cm109 10-1:0.8: cm109_urb_irq_callback: urb status -71
------------[ cut here ]------------
URB ffff88805671f500 submitted while active
WARNING: CPU: 1 PID: 54 at drivers/usb/core/urb.c:379 usb_submit_urb+0xf95/0x1850 drivers/usb/core/urb.c:379
Modules linked in:
CPU: 1 PID: 54 Comm: kworker/1:2 Not tainted 6.6.98-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: events_power_efficient gc_worker
RIP: 0010:usb_submit_urb+0xf95/0x1850 drivers/usb/core/urb.c:379
Code: 04 00 00 eb 58 e8 eb ce 35 fb e9 1a f1 ff ff e8 e1 ce 35 fb c6 05 6a 64 e5 07 01 48 c7 c7 20 d1 4a 8b 48 89 de e8 2b 33 00 fb <0f> 0b e9 e5 f0 ff ff e8 bf ce 35 fb eb 11 e8 b8 ce 35 fb bd 80 00
RSP: 0018:ffffc900001f0860 EFLAGS: 00010046
RAX: bd5b49ae643fba00 RBX: ffff88805671f500 RCX: 0000000000040000
RDX: ffffc90002331000 RSI: 000000000001a06f RDI: 000000000001a070
RBP: 000000000000000f R08: ffff8880b8f28c13 R09: 1ffff110171e5182
R10: dffffc0000000000 R11: ffffed10171e5183 R12: 1ffff11003ae670a
R13: dffffc0000000000 R14: ffff88805671f508 R15: 0000000000000820
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f61184ae133 CR3: 000000002fa2e000 CR4: 00000000003506e0
Call Trace:
cm109_urb_irq_callback+0x72c/0xc90 drivers/input/misc/cm109.c:422
__usb_hcd_giveback_urb+0x35f/0x520 drivers/usb/core/hcd.c:1650
dummy_timer+0x8a3/0x31b0 drivers/usb/gadget/udc/dummy_hcd.c:1993
__run_hrtimer kernel/time/hrtimer.c:1755 [inline]
__hrtimer_run_queues+0x51e/0xc40 kernel/time/hrtimer.c:1819
hrtimer_run_softirq+0x187/0x2b0 kernel/time/hrtimer.c:1836
handle_softirqs+0x280/0x820 kernel/softirq.c:578
__do_softirq kernel/softirq.c:612 [inline]
invoke_softirq kernel/softirq.c:452 [inline]
__irq_exit_rcu+0xc7/0x190 kernel/softirq.c:661
irq_exit_rcu+0x9/0x20 kernel/softirq.c:673
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline]
sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1088
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:lock_is_held_type+0xb/0x190 kernel/locking/lockdep.c:5810
Code: c7 c7 e0 b7 aa 8a 48 c7 c6 20 b8 aa 8a e8 5d 70 e1 f6 0f 0b eb bf e8 84 fc ff ff 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 55 <41> 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 bd
RSP: 0018:ffffc90000bf7918 EFLAGS: 00000202
RAX: 0000000000000001 RBX: 1ffff9200017ef30 RCX: ffff88801b6d5a00
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8cd2fba0
RBP: ffffc90000bf7a50 R08: ffffffff8e4a936f R09: 1ffffffff1c9526d
R10: dffffc0000000000 R11: fffffbfff1c9526e R12: ffff88801b6d5a00
R13: dffffc0000000000 R14: 0000000000000001 R15: 000000000004c5e9
lock_is_held include/linux/lockdep.h:288 [inline]
__might_resched+0xf6/0x610 kernel/sched/core.c:10171
gc_worker+0xd4f/0x14b0 net/netfilter/nf_conntrack_core.c:1566
process_one_work kernel/workqueue.c:2634 [inline]
process_scheduled_works+0xa45/0x15b0 kernel/workqueue.c:2711
worker_thread+0xa55/0xfc0 kernel/workqueue.c:2792
kthread+0x2fa/0x390 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
----------------
Code disassembly (best guess):
0: c7 c7 e0 b7 aa 8a mov $0x8aaab7e0,%edi
6: 48 c7 c6 20 b8 aa 8a mov $0xffffffff8aaab820,%rsi
d: e8 5d 70 e1 f6 call 0xf6e1706f
12: 0f 0b ud2
14: eb bf jmp 0xffffffd5
16: e8 84 fc ff ff call 0xfffffc9f
1b: 0f 1f 40 00 nopl 0x0(%rax)
1f: f3 0f 1e fa endbr64
23: 55 push %rbp
24: 41 57 push %r15
26: 41 56 push %r14
28: 41 55 push %r13
* 2a: 41 54 push %r12 <-- trapping instruction
2c: 53 push %rbx
2d: 48 83 ec 10 sub $0x10,%rsp
31: 65 48 8b 04 25 28 00 mov %gs:0x28,%rax
38: 00 00
3a: 48 89 44 24 08 mov %rax,0x8(%rsp)
3f: bd .byte 0xbd