rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input193
------------[ cut here ]------------
usb 3-1: BOGUS control dir, pipe 80005080 doesn't match bRequestType 40
WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910 drivers/usb/core/urb.c:411, CPU#0: kworker/0:1/10
Modules linked in:
CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:usb_submit_urb+0x157e/0x1910 drivers/usb/core/urb.c:411
Code: d2 74 5d 48 89 54 24 40 e8 af 0a c5 fc 4c 89 ef e8 47 fd d5 fe 48 89 c6 48 8d 3d 7d 55 09 06 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 83 0a c5 fc 89 ee bf ff 00 00 00
RSP: 0018:ffffc900000aefa0 EFLAGS: 00010287
RAX: ffffffff88141ac0 RBX: ffff8881358f9800 RCX: 0000000080005080
RDX: ffff8881180641a0 RSI: ffffffff88141ac0 RDI: ffffffff8af70d60
RBP: ffff888121038058 R08: 0000000000000040 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff88813dbc6e50
R13: ffff8881210380b0 R14: 0000000080005080 R15: 0000000000000040
FS:  0000000000000000(0000) GS:ffff8882686a8000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f95ab334e9c CR3: 0000000116f1e000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 igorplugusb_cmd drivers/media/rc/igorplugusb.c:127 [inline]
 igorplugusb_probe+0xa2f/0xf90 drivers/media/rc/igorplugusb.c:225
 usb_probe_interface+0x303/0x8f0 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:631 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:709
 __driver_probe_device+0x22e/0x480 drivers/base/dd.c:871
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:901
 __device_attach_driver+0x1df/0x340 drivers/base/dd.c:1029
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1101
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1156
 bus_probe_device+0x64/0x160 drivers/base/bus.c:613
 device_add+0x1210/0x1950 drivers/base/core.c:3706
 usb_set_configuration+0xd97/0x1c60 drivers/usb/core/message.c:2268
 usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250
 usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:291
 call_driver_probe drivers/base/dd.c:631 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:709
 __driver_probe_device+0x22e/0x480 drivers/base/dd.c:871
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:901
 __device_attach_driver+0x1df/0x340 drivers/base/dd.c:1029
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1101
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1156
 bus_probe_device+0x64/0x160 drivers/base/bus.c:613
 device_add+0x1210/0x1950 drivers/base/core.c:3706
 usb_new_device.cold+0x685/0x115c drivers/usb/core/hub.c:2695
 hub_port_connect drivers/usb/core/hub.c:5567 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
 port_event drivers/usb/core/hub.c:5871 [inline]
 hub_event+0x314d/0x4af0 drivers/usb/core/hub.c:5953
 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3302
 process_scheduled_works kernel/workqueue.c:3385 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3466
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x69a/0xc80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
----------------
Code disassembly (best guess):
   0:	d2 74 5d 48          	shlb   %cl,0x48(%rbp,%rbx,2)
   4:	89 54 24 40          	mov    %edx,0x40(%rsp)
   8:	e8 af 0a c5 fc       	call   0xfcc50abc
   d:	4c 89 ef             	mov    %r13,%rdi
  10:	e8 47 fd d5 fe       	call   0xfed5fd5c
  15:	48 89 c6             	mov    %rax,%rsi
  18:	48 8d 3d 7d 55 09 06 	lea    0x609557d(%rip),%rdi        # 0x609559c
  1f:	48 8b 54 24 40       	mov    0x40(%rsp),%rdx
  24:	45 89 f8             	mov    %r15d,%r8d
  27:	44 89 f1             	mov    %r14d,%ecx
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	e9 c7 ed ff ff       	jmp    0xffffedfb
  34:	e8 83 0a c5 fc       	call   0xfcc50abc
  39:	89 ee                	mov    %ebp,%esi
  3b:	bf ff 00 00 00       	mov    $0xff,%edi