cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 ------------[ cut here ]------------ URB 000000003c3bb5ec submitted while active WARNING: CPU: 1 PID: 3123 at drivers/usb/core/urb.c:379 usb_submit_urb+0xdd0/0x14ec drivers/usb/core/urb.c:379 Modules linked in: CPU: 1 UID: 0 PID: 3123 Comm: udevd Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT Hardware name: linux,dummy-virt (DT) pstate: 600000c5 (nZCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0xdd0/0x14ec drivers/usb/core/urb.c:379 lr : usb_submit_urb+0xdd0/0x14ec drivers/usb/core/urb.c:379 sp : ffff80008d4d78d0 x29: ffff80008d4d78d0 x28: ffff00001726f49b x27: ffff00001726f49b x26: dfff800000000000 x25: ffff00001726f470 x24: ffff000022168310 x23: 000000000000000f x22: ffff000012bab858 x21: 00000000000000c0 x20: ffff00001ca57980 x19: ffff000012efe500 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000001 x12: ffff60000d415e93 x11: 1fffe0000d415e92 x10: ffff60000d415e92 x9 : dfff800000000000 x8 : ffff00006a0af493 x7 : 0000000000000001 x6 : ffff60000d415e92 x5 : ffff00006a0af490 x4 : 1fffe000027ffb59 x3 : dfff800000000000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000013ffdac0 Call trace: usb_submit_urb+0xdd0/0x14ec drivers/usb/core/urb.c:379 (P) cm109_submit_ctl drivers/input/misc/cm109.c:380 [inline] cm109_urb_irq_callback+0x534/0x964 drivers/input/misc/cm109.c:431 __usb_hcd_giveback_urb+0x1f8/0x3c4 drivers/usb/core/hcd.c:1650 usb_hcd_giveback_urb+0x2c8/0x384 drivers/usb/core/hcd.c:1734 dummy_timer+0x10e0/0x3570 drivers/usb/gadget/udc/dummy_hcd.c:1995 __run_hrtimer kernel/time/hrtimer.c:1761 [inline] __hrtimer_run_queues+0x34c/0xb38 kernel/time/hrtimer.c:1825 hrtimer_run_softirq+0x134/0x2c4 kernel/time/hrtimer.c:1842 handle_softirqs+0x2d8/0xdb4 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x3f8/0x554 kernel/softirq.c:680 irq_exit_rcu+0x14/0x80 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 security_current_getlsmprop_subj+0x0/0x134 security/security.c:684 (P) security_file_post_open+0x5c/0x16c security/security.c:3130 do_open fs/namei.c:3889 [inline] path_openat+0xa80/0x24b0 fs/namei.c:4046 do_filp_open+0x184/0x360 fs/namei.c:4073 do_sys_openat2+0xe0/0x160 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __arm64_sys_openat+0x12c/0x1bc fs/open.c:1463 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0xac/0x230 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x40/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x50/0x198 arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x10c/0x138 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 2585945 hardirqs last enabled at (2585944): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (2585944): [] _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (2585945): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (2585945): [] _raw_spin_lock_irqsave+0x7c/0x80 kernel/locking/spinlock.c:162 softirqs last enabled at (2585934): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (2585934): [] handle_softirqs+0x88c/0xdb4 kernel/softirq.c:607 softirqs last disabled at (2585941): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- cm109 1-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -16 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19