pvrusb2: Invalid read control endpoint
------------[ cut here ]------------
URB ffff888027687600 submitted while active
WARNING: CPU: 0 PID: 2029 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1039/0x1930 drivers/usb/core/urb.c:379
Modules linked in:
CPU: 0 UID: 0 PID: 2029 Comm: pvrusb2-context Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:usb_submit_urb+0x1039/0x1930 drivers/usb/core/urb.c:379
Code: 00 eb 66 e8 09 e6 5d fa e9 79 f0 ff ff e8 ff e5 5d fa c6 05 d5 ad cf 08 01 90 48 c7 c7 e0 0d b1 8c 4c 89 ee e8 d8 d7 1e fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 d9 e5 5d fa eb 12 e8 d2 e5 5d fa 41
RSP: 0018:ffffc90004ddea28 EFLAGS: 00010246
RAX: aac4098ded4c8600 RBX: 0000000000000cc0 RCX: ffff888029239e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff888027687608 R08: ffffffff8155daa2 R09: 1ffff920009bbce0
R10: dffffc0000000000 R11: fffff520009bbce1 R12: dffffc0000000000
R13: ffff888027687600 R14: dffffc0000000000 R15: ffff8880270915f0
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa4b1142440 CR3: 000000000e734000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 pvr2_send_request_ex+0xfd6/0x22a0 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:3676
 pvr2_send_request+0x3a/0x50 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:3819
 pvr2_i2c_read drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:130 [inline]
 pvr2_i2c_basic_op+0x49a/0x950 drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:172
 pvr2_i2c_xfer+0x69a/0xd00 drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:445
 __i2c_transfer+0x868/0x21f0
 i2c_smbus_xfer_emulated drivers/i2c/i2c-core-smbus.c:469 [inline]
 __i2c_smbus_xfer+0x17aa/0x2e70 drivers/i2c/i2c-core-smbus.c:607
 i2c_smbus_xfer+0x291/0x3d0 drivers/i2c/i2c-core-smbus.c:545
 i2c_smbus_read_byte_data+0x105/0x1e0 drivers/i2c/i2c-core-smbus.c:142
 saa711x_detect_chip drivers/media/i2c/saa7115.c:1718 [inline]
 saa711x_probe+0x1ba/0x1590 drivers/media/i2c/saa7115.c:1824
 i2c_device_probe+0x73e/0xa70 drivers/i2c/i2c-core-base.c:587
 really_probe+0x2ba/0xad0 drivers/base/dd.c:658
 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800
 driver_probe_device+0x50/0x430 drivers/base/dd.c:830
 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958
 bus_for_each_drv+0x250/0x2e0 drivers/base/bus.c:459
 __device_attach+0x333/0x520 drivers/base/dd.c:1030
 bus_probe_device+0x189/0x260 drivers/base/bus.c:534
 device_add+0x856/0xbf0 drivers/base/core.c:3675
 i2c_new_client_device+0xa11/0x1050 drivers/i2c/i2c-core-base.c:1014
 v4l2_i2c_new_subdev_board+0xa1/0x240 drivers/media/v4l2-core/v4l2-i2c.c:80
 v4l2_i2c_new_subdev+0xe4/0x150 drivers/media/v4l2-core/v4l2-i2c.c:135
 pvr2_hdw_load_modules drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2074 [inline]
 pvr2_hdw_setup_low drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2155 [inline]
 pvr2_hdw_setup drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2261 [inline]
 pvr2_hdw_initialize+0xee9/0x3d10 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2338
 pvr2_context_check drivers/media/usb/pvrusb2/pvrusb2-context.c:111 [inline]
 pvr2_context_thread_func+0x4b3/0xb50 drivers/media/usb/pvrusb2/pvrusb2-context.c:158
 kthread+0x2f2/0x390 kernel/kthread.c:389
 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>