[BUG] WARNING in cxusb_medion_v_stop_streaming

From: Farhad Alemi

Date: Fri Sep 11 2026 - 19:27:17 EST

Hello,

We are reporting the following crash (reproducer attached):
Linux version 7.3.0-rc2 50d05c7c76c96b90462f24debacca971d2e86713
Build Config: UpstreamAppArmorKASAN (KASAN + UBSAN, panic_on_warn=1)

[ 80.023095][ T2288] WARNING:
drivers/media/usb/dvb-usb/cxusb-analog.c:907 at
cxusb_medion_v_stop_streaming+0x68a/0x710, CPU#1: kworker/1:3/2288
[ 80.027698][ T2288] Modules linked in:
[ 80.028089][ T2288] CPU: 1 UID: 0 PID: 2288 Comm: kworker/1:3 Not
tainted 7.3.0-rc2-00099-g50d05c7c76c9 #1 PREEMPT(full)
[ 80.029118][ T2288] Hardware name: QEMU Standard PC (Q35 + ICH9,
2009), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014
[ 80.030204][ T2288] Workqueue: usb_hub_wq hub_event
[ 80.030698][ T2288] RIP: 0010:cxusb_medion_v_stop_streaming+0x68a/0x710
[ 80.031348][ T2288] Code: 84 c0 0f 85 81 00 00 00 48 8b 44 24 08 c6
00 00 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8
07 96 b2 f9 90 <0f> 0b 90 eb e1 48 c7 c1 e0 62 ac 9a 80 e1 07 80 c1 03
38 c1 0f 8c
[ 80.033125][ T2288] RSP: 0000:ffffc90007e0f230 EFLAGS: 00010293
[ 80.033702][ T2288] RAX: ffffffff88150679 RBX: 1ffff11021de20a8
RCX: ffff88810fc08000
[ 80.034554][ T2288] RDX: 0000000000000000 RSI: 0000000000000000
RDI: 0000000000000000
[ 80.035306][ T2288] RBP: ffff88810ef10544 R08: ffffffff90563d7f
R09: 1ffffffff20ac7af
[ 80.036051][ T2288] R10: dffffc0000000000 R11: ffffffff8814fff0
R12: dffffc0000000000
[ 80.036809][ T2288] R13: 1ffff11021de20a1 R14: dffffc0000000000
R15: ffff888109ba8000
[ 80.037564][ T2288] FS: 0000000000000000(0000)
GS:ffff8881da588000(0000) knlGS:0000000000000000
[ 80.038396][ T2288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 80.039011][ T2288] CR2: 00007f248c0dbfe0 CR3: 000000002454b000
CR4: 0000000000752ef0
[ 80.039789][ T2288] PKRU: 55555554
[ 80.040139][ T2288] Call Trace:
[ 80.040467][ T2288] <TASK>
[ 80.040757][ T2288] ? __pfx_cxusb_medion_v_stop_streaming+0x10/0x10
[ 80.041387][ T2288] __vb2_queue_cancel+0xba/0xdb0
[ 80.041864][ T2288] ? __pfx___mutex_lock+0x10/0x10
[ 80.042352][ T2288] __vb2_cleanup_fileio+0x4e/0x1f0
[ 80.042842][ T2288] vb2_core_queue_release+0x27/0x150
[ 80.043350][ T2288] vb2_video_unregister_device+0x15b/0x200
[ 80.043971][ T2288] cxusb_medion_unregister_analog+0xc2/0x1c0
[ 80.044546][ T2288] cxusb_disconnect+0x9b/0x1a0
[ 80.045008][ T2288] usb_unbind_interface+0x26e/0x910
[ 80.045513][ T2288] ? kernfs_remove_by_name_ns+0x101/0x140
[ 80.046059][ T2288] ? __pfx_usb_unbind_interface+0x10/0x10
[ 80.046604][ T2288] device_release_driver_internal+0x4d9/0x870
[ 80.047189][ T2288] bus_remove_device+0x455/0x570
[ 80.047658][ T2288] ? __pfx_bus_remove_device+0x10/0x10
[ 80.048181][ T2288] ? kernfs_remove_by_name_ns+0x101/0x140
[ 80.048725][ T2288] device_del+0x527/0x8f0
