------------[ cut here ]------------
workqueue: work disable count underflowed
WARNING: CPU: 1 PID: 22 at kernel/workqueue.c:4317 enable_work+0x27c/0x284 kernel/workqueue.c:4488
Modules linked in:
CPU: 1 UID: 0 PID: 22 Comm: cpuhp/1 Not tainted 6.13.0-rc6-syzkaller-g6251d1776bc5 #0
pstate: 600000c5 (nZCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : enable_work+0x27c/0x284 kernel/workqueue.c:4488
lr : work_offqd_enable kernel/workqueue.c:4317 [inline]
lr : enable_work+0x278/0x284 kernel/workqueue.c:4488
sp : ffff800097b37b40
x29: ffff800097b37ba0 x28: 1ffff00011f443e5 x27: 0000000000000000
x26: 001fffffffc00001 x25: 1fffe00036702ce2 x24: 1ffff00012f66f6c
x23: 1ffff00012f66f68 x22: dfff800000000000 x21: 0000000000000000
x20: ffff800097b37b60 x19: ffff0001b3816710 x18: 0000000000000008
x17: 0000000000000000 x16: ffff80008b60619c x15: 0000000000000001
x14: 1ffff00012f66e60 x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000000002 x10: 0000000000ff0100 x9 : b1996d7606c8e700
x8 : b1996d7606c8e700 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800097b36ff8 x4 : ffff80008fa90460 x3 : ffff8000804bb710
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 enable_work+0x27c/0x284 kernel/workqueue.c:4488 (P)
 enable_delayed_work+0x20/0x34 kernel/workqueue.c:4531
 vmstat_cpu_online+0x174/0x228 mm/vmstat.c:2151
 cpuhp_invoke_callback+0x404/0x704 kernel/cpu.c:194
 cpuhp_thread_fun+0x2dc/0x5f4 kernel/cpu.c:1102
 smpboot_thread_fn+0x4b0/0x90c kernel/smpboot.c:164
 kthread+0x288/0x310 kernel/kthread.c:389
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862
irq event stamp: 106
hardirqs last  enabled at (105): [<ffff80008035f770>] queue_work_on+0x100/0x1a0 kernel/workqueue.c:2394
hardirqs last disabled at (106): [<ffff80008036164c>] try_to_grab_pending kernel/workqueue.c:2053 [inline]
hardirqs last disabled at (106): [<ffff80008036164c>] work_grab_pending+0xa8/0x834 kernel/workqueue.c:2157
softirqs last  enabled at (0): [<ffff8000802eacc4>] copy_process+0x116c/0x3250 kernel/fork.c:2339
softirqs last disabled at (0): [<0000000000000000>] 0x0
---[ end trace 0000000000000000 ]---