worker_thread+0xa53/0xfc0
kthread+0x38b/0x480
Kernel panic - not syncing: kernel: panic_on_warn set ...

Our reproducer.c is available upon request.

Happy to test a patch if that would help.

Regards,