cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
------------[ cut here ]------------
URB ffff888015fa8700 submitted while active
WARNING: CPU: 0 PID: 8 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14d6/0x1730 drivers/usb/core/urb.c:379
Modules linked in:
CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
Workqueue: usb_hub_wq hub_event
RIP: 0010:usb_submit_urb+0x14d6/0x1730 drivers/usb/core/urb.c:379
Code: fe eb cb bb fe ff ff ff e9 c5 f3 ff ff e8 02 46 07 fb c6 05 c1 14 83 08 01 90 48 c7 c7 c0 fb 85 8b 48 89 de e8 1b 6c cd fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 95 f3 ff ff 48 89 ef
RSP: 0018:ffffc90000007950 EFLAGS: 00010086
RAX: 0000000000000000 RBX: ffff888015fa8700 RCX: ffffffff814db209
RDX: ffff888017e45940 RSI: ffffffff814db216 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000007 R12: 0000000000000046
R13: ffff88801f6a3058 R14: 000000000000000f R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002000227c CR3: 0000000077dd9000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 cm109_urb_irq_callback+0x2e7/0xb50 drivers/input/misc/cm109.c:422
 __usb_hcd_giveback_urb+0x359/0x5c0 drivers/usb/core/hcd.c:1650
 usb_hcd_giveback_urb+0x389/0x430 drivers/usb/core/hcd.c:1733
 dummy_timer+0x1415/0x3600 drivers/usb/gadget/udc/dummy_hcd.c:1987
 call_timer_fn+0x193/0x590 kernel/time/timer.c:1700
 expire_timers kernel/time/timer.c:1751 [inline]
 __run_timers+0x764/0xb20 kernel/time/timer.c:2022
 run_timer_softirq+0x58/0xd0 kernel/time/timer.c:2035
 __do_softirq+0x21a/0x8de kernel/softirq.c:553
 invoke_softirq kernel/softirq.c:427 [inline]
 __irq_exit_rcu kernel/softirq.c:632 [inline]
 irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644
 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1076
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:console_flush_all+0xa0e/0xd60 kernel/printk/printk.c:2973
Code: e8 d7 7b 23 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 85 be 1c 00 48 85 db 0f 85 7c 01 00 00 e8 e7 c2 1c 00 fb 48 8b 04 24 <4c> 89 fa 83 e2 07 0f b6 00 38 d0 7f 08 84 c0 0f 85 55 02 00 00 41
RSP: 0018:ffffc900000d75b8 EFLAGS: 00000293
RAX: fffff5200001aede RBX: 0000000000000000 RCX: ffffffff816ac74b
RDX: ffff888017e45940 RSI: ffffffff816ac759 RDI: 0000000000000007
RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000006 R12: 0000000000000000
R13: ffffffff8db95238 R14: ffffffff8db951e0 R15: ffffc900000d76f0
 console_unlock+0x10c/0x260 kernel/printk/printk.c:3036
 vprintk_emit+0x17f/0x5f0 kernel/printk/printk.c:2303
 dev_vprintk_emit drivers/base/core.c:4850 [inline]
 dev_printk_emit+0xfb/0x140 drivers/base/core.c:4861
 __dev_printk+0xf5/0x270 drivers/base/core.c:4873
 _dev_info+0xe5/0x120 drivers/base/core.c:4919
 usb_disconnect+0xec/0x910 drivers/usb/core/hub.c:2219
 hub_port_connect drivers/usb/core/hub.c:5280 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5580 [inline]
 port_event drivers/usb/core/hub.c:5740 [inline]
 hub_event+0x1db7/0x4e10 drivers/usb/core/hub.c:5822
 process_one_work+0x886/0x15d0 kernel/workqueue.c:2630
 process_scheduled_works kernel/workqueue.c:2703 [inline]
 worker_thread+0x8b9/0x1290 kernel/workqueue.c:2784
 kthread+0x2c6/0x3a0 kernel/kthread.c:388
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
 </TASK>
----------------
Code disassembly (best guess):
   0:	e8 d7 7b 23 00       	call   0x237bdc
   5:	9c                   	pushf
   6:	5b                   	pop    %rbx
   7:	81 e3 00 02 00 00    	and    $0x200,%ebx
   d:	31 ff                	xor    %edi,%edi
   f:	48 89 de             	mov    %rbx,%rsi
  12:	e8 85 be 1c 00       	call   0x1cbe9c
  17:	48 85 db             	test   %rbx,%rbx
  1a:	0f 85 7c 01 00 00    	jne    0x19c
  20:	e8 e7 c2 1c 00       	call   0x1cc30c
  25:	fb                   	sti
  26:	48 8b 04 24          	mov    (%rsp),%rax
* 2a:	4c 89 fa             	mov    %r15,%rdx <-- trapping instruction
  2d:	83 e2 07             	and    $0x7,%edx
  30:	0f b6 00             	movzbl (%rax),%eax
  33:	38 d0                	cmp    %dl,%al
  35:	7f 08                	jg     0x3f
  37:	84 c0                	test   %al,%al
  39:	0f 85 55 02 00 00    	jne    0x294
  3f:	41                   	rex.B