[ 80.049148][ T2288] ? __pfx_device_del+0x10/0x10
[ 80.049630][ T2288] ? kobject_put+0x51d/0x560
[ 80.050077][ T2288] usb_disable_device+0x3d4/0x8d0
[ 80.050563][ T2288] usb_disconnect+0x32f/0x990
[ 80.051018][ T2288] hub_event+0x1cc9/0x4f30
[ 80.051472][ T2288] ? __pfx_hub_event+0x10/0x10
[ 80.051911][ T2288] ? process_scheduled_works+0x94e/0x1900
[ 80.052467][ T2288] ? process_scheduled_works+0x94e/0x1900
[ 80.053019][ T2288] ? process_scheduled_works+0x94e/0x1900
[ 80.053567][ T2288] process_scheduled_works+0xc99/0x1900
[ 80.054188][ T2288] ? __pfx_process_scheduled_works+0x10/0x10
[ 80.054761][ T2288] ? assign_work+0x3d5/0x5e0
[ 80.055212][ T2288] worker_thread+0xa53/0xfc0
[ 80.055657][ T2288] kthread+0x38b/0x480
[ 80.056037][ T2288] ? __pfx_worker_thread+0x10/0x10
[ 80.056539][ T2288] ? __pfx_kthread+0x10/0x10
[ 80.056985][ T2288] ret_from_fork+0x514/0xb70
[ 80.057442][ T2288] ? __pfx_ret_from_fork+0x10/0x10
[ 80.057907][ T2288] ? __switch_to+0xc79/0x1410
[ 80.058371][ T2288] ? __pfx_kthread+0x10/0x10
[ 80.058834][ T2288] ret_from_fork_asm+0x1a/0x30
[ 80.059343][ T2288] </TASK>
[ 80.059655][ T2288] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 80.060362][ T2288] CPU: 1 UID: 0 PID: 2288 Comm: kworker/1:3 Not
tainted 7.3.0-rc2-00099-g50d05c7c76c9 #1 PREEMPT(full)
[ 80.061408][ T2288] Hardware name: QEMU Standard PC (Q35 + ICH9,
2009), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014
[ 80.062387][ T2288] Workqueue: usb_hub_wq hub_event
[ 80.062872][ T2288] Call Trace:
[ 80.063196][ T2288] <TASK>
[ 80.063483][ T2288] vpanic+0x56d/0xa60
[ 80.063936][ T2288] ? __pfx__printk+0x10/0x10
[ 80.064385][ T2288] ? __pfx_vpanic+0x10/0x10
[ 80.064820][ T2288] ? is_bpf_text_address+0x292/0x2b0
[ 80.065331][ T2288] ? is_bpf_text_address+0x26/0x2b0
[ 80.065820][ T2288] panic+0xc5/0xd0
[ 80.066190][ T2288] ? __pfx_panic+0x10/0x10
[ 80.066622][ T2288] ? ret_from_fork_asm+0x1a/0x30
[ 80.067102][ T2288] __warn+0x315/0x4c0
[ 80.067487][ T2288] ? cxusb_medion_v_stop_streaming+0x68a/0x710
[ 80.068091][ T2288] ? cxusb_medion_v_stop_streaming+0x68a/0x710
[ 80.068676][ T2288] __report_bug+0x273/0x580
[ 80.069119][ T2288] ? cxusb_medion_v_stop_streaming+0x68a/0x710
[ 80.069698][ T2288] ? __pfx___report_bug+0x10/0x10
[ 80.070185][ T2288] ? do_raw_spin_lock+0x12b/0x2f0
[ 80.070667][ T2288] ? cxusb_medion_v_stop_streaming+0x68a/0x710
[ 80.071255][ T2288] report_bug+0x16b/0x220
[ 80.071665][ T2288] ? cxusb_medion_v_stop_streaming+0x68a/0x710
[ 80.072249][ T2288] ? cxusb_medion_v_stop_streaming+0x68c/0x710
[ 80.072833][ T2288] handle_bug+0x9c/0x200
[ 80.073245][ T2288] exc_invalid_op+0x1a/0x50
[ 80.073676][ T2288] asm_exc_invalid_op+0x1a/0x20
[ 80.074219][ T2288] RIP: 0010:cxusb_medion_v_stop_streaming+0x68a/0x710
[ 80.074855][ T2288] Code: 84 c0 0f 85 81 00 00 00 48 8b 44 24 08 c6
00 00 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8
