cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 ------------[ cut here ]------------ URB 000000001bd18fd6 submitted while active WARNING: CPU: 0 PID: 2876 at drivers/usb/core/urb.c:379 usb_submit_urb+0x4f4/0x560 drivers/usb/core/urb.c:379 Modules linked in: CPU: 0 UID: 0 PID: 2876 Comm: kworker/u8:9 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 Tainted: [W]=WARN Hardware name: linux,dummy-virt (DT) Workqueue: events_unbound nsim_dev_trap_report_work pstate: 604020c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x4f4/0x560 drivers/usb/core/urb.c:379 lr : usb_submit_urb+0x4f4/0x560 drivers/usb/core/urb.c:379 sp : ffff800080003ca0 x29: ffff800080003ca0 x28: 0000000000000000 x27: 0000000000000000 x26: f0f0000004f3ea60 x25: 0000000000000000 x24: 0000005ba008fbc1 x23: f4f0000006d0de08 x22: 0000000000000000 x21: faf0000009cb4854 x20: 00000000000000c0 x19: f5f00000097609c0 x18: ffffffffffffffff x17: fff07ffffd165000 x16: ffff800080000000 x15: ffff8000800036e0 x14: ffff800080003858 x13: ffff8000827be740 x12: 0000000000000c72 x11: 0000000000000426 x10: ffff80008286e740 x9 : ffff8000827be740 x8 : 00000000ffffdfff x7 : ffff80008286e740 x6 : 80000000ffffe000 x5 : fff000007f8cc408 x4 : 0000000000000000 x3 : fff07ffffd165000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : f9f00000059c36c0 Call trace: usb_submit_urb+0x4f4/0x560 drivers/usb/core/urb.c:379 (P) cm109_submit_ctl drivers/input/misc/cm109.c:380 [inline] cm109_urb_irq_callback+0xd8/0x2ac drivers/input/misc/cm109.c:431 __usb_hcd_giveback_urb+0x9c/0x15c drivers/usb/core/hcd.c:1650 usb_hcd_giveback_urb+0x11c/0x12c drivers/usb/core/hcd.c:1734 dummy_timer+0x5e0/0xf50 drivers/usb/gadget/udc/dummy_hcd.c:1993 __run_hrtimer kernel/time/hrtimer.c:1739 [inline] __hrtimer_run_queues+0x138/0x1bc kernel/time/hrtimer.c:1803 hrtimer_run_softirq+0x6c/0xc4 kernel/time/hrtimer.c:1820 handle_softirqs+0x108/0x240 kernel/softirq.c:561 __do_softirq+0x14/0x20 kernel/softirq.c:595 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:442 [inline] __irq_exit_rcu+0xd8/0x110 kernel/softirq.c:662 irq_exit_rcu+0x10/0x1c kernel/softirq.c:678 __el1_irq arch/arm64/kernel/entry-common.c:561 [inline] el1_interrupt+0x38/0x64 arch/arm64/kernel/entry-common.c:575 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:580 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 arch_stack_walk+0x0/0x388 (P) kasan_save_stack+0x3c/0x64 mm/kasan/common.c:47 save_stack_info+0x40/0x158 mm/kasan/tags.c:106 kasan_save_alloc_info+0x14/0x20 mm/kasan/tags.c:142 unpoison_slab_object mm/kasan/common.c:319 [inline] unpoison_slab_object mm/kasan/common.c:308 [inline] __kasan_slab_alloc+0x94/0xcc mm/kasan/common.c:345 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4119 [inline] slab_alloc_node mm/slub.c:4168 [inline] kmem_cache_alloc_node_noprof+0x12c/0x370 mm/slub.c:4220 __alloc_skb+0x150/0x194 net/core/skbuff.c:668 alloc_skb include/linux/skbuff.h:1323 [inline] nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:748 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:805 [inline] nsim_dev_trap_report_work+0xcc/0x334 drivers/net/netdevsim/dev.c:851 process_one_work+0x15c/0x29c kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x24c/0x354 kernel/workqueue.c:3391 kthread+0x114/0x118 kernel/kthread.c:389 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 ---[ end trace 0000000000000000 ]--- cm109 1-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -16 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2 dummy_hcd dummy_hcd.0: timer fired with no URBs pending?