pvrusb2: Invalid read control endpoint
------------[ cut here ]------------
URB ffff8880274a3a00 submitted while active
WARNING: CPU: 1 PID: 2028 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1039/0x1930 drivers/usb/core/urb.c:379
Modules linked in:
CPU: 1 UID: 0 PID: 2028 Comm: pvrusb2-context Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:usb_submit_urb+0x1039/0x1930 drivers/usb/core/urb.c:379
Code: 00 eb 66 e8 99 64 66 fa e9 79 f0 ff ff e8 8f 64 66 fa c6 05 18 14 d7 08 01 90 48 c7 c7 00 3d b0 8c 4c 89 ee e8 48 60 27 fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 69 64 66 fa eb 12 e8 62 64 66 fa 41
RSP: 0018:ffffc90004f76a28 EFLAGS: 00010246
RAX: 8a651f15961d2900 RBX: 0000000000000cc0 RCX: ffff888029ae9e00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff8880274a3a08 R08: ffffffff8155d9c2 R09: 1ffff110170c519a
R10: dffffc0000000000 R11: ffffed10170c519b R12: dffffc0000000000
R13: ffff8880274a3a00 R14: dffffc0000000000 R15: ffff888042fe15f0
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f72c7f8d090 CR3: 0000000027622000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 pvr2_send_request_ex+0xfd6/0x22a0 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:3676
 pvr2_send_request+0x3a/0x50 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:3819
 pvr2_i2c_read drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:130 [inline]
 pvr2_i2c_basic_op+0x49a/0x950 drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:172
 pvr2_i2c_xfer+0x698/0xd00 drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:445
 __i2c_transfer+0x866/0x21f0
 i2c_smbus_xfer_emulated drivers/i2c/i2c-core-smbus.c:469 [inline]
 __i2c_smbus_xfer+0x17aa/0x2e70 drivers/i2c/i2c-core-smbus.c:607
 i2c_smbus_xfer+0x291/0x3d0 drivers/i2c/i2c-core-smbus.c:545
 i2c_smbus_read_byte_data+0x105/0x1e0 drivers/i2c/i2c-core-smbus.c:142
 saa711x_detect_chip drivers/media/i2c/saa7115.c:1718 [inline]
 saa711x_probe+0x1ba/0x1590 drivers/media/i2c/saa7115.c:1824
 i2c_device_probe+0x73c/0xa70 drivers/i2c/i2c-core-base.c:587
 really_probe+0x2b8/0xad0 drivers/base/dd.c:658
 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800
 driver_probe_device+0x50/0x430 drivers/base/dd.c:830
 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958
 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:459
 __device_attach+0x333/0x520 drivers/base/dd.c:1030
 bus_probe_device+0x189/0x260 drivers/base/bus.c:534
 device_add+0x856/0xbf0 drivers/base/core.c:3675
 i2c_new_client_device+0xa11/0x1050 drivers/i2c/i2c-core-base.c:1014
 v4l2_i2c_new_subdev_board+0xa1/0x240 drivers/media/v4l2-core/v4l2-i2c.c:80
 v4l2_i2c_new_subdev+0xe4/0x150 drivers/media/v4l2-core/v4l2-i2c.c:135
 pvr2_hdw_load_modules drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2074 [inline]
 pvr2_hdw_setup_low drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2155 [inline]
 pvr2_hdw_setup drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2261 [inline]
 pvr2_hdw_initialize+0xee9/0x3d10 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2338
 pvr2_context_check drivers/media/usb/pvrusb2/pvrusb2-context.c:111 [inline]
 pvr2_context_thread_func+0x4b3/0xb50 drivers/media/usb/pvrusb2/pvrusb2-context.c:158
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>