pvrusb2: Invalid read control endpoint
------------[ cut here ]------------
URB 000000001494fb1f submitted while active
WARNING: CPU: 1 PID: 1958 at drivers/usb/core/urb.c:378 usb_submit_urb+0x11d8/0x1970 drivers/usb/core/urb.c:378
Modules linked in:
CPU: 1 PID: 1958 Comm: pvrusb2-context Not tainted 5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:usb_submit_urb+0x11d8/0x1970 drivers/usb/core/urb.c:378
Code: 5c 41 5d 41 5e 41 5f 5d e9 05 55 ff ff e8 f0 e1 90 fb c6 05 04 96 f7 07 01 48 c7 c7 40 f7 25 8b 4c 89 ee 31 c0 e8 38 b9 5a fb <0f> 0b e9 a6 ee ff ff e8 cc e1 90 fb eb 05 e8 c5 e1 90 fb bb a6 ff
RSP: 0018:ffffc90005a8e8c0 EFLAGS: 00010246
RAX: 4841ba0382bf7700 RBX: ffff88801478e508 RCX: ffff88801f670000
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffc90005a8eb20 R08: ffffffff816a22e2 R09: ffffed10173667b1
R10: ffffed10173667b1 R11: 0000000000000000 R12: 0000000000000cc0
R13: ffff88801478e500 R14: 1ffff1101177daed R15: ffffc90005a8ea40
FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000000972d0000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 pvr2_send_request_ex+0x1003/0x2270 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:3667
 pvr2_send_request+0x36/0x50 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:3810
 pvr2_i2c_read drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:130 [inline]
 pvr2_i2c_basic_op+0x44e/0x920 drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:172
 pvr2_i2c_xfer+0xa3a/0xd00 drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:445
 __i2c_transfer+0x78d/0x1950 drivers/i2c/i2c-core-base.c:2208
 i2c_smbus_xfer_emulated+0xe48/0x1bf0 drivers/i2c/i2c-core-smbus.c:468
 __i2c_smbus_xfer+0x39a/0x7e0 drivers/i2c/i2c-core-smbus.c:606
 i2c_smbus_xfer+0x1d4/0x380 drivers/i2c/i2c-core-smbus.c:544
 i2c_smbus_read_byte_data+0xff/0x1d0 drivers/i2c/i2c-core-smbus.c:141
 saa711x_detect_chip drivers/media/i2c/saa7115.c:1718 [inline]
 saa711x_probe+0x1c8/0x2640 drivers/media/i2c/saa7115.c:1824
 i2c_device_probe+0x76a/0xae0 drivers/i2c/i2c-core-base.c:573
 call_driver_probe+0x96/0x250
 really_probe+0x223/0x9b0 drivers/base/dd.c:596
 __driver_probe_device+0x1f8/0x3e0 drivers/base/dd.c:751
 driver_probe_device+0x50/0x240 drivers/base/dd.c:781
 __device_attach_driver+0x1e1/0x3b0 drivers/base/dd.c:898
 bus_for_each_drv+0x18a/0x210 drivers/base/bus.c:427
 __device_attach+0x310/0x560 drivers/base/dd.c:969
 bus_probe_device+0xb8/0x1f0 drivers/base/bus.c:487
 device_add+0x11c8/0x16d0 drivers/base/core.c:3394
 i2c_new_client_device+0x958/0xdd0 drivers/i2c/i2c-core-base.c:1063
 v4l2_i2c_new_subdev_board+0x9e/0x210 drivers/media/v4l2-core/v4l2-i2c.c:80
 v4l2_i2c_new_subdev+0xdf/0x140 drivers/media/v4l2-core/v4l2-i2c.c:135
 pvr2_hdw_load_modules drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2074 [inline]
 pvr2_hdw_setup_low drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2155 [inline]
 pvr2_hdw_setup drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2261 [inline]
 pvr2_hdw_initialize+0xe6b/0x3cc0 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2338
 pvr2_context_check drivers/media/usb/pvrusb2/pvrusb2-context.c:109 [inline]
 pvr2_context_thread_func+0x4b4/0xb50 drivers/media/usb/pvrusb2/pvrusb2-context.c:158
 kthread+0x468/0x490 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30
 </TASK>