cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71
------------[ cut here ]------------
URB ffff88802c5fde00 submitted while active
WARNING: CPU: 1 PID: 5140 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14da/0x1730 drivers/usb/core/urb.c:379
Modules linked in:
CPU: 1 PID: 5140 Comm: kworker/1:3 Not tainted 6.9.0-rc4-syzkaller-00329-g48cf398f15fc #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Workqueue: usb_hub_wq hub_event
RIP: 0010:usb_submit_urb+0x14da/0x1730 drivers/usb/core/urb.c:379
Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 2e d1 d9 fa c6 05 50 ec d4 08 01 90 48 c7 c7 40 7b c7 8b 48 89 de e8 a7 3f 9c fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef
RSP: 0018:ffffc90000a08908 EFLAGS: 00010082
RAX: 0000000000000000 RBX: ffff88802c5fde00 RCX: ffffc900022b2000
RDX: 0000000000040000 RSI: ffffffff81503286 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000087
R13: ffff888023095858 R14: 000000000000000f R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f81acd79198 CR3: 000000001c3cc000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
cm109_urb_irq_callback+0x2e7/0xb50 drivers/input/misc/cm109.c:422
__usb_hcd_giveback_urb+0x364/0x5c0 drivers/usb/core/hcd.c:1648
usb_hcd_giveback_urb+0x396/0x450 drivers/usb/core/hcd.c:1732
dummy_timer+0x17fc/0x3940 drivers/usb/gadget/udc/dummy_hcd.c:1987
call_timer_fn+0x1a0/0x610 kernel/time/timer.c:1793
expire_timers kernel/time/timer.c:1844 [inline]
__run_timers+0x74b/0xaf0 kernel/time/timer.c:2418
__run_timer_base kernel/time/timer.c:2429 [inline]
__run_timer_base kernel/time/timer.c:2422 [inline]
run_timer_base+0x111/0x190 kernel/time/timer.c:2438
run_timer_softirq+0x1a/0x40 kernel/time/timer.c:2448
__do_softirq+0x218/0x922 kernel/softirq.c:554
invoke_softirq kernel/softirq.c:428 [inline]
__irq_exit_rcu kernel/softirq.c:633 [inline]
irq_exit_rcu+0xb9/0x120 kernel/softirq.c:645
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:194
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 1f 8d f6 48 89 df e8 ae 9b 8d f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 75 d9 7e f6 65 8b 05 56 1c 25 75 85 c0 74 16 5b
RSP: 0018:ffffc90003b4f518 EFLAGS: 00000246
RAX: 0000000000000006 RBX: ffffffff94859ca8 RCX: 1ffffffff27c0953
RDX: 0000000000000000 RSI: ffffffff8b0cae00 RDI: ffffffff8b6f5720
RBP: 0000000000000203 R08: 0000000000000001 R09: fffffbfff27bb03e
R10: ffffffff93dd81f7 R11: 1ffff1100bb14463 R12: 1ffff92000769eaa
R13: ffffc90003b4f658 R14: 0000000000000000 R15: ffffffff94859ca8
__debug_object_init+0x34a/0x480 lib/debugobjects.c:645
init_timer_on_stack_key kernel/time/timer.c:860 [inline]
schedule_timeout+0x102/0x2a0 kernel/time/timer.c:2580
do_wait_for_common kernel/sched/completion.c:95 [inline]
__wait_for_common+0x3de/0x5f0 kernel/sched/completion.c:116
usb_start_wait_urb+0x148/0x4c0 drivers/usb/core/message.c:64
usb_internal_control_msg drivers/usb/core/message.c:103 [inline]
usb_control_msg+0x327/0x4b0 drivers/usb/core/message.c:154
get_port_status drivers/usb/core/hub.c:604 [inline]
hub_ext_port_status+0x14e/0x670 drivers/usb/core/hub.c:621
usb_hub_port_status drivers/usb/core/hub.c:671 [inline]
port_event drivers/usb/core/hub.c:5714 [inline]
hub_event+0x6e0/0x4e20 drivers/usb/core/hub.c:5903
process_one_work+0x9a9/0x1ac0 kernel/workqueue.c:3254
process_scheduled_works kernel/workqueue.c:3335 [inline]
worker_thread+0x6c8/0xf70 kernel/workqueue.c:3416
kthread+0x2c1/0x3a0 kernel/kthread.c:388
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
----------------
Code disassembly (best guess):
0: f5 cmc
1: 53 push %rbx
2: 48 8b 74 24 10 mov 0x10(%rsp),%rsi
7: 48 89 fb mov %rdi,%rbx
a: 48 83 c7 18 add $0x18,%rdi
e: e8 56 1f 8d f6 call 0xf68d1f69
13: 48 89 df mov %rbx,%rdi
16: e8 ae 9b 8d f6 call 0xf68d9bc9
1b: f7 c5 00 02 00 00 test $0x200,%ebp
21: 75 23 jne 0x46
23: 9c pushf
24: 58 pop %rax
25: f6 c4 02 test $0x2,%ah
28: 75 37 jne 0x61
* 2a: bf 01 00 00 00 mov $0x1,%edi <-- trapping instruction
2f: e8 75 d9 7e f6 call 0xf67ed9a9
34: 65 8b 05 56 1c 25 75 mov %gs:0x75251c56(%rip),%eax # 0x75251c91
3b: 85 c0 test %eax,%eax
3d: 74 16 je 0x55
3f: 5b pop %rbx