------------[ cut here ]------------
URB 0000000096c3bc83 submitted while active
WARNING: CPU: 0 PID: 13815 at drivers/usb/core/urb.c:378 usb_submit_urb+0x1228/0x14e0 drivers/usb/core/urb.c:378
Modules linked in:
CPU: 0 PID: 13815 Comm: kworker/0:7 Not tainted 5.10.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
RIP: 0010:usb_submit_urb+0x1228/0x14e0 drivers/usb/core/urb.c:378
Code: 89 de e8 6b d2 3b fc 84 db 0f 85 da f4 ff ff e8 4e da 3b fc 4c 89 fe 48 c7 c7 00 57 e1 89 c6 05 d1 71 a4 07 01 e8 e4 28 78 03 <0f> 0b e9 b8 f4 ff ff c7 44 24 14 01 00 00 00 e9 6f f5 ff ff 41 bd
RSP: 0018:ffffc90000007b70 EFLAGS: 00010086
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88806c409a40 RSI: ffffffff8158c855 RDI: fffff52000000f60
RBP: 0000000000000000 R08: 0000000000000001 R09: ffff8880b9e2011b
R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880255bd370
R13: 00000000fffffff0 R14: ffffffff85a184d0 R15: ffff888019ebf500
FS:  0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffee005a9c8 CR3: 0000000023bb5000 CR4: 00000000001526f0
Call Trace:
 <IRQ>
 cm109_submit_buzz_toggle+0xd0/0x130 drivers/input/misc/cm109.c:351
 cm109_toggle_buzzer_async drivers/input/misc/cm109.c:487 [inline]
 cm109_input_ev+0x1ea/0x230 drivers/input/misc/cm109.c:621
 input_handle_event+0x66e/0x1400 drivers/input/input.c:376
 input_inject_event+0x2f5/0x310 drivers/input/input.c:471
 kd_sound_helper+0x122/0x260 drivers/tty/vt/keyboard.c:242
 input_handler_for_each_handle+0xf4/0x210 drivers/input/input.c:2356
 call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1410
 expire_timers kernel/time/timer.c:1455 [inline]
 __run_timers.part.0+0x67c/0xa50 kernel/time/timer.c:1747
 __run_timers kernel/time/timer.c:1728 [inline]
 run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1760
 __do_softirq+0x2a0/0x9f6 kernel/softirq.c:298
 asm_call_irq_on_stack+0xf/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0xaa/0xd0 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:393 [inline]
 __irq_exit_rcu kernel/softirq.c:423 [inline]
 irq_exit_rcu+0x132/0x200 kernel/softirq.c:435
 sysvec_apic_timer_interrupt+0x4d/0x100 arch/x86/kernel/apic/apic.c:1091
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:631
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/irqflags.h:85 [inline]
RIP: 0010:lock_acquire kernel/locking/lockdep.c:5440 [inline]
RIP: 0010:lock_acquire+0x2c7/0x740 kernel/locking/lockdep.c:5402
Code: 48 c7 c7 40 5f 4b 89 48 83 c4 20 e8 33 45 8f 07 b8 ff ff ff ff 65 0f c1 05 36 d2 ab 7e 83 f8 01 0f 85 36 03 00 00 ff 34 24 9d <e9> 3a fe ff ff 65 ff 05 dd c0 ab 7e 48 8b 05 56 ba 82 0b e8 c1 39
RSP: 0018:ffffc9000122f0f8 EFLAGS: 00000246
RAX: 0000000000000001 RBX: 1ffff92000245e21 RCX: 0000000000000001
RDX: 1ffff1100d88146a RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8ebae66f
R10: fffffbfff1d75ccd R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff8b4d9ca8 R14: 0000000000000000 R15: 0000000000000000
 __mutex_lock_common kernel/locking/mutex.c:956 [inline]
 __mutex_lock+0x134/0x10e0 kernel/locking/mutex.c:1103
 kernfs_find_and_get_ns+0x21/0x60 fs/kernfs/dir.c:905
 kernfs_find_and_get include/linux/kernfs.h:548 [inline]
 sysfs_merge_group+0xb8/0x320 fs/sysfs/group.c:336
 dpm_sysfs_add+0x23e/0x290 drivers/base/power/sysfs.c:707
 device_add+0xa4e/0x1ce0 drivers/base/core.c:2893
 usb_create_ep_devs+0x15c/0x2a0 drivers/usb/core/endpoint.c:196
 create_intf_ep_devs.isra.0+0x158/0x1f0 drivers/usb/core/message.c:1244
 usb_set_configuration+0x115e/0x1910 drivers/usb/core/message.c:2165
 usb_generic_driver_probe+0xba/0x100 drivers/usb/core/generic.c:238
 usb_probe_device+0xd9/0x2c0 drivers/usb/core/driver.c:293
 really_probe+0x291/0xde0 drivers/base/dd.c:554
 driver_probe_device+0x26b/0x3d0 drivers/base/dd.c:738
 __device_attach_driver+0x1d1/0x290 drivers/base/dd.c:844
 bus_for_each_drv+0x15f/0x1e0 drivers/base/bus.c:431
 __device_attach+0x228/0x4a0 drivers/base/dd.c:912
 bus_probe_device+0x1e4/0x290 drivers/base/bus.c:491
 device_add+0xbb2/0x1ce0 drivers/base/core.c:2936
 usb_new_device.cold+0x71d/0xfe9 drivers/usb/core/hub.c:2554
 hub_port_connect drivers/usb/core/hub.c:5222 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5362 [inline]
 port_event drivers/usb/core/hub.c:5508 [inline]
 hub_event+0x2348/0x42d0 drivers/usb/core/hub.c:5590
 process_one_work+0x933/0x15a0 kernel/workqueue.c:2272
 worker_thread+0x64c/0x1120 kernel/workqueue.c:2418
 kthread+0x3b1/0x4a0 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296