------------[ cut here ]------------ URB ffff8881069add00 submitted while active WARNING: CPU: 0 PID: 6402 at drivers/usb/core/urb.c:380 usb_submit_urb+0x16f5/0x1990 drivers/usb/core/urb.c:380 Modules linked in: CPU: 0 UID: 0 PID: 6402 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:usb_submit_urb+0x16f5/0x1990 drivers/usb/core/urb.c:380 Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 33 38 b5 fa c6 05 57 ea 62 09 01 90 48 c7 c7 00 10 50 8c 48 89 de e8 8c 6a 73 fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24 RSP: 0018:ffffc900035d76e0 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffff8881069add00 RCX: ffffffff817b1cd8 RDX: ffff888024e64900 RSI: ffffffff817b1ce5 RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880258c8ed0 R13: ffff8880258c8e48 R14: ffffc900035d7798 R15: ffff8881069add00 FS: 0000000000000000(0000) GS:ffff8880d6a08000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f98d6b6168 CR3: 00000000512e1000 CR4: 0000000000352ef0 Call Trace: usb_stor_msg_common+0x23f/0x560 drivers/usb/storage/transport.c:143 usb_stor_bulk_transfer_buf+0x17c/0x410 drivers/usb/storage/transport.c:395 ene_send_scsi_cmd+0x130/0x610 drivers/usb/storage/ene_ub6250.c:502 ene_init drivers/usb/storage/ene_ub6250.c:2197 [inline] ene_transport+0x13fd/0x37f0 drivers/usb/storage/ene_ub6250.c:2310 usb_stor_invoke_transport+0xee/0x1570 drivers/usb/storage/transport.c:611 usb_stor_control_thread+0x5eb/0xb00 drivers/usb/storage/usb.c:462 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245