bisecting fixing commit since 4fa56ad0d12e24df768c98bffe9039f915d1bc02
building syzkaller on 6a81331a1d4c744da9204d02ec88d558f7eea9c9
testing commit 4fa56ad0d12e24df768c98bffe9039f915d1bc02 with gcc (GCC) 10.2.1 20210217
kernel signature: 28ae7e6b84aadcb55b869f220acd0725f7076f6cfdaa0b0bbd8c8e3115c30841
all runs: crashed: WARNING in go7007_usb_onboard_write_interrupt/usb_submit_urb
testing current HEAD dbe69e43372212527abf48609aba7fc39a6daa27
testing commit dbe69e43372212527abf48609aba7fc39a6daa27 with gcc (GCC) 10.2.1 20210217
kernel signature: 3964c4ef067743d31291180a32f44ed5c8736313c71c9a1f5b37e49b308c6937
all runs: crashed: WARNING in go7007_usb_onboard_write_interrupt/usb_submit_urb
revisions tested: 2, total time: 21m12.777673567s (build: 13m29.551488818s, test: 7m5.278265896s)
the crash still happens on HEAD
commit msg: Merge tag 'net-next-5.14' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
crash: WARNING in go7007_usb_onboard_write_interrupt/usb_submit_urb
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 2 != type 3
WARNING: CPU: 1 PID: 10063 at drivers/usb/core/urb.c:493 usb_submit_urb+0x9fb/0x1270 drivers/usb/core/urb.c:493
Modules linked in:

CPU: 1 PID: 10063 Comm: kworker/1:4 Not tainted 5.13.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
RIP: 0010:usb_submit_urb+0x9fb/0x1270 drivers/usb/core/urb.c:493
Code: 00 4c 89 5c 24 18 44 89 44 24 10 e8 3f 30 22 ff 44 8b 44 24 10 44 89 f9 4c 89 ea 48 89 c6 48 c7 c7 80 51 3f 89 e8 ec 30 38 03 <0f> 0b 4c 8b 5c 24 18 e9 bd fa ff ff 48 8d 7d 1c 48 ba 00 00 00 00
RSP: 0018:ffffc9000ac7ecd0 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff88ff9960 RDI: fffff5200158fd8c
RBP: ffff888027750000 R08: 0000000000000001 R09: ffff8880ba12ff07
R10: ffffed1017425fe0 R11: 3a312d3120627375 R12: ffff888143511e00
R13: ffff8880130fa5a0 R14: 0000000000000001 R15: 0000000000000002
FS:  0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055b25c95f398 CR3: 0000000018d44000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 usb_start_wait_urb+0xf9/0x450 drivers/usb/core/message.c:58
 usb_internal_control_msg drivers/usb/core/message.c:102 [inline]
 usb_control_msg+0x306/0x460 drivers/usb/core/message.c:153
 go7007_usb_onboard_write_interrupt+0x25b/0x310 drivers/media/usb/go7007/go7007-usb.c:735
 go7007_usb_interface_reset+0x11b/0x480 drivers/media/usb/go7007/go7007-usb.c:649
 go7007_load_encoder+0x10f/0x470 drivers/media/usb/go7007/go7007-driver.c:107
 go7007_boot_encoder+0x25/0xa0 drivers/media/usb/go7007/go7007-driver.c:131
 go7007_usb_probe+0x710/0x1f90 drivers/media/usb/go7007/go7007-usb.c:1161
 usb_probe_interface+0x274/0x6a0 drivers/usb/core/driver.c:396
 really_probe+0x1fd/0xd10 drivers/base/dd.c:576
 driver_probe_device+0x21a/0x3b0 drivers/base/dd.c:763
 bus_for_each_drv+0x11e/0x1a0 drivers/base/bus.c:431
 __device_attach+0x1db/0x410 drivers/base/dd.c:938
 bus_probe_device+0x19d/0x250 drivers/base/bus.c:491
 device_add+0x9f0/0x1d60 drivers/base/core.c:3324
 usb_set_configuration+0x9fc/0x1750 drivers/usb/core/message.c:2164
 usb_generic_driver_probe+0x74/0xa0 drivers/usb/core/generic.c:238
 usb_probe_device+0x95/0x240 drivers/usb/core/driver.c:293
 really_probe+0x1fd/0xd10 drivers/base/dd.c:576
 driver_probe_device+0x21a/0x3b0 drivers/base/dd.c:763