syzbot

cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
------------[ cut here ]------------
URB 00000000da8318b3 submitted while active
WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:378 usb_submit_urb+0xdbc/0x1588
Modules linked in:
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xdbc/0x1588
lr : usb_submit_urb+0xdb8/0x1588 drivers/usb/core/urb.c:378
sp : ffff800008007650
x29: ffff800008007690 x28: 000000000000000f x27: 1fffe0001b406e0a
x26: dfff800000000000 x25: ffff0000cb8d4c01 x24: ffff0000cb8d4c02
x23: 000000000000000f x22: dfff800000000000 x21: ffff0000c1409e08
x20: ffff800016d13000 x19: ffff0000c1409e00 x18: 0000000000000102
x17: 0000000000000000 x16: ffff80001197c3d4 x15: 0000000000000012
x14: 1ffff0000292206a x13: dfff800000000000 x12: 0000000000000001
x11: 0000000000000102 x10: 0000000000000000 x9 : db209300ab6a0e00
x8 : db209300ab6a0e00 x7 : ffff800008328b8c x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000854e694
x2 : 0000000000000001 x1 : 0000000000000102 x0 : 00000000fffffff0
Call trace:
 usb_submit_urb+0xdbc/0x1588
 cm109_urb_irq_callback+0x5a8/0xa4c drivers/input/misc/cm109.c:422
 __usb_hcd_giveback_urb+0x2e0/0x518 drivers/usb/core/hcd.c:1674
 usb_hcd_giveback_urb+0x108/0x41c drivers/usb/core/hcd.c:1757
 dummy_timer+0x66c/0x26cc drivers/usb/gadget/udc/dummy_hcd.c:1987
 call_timer_fn+0x19c/0x8f0 kernel/time/timer.c:1421
 expire_timers kernel/time/timer.c:1466 [inline]
 __run_timers+0x554/0x718 kernel/time/timer.c:1737
 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:1750
 __do_softirq+0x344/0xdb0 kernel/softirq.c:558
 do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
 invoke_softirq kernel/softirq.c:439 [inline]
 __irq_exit_rcu+0x264/0x4d4 kernel/softirq.c:637
 irq_exit+0x14/0x88 kernel/softirq.c:661
 handle_domain_irq+0xf4/0x178 kernel/irq/irqdesc.c:710
 gic_handle_irq+0x78/0x1c8 drivers/irqchip/irq-gic-v3.c:758
 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:899
 do_interrupt_handler+0x74/0x94 arch/arm64/kernel/entry-common.c:267
 el1_interrupt+0x30/0x58 arch/arm64/kernel/entry-common.c:454
 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:470
 el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:580
 arch_local_irq_enable+0xc/0x18 arch/arm64/include/asm/irqflags.h:35
 default_idle_call+0xcc/0x4a8 kernel/sched/idle.c:112
 cpuidle_idle_call kernel/sched/idle.c:194 [inline]
 do_idle+0x1d4/0x4dc kernel/sched/idle.c:306
 cpu_startup_entry+0x24/0x28 kernel/sched/idle.c:403
 rest_init+0x364/0x38c init/main.c:738
 arch_call_rest_init+0x14/0x20 init/main.c:890
 start_kernel+0x440/0x600 init/main.c:1137
 __primary_switched+0xa8/0xb0 arch/arm64/kernel/head.S:468
irq event stamp: 146027
hardirqs last  enabled at (146026): [<ffff800011a51aa8>] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline]
hardirqs last  enabled at (146026): [<ffff800011a51aa8>] _raw_spin_unlock_irq+0x9c/0x134 kernel/locking/spinlock.c:202
hardirqs last disabled at (146027): [<ffff800011a5143c>] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline]
hardirqs last disabled at (146027): [<ffff800011a5143c>] _raw_spin_lock_irqsave+0xfc/0x14c kernel/locking/spinlock.c:162
softirqs last  enabled at (145812): [<ffff800008021c64>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (145812): [<ffff800008021c64>] __do_softirq+0xb5c/0xdb0 kernel/softirq.c:587
softirqs last disabled at (146023): [<ffff8000081b6568>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (146023): [<ffff8000081b6568>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (146023): [<ffff8000081b6568>] __irq_exit_rcu+0x264/0x4d4 kernel/softirq.c:637
---[ end trace c4da27feebdb24b5 ]---
cm109 1-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -16
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
cm109 1-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -16
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71