cm109 12-1:0.8: cm109_urb_irq_callback: urb status -71
------------[ cut here ]------------
URB ffff888021b36800 submitted while active
WARNING: CPU: 2 PID: 0 at drivers/usb/core/urb.c:380 usb_submit_urb+0x16f5/0x1990 drivers/usb/core/urb.c:380
Modules linked in:
CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:usb_submit_urb+0x16f5/0x1990 drivers/usb/core/urb.c:380
Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 33 0b b5 fa c6 05 4a c7 62 09 01 90 48 c7 c7 40 16 50 8c 48 89 de e8 7c 3e 73 fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24
RSP: 0018:ffffc90000648a90 EFLAGS: 00010082
RAX: 0000000000000000 RBX: ffff888021b36800 RCX: ffffffff817b1cd8
RDX: ffff88801dea4900 RSI: ffffffff817b1ce5 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001
R13: ffff88802b15c857 R14: ffff888032dfc2e0 R15: 000000000000000f
FS:  0000000000000000(0000) GS:ffff8880d6c05000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c2cec8d CR3: 000000005c179000 CR4: 0000000000352ef0
Call Trace:
 <IRQ>
 cm109_submit_ctl drivers/input/misc/cm109.c:380 [inline]
 cm109_urb_irq_callback+0x2ed/0xb80 drivers/input/misc/cm109.c:431
 __usb_hcd_giveback_urb+0x38b/0x610 drivers/usb/core/hcd.c:1661
 usb_hcd_giveback_urb+0x39b/0x450 drivers/usb/core/hcd.c:1745
 dummy_timer+0x1809/0x3a00 drivers/usb/gadget/udc/dummy_hcd.c:1995
 __run_hrtimer kernel/time/hrtimer.c:1777 [inline]
 __hrtimer_run_queues+0x202/0xad0 kernel/time/hrtimer.c:1841
 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1858
 handle_softirqs+0x219/0x8e0 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0x109/0x170 kernel/softirq.c:723
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline]
 sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1052
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:default_idle_call+0x98/0xb0 kernel/sched/idle.c:131
Code: 3c 24 e8 eb d8 ff ff e8 86 e9 ff ff 90 e8 50 f1 ff ff bf ff ff ff ff 89 c6 e8 94 13 30 f6 e8 cf e4 2f f6 e8 ca ff 63 f6 fb 90 <c3> cc cc cc cc 90 0f 0b 90 eb ab 66 2e 0f 1f 84 00 00 00 00 00 0f
RSP: 0018:ffffc90000187df8 EFLAGS: 00000206
RAX: 0000000000264ee1 RBX: 0000000000000002 RCX: ffffffff8190fda1
RDX: 0000000000000000 RSI: ffffffff8da2c59c RDI: ffffffff8bf073c0
RBP: ffffed1003bd4920 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff908216d7 R11: 0000000000000001 R12: 0000000000000002
R13: ffff88801dea4900 R14: ffffffff908216d0 R15: 0000000000000000
 cpuidle_idle_call kernel/sched/idle.c:190 [inline]
 do_idle+0x38d/0x500 kernel/sched/idle.c:330
 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:428
 start_secondary+0x21d/0x2b0 arch/x86/kernel/smpboot.c:315
 common_startup_64+0x13e/0x148
 </TASK>
----------------
Code disassembly (best guess):
   0:	3c 24                	cmp    $0x24,%al
   2:	e8 eb d8 ff ff       	call   0xffffd8f2
   7:	e8 86 e9 ff ff       	call   0xffffe992
   c:	90                   	nop
   d:	e8 50 f1 ff ff       	call   0xfffff162
  12:	bf ff ff ff ff       	mov    $0xffffffff,%edi
  17:	89 c6                	mov    %eax,%esi
  19:	e8 94 13 30 f6       	call   0xf63013b2
  1e:	e8 cf e4 2f f6       	call   0xf62fe4f2
  23:	e8 ca ff 63 f6       	call   0xf663fff2
  28:	fb                   	sti
  29:	90                   	nop
* 2a:	c3                   	ret <-- trapping instruction
  2b:	cc                   	int3
  2c:	cc                   	int3
  2d:	cc                   	int3
  2e:	cc                   	int3
  2f:	90                   	nop
  30:	0f 0b                	ud2
  32:	90                   	nop
  33:	eb ab                	jmp    0xffffffe0
  35:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  3c:	00 00 00
  3f:	0f                   	.byte 0xf