cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 ------------[ cut here ]------------ URB 00000000e260fd05 submitted while active WARNING: CPU: 0 PID: 7 at drivers/usb/core/urb.c:378 usb_submit_urb+0xd70/0x1530 drivers/usb/core/urb.c:378 Modules linked in: CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 Workqueue: usb_hub_wq hub_event pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0xd70/0x1530 drivers/usb/core/urb.c:378 lr : usb_submit_urb+0xd70/0x1530 drivers/usb/core/urb.c:378 sp : ffff800008007650 x29: ffff800008007690 x28: ffff0000ce8bf3d8 x27: 000000000000000f x26: 1fffe0001b81ea0a x25: dfff800000000000 x24: ffff0000cd67d701 x23: dfff800000000000 x22: 000000000000000f x21: ffff0000c1c39a08 x20: ffff8000166d2000 x19: ffff0000c1c39a00 x18: 0000000000000101 x17: ffff800016e24000 x16: ffff800011255484 x15: ffff800016904500 x14: 0000000000000001 x13: 1fffe000341f07ab x12: 0000000000ff0100 x11: 0000000000000101 x10: 0000000000000000 x9 : 3e81cab6c0489a00 x8 : 3e81cab6c0489a00 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff800008508fa8 x2 : 0000000000000001 x1 : 0000000100000101 x0 : 000000000000002b Call trace: usb_submit_urb+0xd70/0x1530 drivers/usb/core/urb.c:378 cm109_urb_irq_callback+0x5a8/0xa44 drivers/input/misc/cm109.c:422 __usb_hcd_giveback_urb+0x2e0/0x510 drivers/usb/core/hcd.c:1674 usb_hcd_giveback_urb+0x100/0x3d0 drivers/usb/core/hcd.c:1757 dummy_timer+0x5bc/0x231c drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x19c/0x850 kernel/time/timer.c:1648 expire_timers kernel/time/timer.c:1699 [inline] __run_timers+0xb34/0xd8c kernel/time/timer.c:1970 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:1983 handle_softirqs+0x344/0xbe4 kernel/softirq.c:576 __do_softirq kernel/softirq.c:610 [inline] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] invoke_softirq kernel/softirq.c:457 [inline] __irq_exit_rcu+0x240/0x43c kernel/softirq.c:659 irq_exit+0x14/0x88 kernel/softirq.c:683 handle_domain_irq+0x14c/0x1fc kernel/irq/irqdesc.c:711 gic_handle_irq+0x78/0x1b8 drivers/irqchip/irq-gic-v3.c:765 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:903 do_interrupt_handler+0x6c/0x88 arch/arm64/kernel/entry-common.c:267 el1_interrupt+0x30/0x58 arch/arm64/kernel/entry-common.c:454 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:470 el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:522 usb_hcd_submit_urb+0x140/0x1798 drivers/usb/core/hcd.c:1554 usb_submit_urb+0xe40/0x1530 drivers/usb/core/urb.c:594 usb_start_wait_urb+0xfc/0x3e4 drivers/usb/core/message.c:58 usb_internal_control_msg drivers/usb/core/message.c:102 [inline] usb_control_msg+0x1d0/0x350 drivers/usb/core/message.c:153 usb_clear_port_feature drivers/usb/core/hub.c:445 [inline] port_event drivers/usb/core/hub.c:5697 [inline] hub_event+0x670/0x4228 drivers/usb/core/hub.c:5881 process_one_work+0x79c/0x1138 kernel/workqueue.c:2310 worker_thread+0x8f4/0x1034 kernel/workqueue.c:2457 kthread+0x374/0x454 kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:856 irq event stamp: 31795 hardirqs last enabled at (31794): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline] hardirqs last enabled at (31794): [] _raw_spin_unlock_irq+0x98/0x128 kernel/locking/spinlock.c:202 hardirqs last disabled at (31795): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (31795): [] _raw_spin_lock_irqsave+0xfc/0x148 kernel/locking/spinlock.c:162 softirqs last enabled at (31702): [] softirq_handle_end kernel/softirq.c:419 [inline] softirqs last enabled at (31702): [] handle_softirqs+0xa40/0xbe4 kernel/softirq.c:604 softirqs last disabled at (31791): [] __do_softirq kernel/softirq.c:610 [inline] softirqs last disabled at (31791): [] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] softirqs last disabled at (31791): [] invoke_softirq kernel/softirq.c:457 [inline] softirqs last disabled at (31791): [] __irq_exit_rcu+0x240/0x43c kernel/softirq.c:659 ---[ end trace f0e5adb44d59a63d ]--- cm109 1-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -16 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19