cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71
------------[ cut here ]------------
URB ffff888019ac0100 submitted while active
WARNING: CPU: 0 PID: 5906 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14da/0x1730 drivers/usb/core/urb.c:379
Modules linked in:
CPU: 0 PID: 5906 Comm: udevd Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:usb_submit_urb+0x14da/0x1730 drivers/usb/core/urb.c:379
Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 9e 15 e1 fa c6 05 0d 34 dc 08 01 90 48 c7 c7 e0 6c c6 8b 48 89 de e8 27 cb a3 fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef
RSP: 0018:ffffc90000007908 EFLAGS: 00010082
RAX: 0000000000000000 RBX: ffff888019ac0100 RCX: ffffc900020b1000
RDX: 0000000000040000 RSI: ffffffff814faff6 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000005 R12: 0000000000000083
R13: ffff8880231eb058 R14: 000000000000000f R15: 0000000000000001
FS: 00007fb86713fc80(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b31c2a000 CR3: 0000000020694000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
cm109_urb_irq_callback+0x2e7/0xb50 drivers/input/misc/cm109.c:422
__usb_hcd_giveback_urb+0x364/0x5c0 drivers/usb/core/hcd.c:1650
usb_hcd_giveback_urb+0x396/0x450 drivers/usb/core/hcd.c:1734
dummy_timer+0x17fb/0x3930 drivers/usb/gadget/udc/dummy_hcd.c:1987
call_timer_fn+0x1a0/0x5b0 kernel/time/timer.c:1792
expire_timers kernel/time/timer.c:1843 [inline]
__run_timers+0x74b/0xab0 kernel/time/timer.c:2408
__run_timer_base kernel/time/timer.c:2419 [inline]
__run_timer_base kernel/time/timer.c:2412 [inline]
run_timer_base+0x111/0x190 kernel/time/timer.c:2428
run_timer_softirq+0x1a/0x40 kernel/time/timer.c:2438
__do_softirq+0x218/0x8de kernel/softirq.c:554
invoke_softirq kernel/softirq.c:428 [inline]
__irq_exit_rcu kernel/softirq.c:633 [inline]
irq_exit_rcu+0xb9/0x120 kernel/softirq.c:645
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:stack_access_ok+0x1f9/0x270 arch/x86/kernel/unwind_orc.c:394
Code: fd 0f 83 d3 fe ff ff e8 85 62 50 00 48 8b 44 24 08 48 01 e8 49 39 c6 48 89 04 24 0f 83 b9 fe ff ff e8 6b 62 50 00 48 8b 04 24 <41> be 01 00 00 00 49 39 c7 0f 83 ec fe ff ff e9 9c fe ff ff 48 89
RSP: 0018:ffffc900035ef800 EFLAGS: 00000293
RAX: ffffc900035efc38 RBX: ffffc900035ef8c8 RCX: ffffffff813c94e6
RDX: ffff8880207fbc00 RSI: ffffffff813c9645 RDI: 0000000000000005
RBP: ffffc900035efc30 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000003 R12: ffffc900035ef8d0
R13: ffffc900035ef8d8 R14: ffffc900035e8000 R15: ffffc900035f0000
deref_stack_reg arch/x86/kernel/unwind_orc.c:403 [inline]
unwind_next_frame+0xd9b/0x23a0 arch/x86/kernel/unwind_orc.c:585
arch_stack_walk+0x100/0x170 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
__kasan_record_aux_stack+0xba/0xd0 mm/kasan/generic.c:541
__call_rcu_common.constprop.0+0x9a/0x790 kernel/rcu/tree.c:2734
dentry_free+0xc2/0x160 fs/dcache.c:376
__dentry_kill+0x498/0x600 fs/dcache.c:622
dput.part.0+0x4b1/0x9b0 fs/dcache.c:845
dput+0x1f/0x30 fs/dcache.c:835
do_renameat2+0xc64/0xdc0 fs/namei.c:5042
__do_sys_rename fs/namei.c:5087 [inline]
__se_sys_rename fs/namei.c:5085 [inline]
__x64_sys_rename+0x81/0xa0 fs/namei.c:5085
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xd2/0x260 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x6d/0x75
RIP: 0033:0x7fb866c9a93b
Code: 48 8b 15 f0 64 15 00 83 c8 ff 64 83 3a 15 75 0e 48 8b 7c 24 08 e8 d5 d4 07 00 f7 d8 19 c0 48 83 c4 18 c3 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 be 64 15 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffe309b1658 EFLAGS: 00000206 ORIG_RAX: 0000000000000052
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb866c9a93b
RDX: 00005631c284bf80 RSI: 00007ffe309b1678 RDI: 00007ffe309b1a78
RBP: 00005634a1d2f460 R08: 0000000000000006 R09: b927e5e07fb58f34
R10: 00000000000001b6 R11: 0000000000000206 R12: 00005634a1cb06f0
R13: 00007ffe309b1678 R14: 00007ffe309b1a78 R15: 0000563494412160
----------------
Code disassembly (best guess):
0: fd std
1: 0f 83 d3 fe ff ff jae 0xfffffeda
7: e8 85 62 50 00 call 0x506291
c: 48 8b 44 24 08 mov 0x8(%rsp),%rax
11: 48 01 e8 add %rbp,%rax
14: 49 39 c6 cmp %rax,%r14
17: 48 89 04 24 mov %rax,(%rsp)
1b: 0f 83 b9 fe ff ff jae 0xfffffeda
21: e8 6b 62 50 00 call 0x506291
26: 48 8b 04 24 mov (%rsp),%rax
* 2a: 41 be 01 00 00 00 mov $0x1,%r14d <-- trapping instruction
30: 49 39 c7 cmp %rax,%r15
33: 0f 83 ec fe ff ff jae 0xffffff25
39: e9 9c fe ff ff jmp 0xfffffeda
3e: 48 rex.W
3f: 89 .byte 0x89