cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 ------------[ cut here ]------------ URB ffff88801f704400 submitted while active WARNING: CPU: 1 PID: 6308 at drivers/usb/core/urb.c:378 usb_submit_urb+0x10b1/0x1990 drivers/usb/core/urb.c:378 Modules linked in: CPU: 1 PID: 6308 Comm: kworker/1:35 Not tainted 5.15.157-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:usb_submit_urb+0x10b1/0x1990 drivers/usb/core/urb.c:378 Code: 8a 64 fb eb 4d e8 9f 8a 64 fb e9 fc ef ff ff e8 95 8a 64 fb c6 05 30 40 b5 07 01 48 c7 c7 c0 95 22 8b 4c 89 ee e8 af 32 30 fb <0f> 0b e9 c7 ef ff ff e8 73 8a 64 fb eb 1a e8 6c 8a 64 fb eb 13 e8 RSP: 0018:ffffc90000dd0738 EFLAGS: 00010046 RAX: 8824ed100f87cd00 RBX: ffff888078963848 RCX: 0000000000040000 RDX: ffffc90002209000 RSI: 0000000000001f2f RDI: 0000000000001f30 RBP: ffff88801f704408 R08: ffffffff8166862c R09: fffffbfff19228c5 R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 R13: ffff88801f704400 R14: 0000000000000a20 R15: ffff888016d6a8c1 FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8836ed0000 CR3: 0000000056f26000 CR4: 00000000003526e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: cm109_urb_irq_callback+0x6c4/0xc20 drivers/input/misc/cm109.c:422 __usb_hcd_giveback_urb+0x371/0x530 drivers/usb/core/hcd.c:1674 dummy_timer+0x8ad/0x3200 drivers/usb/gadget/udc/dummy_hcd.c:1987 call_timer_fn+0x16d/0x560 kernel/time/timer.c:1451 expire_timers kernel/time/timer.c:1496 [inline] __run_timers+0x67c/0x890 kernel/time/timer.c:1767 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1780 __do_softirq+0x3b3/0x93a kernel/softirq.c:558 invoke_softirq kernel/softirq.c:432 [inline] __irq_exit_rcu+0x155/0x240 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1096 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:console_unlock+0xe53/0x12b0 kernel/printk/printk.c:2749 Code: 00 48 83 7c 24 18 00 75 19 e8 79 03 1a 00 eb 18 e8 72 03 1a 00 e8 3d 74 b7 08 48 83 7c 24 18 00 74 e7 e8 60 03 1a 00 fb 31 ff <44> 89 f6 e8 b5 06 1a 00 31 db 45 85 f6 0f 95 c0 89 c1 0a 4c 24 17 RSP: 0018:ffffc900033e7260 EFLAGS: 00000246 RAX: ffffffff81665980 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc9000e410000 RSI: 0000000000001ea5 RDI: 0000000000000000 RBP: ffffc900033e74f0 R08: ffffffff8166594b R09: fffffbfff1f7ee19 R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1a4b15e R13: ffffffff8d258b28 R14: 0000000000000000 R15: dffffc0000000000 vprintk_emit+0xbf/0x150 kernel/printk/printk.c:2274 dev_vprintk_emit+0x2aa/0x330 drivers/base/core.c:4615 dev_printk_emit+0xd9/0x120 drivers/base/core.c:4626 _dev_info+0x11e/0x170 drivers/base/core.c:4684 usb_disconnect+0xde/0x8c0 drivers/usb/core/hub.c:2230 hub_port_connect drivers/usb/core/hub.c:5298 [inline] hub_port_connect_change drivers/usb/core/hub.c:5594 [inline] port_event drivers/usb/core/hub.c:5740 [inline] hub_event+0x1d58/0x54c0 drivers/usb/core/hub.c:5822 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310 worker_thread+0xaca/0x1280 kernel/workqueue.c:2457 kthread+0x3f6/0x4f0 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:300 ---------------- Code disassembly (best guess): 0: 00 48 83 add %cl,-0x7d(%rax) 3: 7c 24 jl 0x29 5: 18 00 sbb %al,(%rax) 7: 75 19 jne 0x22 9: e8 79 03 1a 00 call 0x1a0387 e: eb 18 jmp 0x28 10: e8 72 03 1a 00 call 0x1a0387 15: e8 3d 74 b7 08 call 0x8b77457 1a: 48 83 7c 24 18 00 cmpq $0x0,0x18(%rsp) 20: 74 e7 je 0x9 22: e8 60 03 1a 00 call 0x1a0387 27: fb sti 28: 31 ff xor %edi,%edi * 2a: 44 89 f6 mov %r14d,%esi <-- trapping instruction 2d: e8 b5 06 1a 00 call 0x1a06e7 32: 31 db xor %ebx,%ebx 34: 45 85 f6 test %r14d,%r14d 37: 0f 95 c0 setne %al 3a: 89 c1 mov %eax,%ecx 3c: 0a 4c 24 17 or 0x17(%rsp),%cl