cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
------------[ cut here ]------------
URB 00000000013833a8 submitted while active
WARNING: CPU: 1 PID: 37 at drivers/usb/core/urb.c:379 usb_submit_urb+0xd50/0x132c drivers/usb/core/urb.c:379
Modules linked in:
CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT 
Hardware name: linux,dummy-virt (DT)
Workqueue: events_unbound bpf_map_free_deferred
pstate: 600000c5 (nZCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xd50/0x132c drivers/usb/core/urb.c:379
lr : usb_submit_urb+0xd50/0x132c drivers/usb/core/urb.c:379
sp : ffff80008d4e78d0
x29: ffff80008d4e78d0 x28: ffff00001757749b x27: ffff00001757749b
x26: dfff800000000000 x25: ffff000017577470 x24: 000000000000000f
x23: ffff000012d23440 x22: ffff00001311d857 x21: 00000000000000c0
x20: ffff00001311d858 x19: ffff000015541700 x18: 0000000000000000
x17: ffff7fffe3003000 x16: 00000000f1f1f1f1 x15: 0000000000000006
x14: 000000000000000f x13: 0000000000008000 x12: ffff60000d415ab3
x11: 1fffe0000d415ab2 x10: ffff60000d415ab2 x9 : dfff800000000000
x8 : ffff00006a0ad593 x7 : 0000000000000001 x6 : ffff60000d415ab2
x5 : ffff00006a0ad590 x4 : 1fffe00001e40791 x3 : dfff800000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff00000f203c80
Call trace:
 usb_submit_urb+0xd50/0x132c drivers/usb/core/urb.c:379 (P)
 cm109_submit_ctl drivers/input/misc/cm109.c:380 [inline]
 cm109_urb_irq_callback+0x538/0x968 drivers/input/misc/cm109.c:431
 __usb_hcd_giveback_urb+0x1f8/0x3c4 drivers/usb/core/hcd.c:1661
 usb_hcd_giveback_urb+0x2c8/0x384 drivers/usb/core/hcd.c:1745
 dummy_timer+0x10e4/0x3574 drivers/usb/gadget/udc/dummy_hcd.c:1995
 __run_hrtimer kernel/time/hrtimer.c:1761 [inline]
 __hrtimer_run_queues+0x350/0xb40 kernel/time/hrtimer.c:1825
 hrtimer_run_softirq+0x134/0x2c4 kernel/time/hrtimer.c:1842
 handle_softirqs+0x2d8/0xdb4 kernel/softirq.c:579
 __do_softirq+0x14/0x20 kernel/softirq.c:613
 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:68
 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:891
 do_softirq_own_stack+0x1c/0x2c arch/arm64/kernel/irq.c:73
 do_softirq kernel/softirq.c:480 [inline]
 do_softirq+0x12c/0x150 kernel/softirq.c:467
 __local_bh_enable_ip+0x414/0x4a4 kernel/softirq.c:407
 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline]
 _raw_spin_unlock_bh+0x44/0x54 kernel/locking/spinlock.c:210
 spin_unlock_bh include/linux/spinlock.h:396 [inline]
 sock_hash_free+0x1f4/0x5f4 net/core/sock_map.c:1171
 bpf_map_free kernel/bpf/syscall.c:864 [inline]
 bpf_map_free_deferred+0xe0/0x140 kernel/bpf/syscall.c:891
 process_one_work+0x7cc/0x18d4 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x734/0xb84 kernel/workqueue.c:3400
 kthread+0x348/0x5fc kernel/kthread.c:463
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 1053081
hardirqs last  enabled at (1053080): [<ffff800085464864>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last  enabled at (1053080): [<ffff800085464864>] _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194
hardirqs last disabled at (1053081): [<ffff800085464490>] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline]
hardirqs last disabled at (1053081): [<ffff800085464490>] _raw_spin_lock_irqsave+0x7c/0x80 kernel/locking/spinlock.c:162
softirqs last  enabled at (1053076): [<ffff8000846cb960>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (1053076): [<ffff8000846cb960>] sock_hash_free+0x1f4/0x5f4 net/core/sock_map.c:1171
softirqs last disabled at (1053077): [<ffff800080010850>] __do_softirq+0x14/0x20 kernel/softirq.c:613
---[ end trace 0000000000000000 ]---
cm109 1-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -16
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19