cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71
------------[ cut here ]------------
URB ffff88804f3f7600 submitted while active
WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x1689/0x19b0 drivers/usb/core/urb.c:379, CPU#0: kworker/0:6/5813
Modules linked in:
CPU: 0 UID: 0 PID: 5813 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:usb_submit_urb+0x168c/0x19b0 drivers/usb/core/urb.c:379
Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 de 44 a8 fa 48 8d 3d 97 cd 85 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00
RSP: 0018:ffffc90000007b00 EFLAGS: 00010083
RAX: 00000000000038d0 RBX: ffff88804f3f7600 RCX: ffffc90002051000
RDX: 0000000000040000 RSI: ffff88804f3f7600 RDI: ffffffff90e70820
RBP: ffff88802acd9ae0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000087
R13: ffff88806bc02058 R14: 000000000000000f R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff888124323000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055558dcc44e8 CR3: 000000005b343000 CR4: 00000000003526f0
Call Trace:
cm109_submit_ctl drivers/input/misc/cm109.c:380 [inline]
cm109_urb_irq_callback+0x473/0xa70 drivers/input/misc/cm109.c:431
__usb_hcd_giveback_urb+0x38d/0x610 drivers/usb/core/hcd.c:1655
usb_hcd_giveback_urb+0x3ca/0x4a0 drivers/usb/core/hcd.c:1739
dummy_timer+0xda1/0x36c0 drivers/usb/gadget/udc/dummy_hcd.c:2005
__run_hrtimer kernel/time/hrtimer.c:2032 [inline]
__hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2096
hrtimer_run_softirq+0x17d/0x2c0 kernel/time/hrtimer.c:2113
handle_softirqs+0x1ea/0x9b0 kernel/softirq.c:622
__do_softirq kernel/softirq.c:656 [inline]
invoke_softirq kernel/softirq.c:496 [inline]
__irq_exit_rcu+0x162/0x210 kernel/softirq.c:735
irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:kcov_remote_start+0x384/0x660 kernel/kcov.c:949
Code: 0f 84 41 fe ff ff e9 0e 96 19 ff e8 96 3d 08 00 e9 0e fd ff ff e8 6c 3b 08 00 9c 58 f6 c4 02 0f 85 21 02 00 00 fb 48 83 c4 18 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 fd 50 8f 09 48 c7 c2 20 61 10 94
RSP: 0018:ffffc9000486f9b8 EFLAGS: 00000286
RAX: 0000000000000046 RBX: ffff8880b8429128 RCX: ffffffff8211ca6f
RDX: 0000000000000000 RSI: ffffffff8c1d1d80 RDI: ffffffff82099044
RBP: ffff888031f38000 R08: 0000000000000000 R09: fffffbfff21b3c32
R10: 0000000000000000 R11: ffffffff81d51f9c R12: 0000000000000200
R13: ffff888026778300 R14: 0000000000100000 R15: ffffc9001aaf7000
kcov_remote_start_usb include/linux/kcov.h:55 [inline]
hub_event+0x19d/0x4af0 drivers/usb/core/hub.c:5889
process_one_work+0xa23/0x1940 kernel/workqueue.c:3322
process_scheduled_works kernel/workqueue.c:3405 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
----------------
Code disassembly (best guess):
0: 00 48 8b add %cl,-0x75(%rax)
3: 04 24 add $0x24,%al
5: 48 8b 90 b0 00 00 00 mov 0xb0(%rax),%rdx
c: e9 70 ff ff ff jmp 0xffffff81
11: bb ed ff ff ff mov $0xffffffed,%ebx
16: e9 ac f1 ff ff jmp 0xfffff1c7
1b: e8 de 44 a8 fa call 0xfaa844fe
20: 48 8d 3d 97 cd 85 09 lea 0x985cd97(%rip),%rdi # 0x985cdbe
27: 48 89 de mov %rbx,%rsi
* 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction
2f: bb f0 ff ff ff mov $0xfffffff0,%ebx
34: e9 8e f1 ff ff jmp 0xfffff1c7
39: c7 .byte 0xc7
3a: 44 24 30 rex.R and $0x30,%al
3d: 00 00 add %al,(%rax)