smsusb:smsusb_probe: board id=9, interface number 0 smsusb:siano_media_device_register: media controller created ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 0 PID: 8 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503 Modules linked in: CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503 lr : usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503 sp : ffff800092f76860 x29: ffff800092f768a0 x28: ffff0000cd7ef000 x27: 0000000000000003 x26: ffff80008befa8cc x25: ffff0000c23b2640 x24: ffff0000d3822080 x23: ffff80008bf012a0 x22: dfff800000000000 x21: 0000000000000003 x20: 0000000000000820 x19: ffff0000d3822030 x18: ffff800092f76380 x17: 0000000000000000 x16: ffff80008a82b138 x15: 0000000000000001 x14: 1fffe0003682623a x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000002 x10: 0000000000ff0100 x9 : 0476451301650900 x8 : 0476451301650900 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800092f76158 x4 : ffff80008e5d20c0 x3 : ffff8000805a9ecc x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503 smsusb_submit_urb drivers/media/usb/siano/smsusb.c:173 [inline] smsusb_start_streaming+0x244/0x450 drivers/media/usb/siano/smsusb.c:197 smsusb_init_device drivers/media/usb/siano/smsusb.c:470 [inline] smsusb_probe+0x130c/0x19ec drivers/media/usb/siano/smsusb.c:567 usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396 really_probe+0x394/0xa7c drivers/base/dd.c:658 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:457 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:532 device_add+0x768/0xaac drivers/base/core.c:3625 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2207 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238 usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293 really_probe+0x394/0xa7c drivers/base/dd.c:658 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:457 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:532 device_add+0x768/0xaac drivers/base/core.c:3625 usb_new_device+0x904/0x1488 drivers/usb/core/hub.c:2576 hub_port_connect drivers/usb/core/hub.c:5440 [inline] hub_port_connect_change drivers/usb/core/hub.c:5580 [inline] port_event drivers/usb/core/hub.c:5740 [inline] hub_event+0x2430/0x435c drivers/usb/core/hub.c:5822 process_one_work+0x694/0x1204 kernel/workqueue.c:2627 process_scheduled_works kernel/workqueue.c:2700 [inline] worker_thread+0x938/0xef4 kernel/workqueue.c:2781 kthread+0x288/0x310 kernel/kthread.c:388 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:857 irq event stamp: 32676 hardirqs last enabled at (32675): [] __up_console_sem kernel/printk/printk.c:341 [inline] hardirqs last enabled at (32675): [] __console_unlock kernel/printk/printk.c:2706 [inline] hardirqs last enabled at (32675): [] console_unlock+0x17c/0x3d4 kernel/printk/printk.c:3038 hardirqs last disabled at (32676): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:436 softirqs last enabled at (23126): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (23126): [] __fib6_clean_all+0x2a4/0x418 net/ipv6/ip6_fib.c:2264 softirqs last disabled at (23120): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (23120): [] __fib6_clean_all+0x1e0/0x418 net/ipv6/ip6_fib.c:2261 ---[ end trace 0000000000000000 ]---