cm109 2-1:0.0: cm109_urb_irq_callback: urb status -71
------------[ cut here ]------------
URB 000000004b7e1811 submitted while active
WARNING: CPU: 1 PID: 3619 at drivers/usb/core/urb.c:378 usb_submit_urb+0x14e2/0x18a0 drivers/usb/core/urb.c:378
Modules linked in:
CPU: 1 PID: 3619 Comm: udevd Not tainted 5.16.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:usb_submit_urb+0x14e2/0x18a0 drivers/usb/core/urb.c:378
Code: 89 de e8 a1 66 10 fc 84 db 0f 85 a9 f3 ff ff e8 b4 62 10 fc 4c 89 fe 48 c7 c7 20 58 4a 8a c6 05 a9 8e 15 08 01 e8 8b 90 9a 03 <0f> 0b e9 87 f3 ff ff 41 be ed ff ff ff e9 7c f3 ff ff e8 87 62 10
RSP: 0018:ffffc90000dc09d0 EFLAGS: 00010082
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88807e0c9d00 RSI: ffffffff815f12d8 RDI: fffff520001b812c
RBP: ffff8880121cdcd0 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff815eb07e R11: 0000000000000000 R12: 0000000000000046
R13: ffff88801e6e1058 R14: 00000000fffffff0 R15: ffff888013ff9500
FS: 00007fe71e129840(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe71e290150 CR3: 000000006f807000 CR4: 0000000000350ee0
Call Trace:
cm109_urb_irq_callback+0x44c/0xaa0 drivers/input/misc/cm109.c:422
__usb_hcd_giveback_urb+0x2b0/0x5c0 drivers/usb/core/hcd.c:1656
usb_hcd_giveback_urb+0x367/0x410 drivers/usb/core/hcd.c:1726
dummy_timer+0x11f9/0x32b0 drivers/usb/gadget/udc/dummy_hcd.c:1987
call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1421
expire_timers kernel/time/timer.c:1466 [inline]
__run_timers.part.0+0x675/0xa20 kernel/time/timer.c:1734
__run_timers kernel/time/timer.c:1715 [inline]
run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1747
__do_softirq+0x29b/0x9c2 kernel/softirq.c:558
invoke_softirq kernel/softirq.c:432 [inline]
__irq_exit_rcu+0x123/0x180 kernel/softirq.c:637
irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:__kasan_check_write+0x4/0x10 mm/kasan/shadow.c:37
Code: 5d 41 5c 41 5d c3 c3 e9 10 77 45 07 cc cc cc cc cc cc cc cc cc cc 48 8b 0c 24 89 f6 31 d2 e9 f3 f9 ff ff 0f 1f 00 48 8b 0c 24 <89> f6 ba 01 00 00 00 e9 e0 f9 ff ff 55 53 48 8b 07 48 89 fb 48 85
RSP: 0018:ffffc9000281fd48 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000fe0 RCX: ffffffff83fdd28d
RDX: ffff88807e0c9d00 RSI: 0000000000000fe0 RDI: ffff88801e5fa220
RBP: 00007ffc1276e3f8 R08: 00007fffffffefff R09: 0000000000000000
R10: ffffffff83fdd26b R11: 0000000000000000 R12: 00007ffc1276e3f8
R13: ffff88801e5fa220 R14: ffff88801e5fa220 R15: ffffffff8d918388
strncpy_from_user+0x9d/0x3e0 lib/strncpy_from_user.c:136
getname_flags.part.0+0x95/0x4f0 fs/namei.c:149
getname_flags+0x9a/0xe0 include/linux/audit.h:323
user_path_at_empty+0x2b/0x60 fs/namei.c:2800
do_readlinkat+0xcd/0x2f0 fs/stat.c:443
__do_sys_readlink fs/stat.c:476 [inline]
__se_sys_readlink fs/stat.c:473 [inline]
__x64_sys_readlink+0x74/0xb0 fs/stat.c:473
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fe71e282277
Code: 73 01 c3 48 8b 0d 01 dc 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d d1 db 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffc1276df08 EFLAGS: 00000246 ORIG_RAX: 0000000000000059
RAX: ffffffffffffffda RBX: 00007ffc1276df18 RCX: 00007fe71e282277
RDX: 0000000000000400 RSI: 00007ffc1276df18 RDI: 00007ffc1276e3f8
RBP: 0000000000000400 R08: 0000000003ffffff R09: 00007fe71e350a60
R10: 0000562766ea5560 R11: 0000000000000246 R12: 00007ffc1276e3f8
R13: 00007ffc1276e368 R14: 0000562766e7c910 R15: 00005627658a0a7c
----------------
Code disassembly (best guess):
0: 5d pop %rbp
1: 41 5c pop %r12
3: 41 5d pop %r13
5: c3 retq
6: c3 retq
7: e9 10 77 45 07 jmpq 0x745771c
c: cc int3
d: cc int3
e: cc int3
f: cc int3
10: cc int3
11: cc int3
12: cc int3
13: cc int3
14: cc int3
15: cc int3
16: 48 8b 0c 24 mov (%rsp),%rcx
1a: 89 f6 mov %esi,%esi
1c: 31 d2 xor %edx,%edx
1e: e9 f3 f9 ff ff jmpq 0xfffffa16
23: 0f 1f 00 nopl (%rax)
26: 48 8b 0c 24 mov (%rsp),%rcx
* 2a: 89 f6 mov %esi,%esi <-- trapping instruction
2c: ba 01 00 00 00 mov $0x1,%edx
31: e9 e0 f9 ff ff jmpq 0xfffffa16
36: 55 push %rbp
37: 53 push %rbx
38: 48 8b 07 mov (%rdi),%rax
3b: 48 89 fb mov %rdi,%rbx
3e: 48 rex.W
3f: 85 .byte 0x85