07 96 b2 f9 90 <0f> 0b 90 eb e1 48 c7 c1 e0 62 ac 9a 80 e1 07 80 c1 03
38 c1 0f 8c
[ 80.076640][ T2288] RSP: 0000:ffffc90007e0f230 EFLAGS: 00010293
[ 80.077216][ T2288] RAX: ffffffff88150679 RBX: 1ffff11021de20a8
RCX: ffff88810fc08000
[ 80.077947][ T2288] RDX: 0000000000000000 RSI: 0000000000000000
RDI: 0000000000000000
[ 80.078701][ T2288] RBP: ffff88810ef10544 R08: ffffffff90563d7f
R09: 1ffffffff20ac7af
[ 80.079476][ T2288] R10: dffffc0000000000 R11: ffffffff8814fff0
R12: dffffc0000000000
[ 80.080242][ T2288] R13: 1ffff11021de20a1 R14: dffffc0000000000
R15: ffff888109ba8000
[ 80.081002][ T2288] ? __pfx_cxusb_medion_v_stop_streaming+0x10/0x10
[ 80.081619][ T2288] ? cxusb_medion_v_stop_streaming+0x689/0x710
[ 80.082236][ T2288] ? __pfx_cxusb_medion_v_stop_streaming+0x10/0x10
[ 80.082851][ T2288] __vb2_queue_cancel+0xba/0xdb0
[ 80.083338][ T2288] ? __pfx___mutex_lock+0x10/0x10
[ 80.083881][ T2288] __vb2_cleanup_fileio+0x4e/0x1f0
[ 80.084375][ T2288] vb2_core_queue_release+0x27/0x150
[ 80.084883][ T2288] vb2_video_unregister_device+0x15b/0x200
[ 80.085448][ T2288] cxusb_medion_unregister_analog+0xc2/0x1c0
[ 80.085989][ T2288] cxusb_disconnect+0x9b/0x1a0
[ 80.086470][ T2288] usb_unbind_interface+0x26e/0x910
[ 80.086971][ T2288] ? kernfs_remove_by_name_ns+0x101/0x140
[ 80.087518][ T2288] ? __pfx_usb_unbind_interface+0x10/0x10
[ 80.088069][ T2288] device_release_driver_internal+0x4d9/0x870
[ 80.088648][ T2288] bus_remove_device+0x455/0x570
[ 80.089130][ T2288] ? __pfx_bus_remove_device+0x10/0x10
[ 80.089645][ T2288] ? kernfs_remove_by_name_ns+0x101/0x140
[ 80.090187][ T2288] device_del+0x527/0x8f0
[ 80.090606][ T2288] ? __pfx_device_del+0x10/0x10
[ 80.091074][ T2288] ? kobject_put+0x51d/0x560
[ 80.091520][ T2288] usb_disable_device+0x3d4/0x8d0
[ 80.091981][ T2288] usb_disconnect+0x32f/0x990
[ 80.092450][ T2288] hub_event+0x1cc9/0x4f30
[ 80.092898][ T2288] ? __pfx_hub_event+0x10/0x10
[ 80.093373][ T2288] ? process_scheduled_works+0x94e/0x1900
[ 80.093970][ T2288] ? process_scheduled_works+0x94e/0x1900
[ 80.094517][ T2288] ? process_scheduled_works+0x94e/0x1900
[ 80.095066][ T2288] process_scheduled_works+0xc99/0x1900
[ 80.095601][ T2288] ? __pfx_process_scheduled_works+0x10/0x10
[ 80.096173][ T2288] ? assign_work+0x3d5/0x5e0
[ 80.096621][ T2288] worker_thread+0xa53/0xfc0
[ 80.097079][ T2288] kthread+0x38b/0x480
[ 80.097479][ T2288] ? __pfx_worker_thread+0x10/0x10
[ 80.097942][ T2288] ? __pfx_kthread+0x10/0x10
[ 80.098399][ T2288] ret_from_fork+0x514/0xb70
[ 80.098846][ T2288] ? __pfx_ret_from_fork+0x10/0x10
[ 80.099338][ T2288] ? __switch_to+0xc79/0x1410
[ 80.099789][ T2288] ? __pfx_kthread+0x10/0x10
[ 80.100236][ T2288] ret_from_fork_asm+0x1a/0x30
[ 80.100700][ T2288] </TASK>
[ 80.101280][ T2288] Kernel Offset: disabled
[ 80.101825][ T2288] Rebooting in 86400 seconds..

Regards,

Attachment: reproducer.c
Description: Binary data