The actual input can only be used once, because its key image gives it away if it's repeated.

Decoys can be repeated in different transactions because they aren't "locked" by any key image.