cm109 14-1:0.8: cm109_urb_irq_callback: urb status -71 ------------[ cut here ]------------ URB ffff8880427b8f00 submitted while active WARNING: CPU: 0 PID: 24561 at drivers/usb/core/urb.c:380 usb_submit_urb+0x16f5/0x1990 drivers/usb/core/urb.c:380 Modules linked in: CPU: 0 UID: 0 PID: 24561 Comm: syz.5.5552 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:usb_submit_urb+0x16f5/0x1990 drivers/usb/core/urb.c:380 Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 73 20 b5 fa c6 05 57 db 62 09 01 90 48 c7 c7 a0 14 50 8c 48 89 de e8 cc 53 73 fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24 RSP: 0000:ffffc90007c0f9c8 EFLAGS: 00010086 RAX: 0000000000000000 RBX: ffff8880427b8f00 RCX: ffffffff817b1cd8 RDX: ffff88802a80c900 RSI: ffffffff817b1ce5 RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 R13: ffff8880566aa057 R14: ffff8880246e47a0 R15: 000000000000000f FS: 0000555567c2b500(0000) GS:ffff8880d6a05000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c3e828e CR3: 0000000057960000 CR4: 0000000000352ef0 Call Trace: cm109_submit_ctl drivers/input/misc/cm109.c:380 [inline] cm109_urb_irq_callback+0x2ed/0xb80 drivers/input/misc/cm109.c:431 __usb_hcd_giveback_urb+0x38b/0x610 drivers/usb/core/hcd.c:1661 usb_hcd_giveback_urb+0x39b/0x450 drivers/usb/core/hcd.c:1745 dummy_timer+0x1809/0x3a00 drivers/usb/gadget/udc/dummy_hcd.c:1995 __run_hrtimer kernel/time/hrtimer.c:1777 [inline] __hrtimer_run_queues+0x202/0xad0 kernel/time/hrtimer.c:1841 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1858 handle_softirqs+0x219/0x8e0 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x109/0x170 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline] sysvec_apic_timer_interrupt+0x57/0xc0 arch/x86/kernel/apic/apic.c:1052 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0033:0x7f5a3f46efcb Code: 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c5 c1 ed 04 31 c5 69 ed 2d eb d4 27 89 e8 c1 e8 0f 31 c5 81 e5 ff 0f 00 00 48 31 d5 <80> 3d 76 30 37 00 00 0f 84 a8 00 00 00 4c 89 f6 48 8b 0d 56 30 37 RSP: 002b:00007ffdfff82b40 EFLAGS: 00000246 RAX: ffffffff8a0b0d5a RBX: 00007f5a40315720 RCX: 000000000003e6ad RDX: ffffffff8a0b0da7 RSI: ffffffff8a0b0d5a RDI: 0000000000000018 RBP: ffffffff8a0b0da7 R08: 00007f5a3f7e6038 R09: 00007f5a3f7d2000 R10: 00007f5a3efff008 R11: 0000000000000018 R12: 0000000000000018 R13: 0000000000000000 R14: ffffffff8a0b0da7 R15: 000000000003e6ad