cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 ------------[ cut here ]------------ URB 000000003adf3df4 submitted while active WARNING: CPU: 0 PID: 15 at drivers/usb/core/urb.c:379 usb_submit_urb+0xdbc/0x1174 drivers/usb/core/urb.c:379 Modules linked in: CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 Hardware name: linux,dummy-virt (DT) pstate: 600000c5 (nZCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0xdbc/0x1174 drivers/usb/core/urb.c:379 lr : usb_submit_urb+0xdbc/0x1174 drivers/usb/core/urb.c:379 sp : ffff8000800078d0 x29: ffff8000800078d0 x28: ffff000013538b08 x27: 1fffe00002dc088d x26: ffff000016d75f08 x25: dfff800000000000 x24: 0000000000000003 x23: 000000000000000f x22: ffff00001e5b9858 x21: ffff000017548000 x20: ffff00001232f300 x19: ffff00001e5b9800 x18: 00000000d7aaf96f x17: 0000000000000000 x16: 0000000000000000 x15: 1fffe00001b508dc x14: 1ffff000110e68fd x13: ffff00000da84700 x12: ffff60000d3eb69b x11: 1fffe0000d3eb69a x10: ffff60000d3eb69a x9 : dfff800000000000 x8 : ffff000069f5b4d3 x7 : 0000000000000001 x6 : ffff60000d3eb69a x5 : ffff000069f5b4d0 x4 : 1fffe00001b50791 x3 : dfff800000000000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff00000da83c80 Call trace: usb_submit_urb+0xdbc/0x1174 drivers/usb/core/urb.c:379 (P) cm109_submit_ctl drivers/input/misc/cm109.c:380 [inline] cm109_urb_irq_callback+0x534/0x964 drivers/input/misc/cm109.c:431 __usb_hcd_giveback_urb+0x1f8/0x3c4 drivers/usb/core/hcd.c:1650 usb_hcd_giveback_urb+0x2c8/0x384 drivers/usb/core/hcd.c:1734 dummy_timer+0xdf8/0x2f0c drivers/usb/gadget/udc/dummy_hcd.c:1993 __run_hrtimer kernel/time/hrtimer.c:1739 [inline] __hrtimer_run_queues+0x300/0x964 kernel/time/hrtimer.c:1803 hrtimer_run_softirq+0x134/0x2c4 kernel/time/hrtimer.c:1820 handle_softirqs+0x2d8/0xdb4 kernel/softirq.c:561 __do_softirq+0x14/0x20 kernel/softirq.c:595 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x1c/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:442 [inline] __irq_exit_rcu+0x3f8/0x554 kernel/softirq.c:662 irq_exit_rcu+0x14/0x80 kernel/softirq.c:678 __el1_irq arch/arm64/kernel/entry-common.c:561 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:575 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:580 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __preempt_count_add arch/arm64/include/asm/preempt.h:47 [inline] (P) lockdep_enabled kernel/locking/lockdep.c:119 [inline] (P) lock_acquire kernel/locking/lockdep.c:5825 [inline] (P) lock_acquire+0x2d4/0x76c kernel/locking/lockdep.c:5814 (P) sched_submit_work kernel/sched/core.c:6789 [inline] schedule+0x1e4/0x304 kernel/sched/core.c:6847 smpboot_thread_fn+0x2a0/0x8e4 kernel/smpboot.c:160 kthread+0x27c/0x300 kernel/kthread.c:389 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 634983 hardirqs last enabled at (634982): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (634982): [] _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (634983): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (634983): [] _raw_spin_lock_irqsave+0x7c/0x80 kernel/locking/spinlock.c:162 softirqs last enabled at (634976): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (634976): [] handle_softirqs+0x88c/0xdb4 kernel/softirq.c:589 softirqs last disabled at (634979): [] __do_softirq+0x14/0x20 kernel/softirq.c:595 ---[ end trace 0000000000000000 ]--- cm109 1-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -16 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19