------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 3 != type 1
WARNING: CPU: 0 PID: 5004 at drivers/usb/core/urb.c:504 usb_submit_urb+0xb0b/0x1690 drivers/usb/core/urb.c:504
Modules linked in:
CPU: 0 PID: 5004 Comm: kworker/0:4 Not tainted 6.2.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
Workqueue: mld mld_ifc_work
RIP: 0010:usb_submit_urb+0xb0b/0x1690 drivers/usb/core/urb.c:504
Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 9f 60 17 ff 44 8b 04 24 4c 89 e2 48 c7 c7 40 1f 13 8a 8b 4c 24 08 48 89 c6 e8 7b d1 65 03 <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00
RSP: 0018:ffffc9000398f668 EFLAGS: 00010086
RAX: 0000000000000000 RBX: ffff888020697000 RCX: 0000000000000000
RDX: 0000000000000404 RSI: 0000000000000004 RDI: fffff52000731ebf
RBP: ffff888028d33d00 R08: 0000000000000001 R09: ffff8880b9a2894b
R10: ffffed1017345129 R11: 0000000000000000 R12: ffff888020505168
R13: 0000000000000003 R14: 0000000000000003 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000560ed1050a18 CR3: 000000000b48e000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 usbnet_start_xmit+0xd27/0x1dd0 drivers/net/usb/usbnet.c:1455
 __netdev_start_xmit include/linux/netdevice.h:4865 [inline]
 netdev_start_xmit include/linux/netdevice.h:4879 [inline]
 xmit_one net/core/dev.c:3583 [inline]
 dev_hard_start_xmit+0x175/0x760 net/core/dev.c:3599
 sch_direct_xmit+0x130/0x10b0 net/sched/sch_generic.c:342
 __dev_xmit_skb net/core/dev.c:3810 [inline]
 __dev_queue_xmit+0x1287/0x31f0 net/core/dev.c:4215
 neigh_output include/net/neighbour.h:546 [inline]
 ip6_finish_output2+0x447/0x1220 net/ipv6/ip6_output.c:134
 __ip6_finish_output net/ipv6/ip6_output.c:195 [inline]
 ip6_finish_output+0x4f7/0xf00 net/ipv6/ip6_output.c:206
 dst_output include/net/dst.h:444 [inline]
 NF_HOOK include/linux/netfilter.h:302 [inline]
 NF_HOOK include/linux/netfilter.h:296 [inline]
 mld_sendpack+0x926/0xcf0 net/ipv6/mcast.c:1820
 mld_send_cr net/ipv6/mcast.c:2121 [inline]
 mld_ifc_work+0x569/0xa90 net/ipv6/mcast.c:2653
 process_one_work+0x8ba/0x14c0 kernel/workqueue.c:2289
 worker_thread+0x59c/0xec0 kernel/workqueue.c:2436
 kthread+0x29e/0x340 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>