pvrusb2: Invalid read control endpoint
------------[ cut here ]------------
URB ffff888029233100 submitted while active
WARNING: CPU: 0 PID: 1967 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1039/0x18c0 drivers/usb/core/urb.c:379
Modules linked in:
CPU: 0 PID: 1967 Comm: pvrusb2-context Not tainted 6.8.0-rc2-next-20240202-syzkaller-g076d56d74f17 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
RIP: 0010:usb_submit_urb+0x1039/0x18c0 drivers/usb/core/urb.c:379
Code: 00 eb 66 e8 79 2f 8a fa e9 79 f0 ff ff e8 6f 2f 8a fa c6 05 4a c5 66 08 01 90 48 c7 c7 60 d6 4a 8c 4c 89 ee e8 18 04 4e fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 49 2f 8a fa eb 12 e8 42 2f 8a fa 41
RSP: 0018:ffffc90005efea40 EFLAGS: 00010246
RAX: ba56e9cc5b932300 RBX: 0000000000000cc0 RCX: ffff8880250fda00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff888029233108 R08: ffffffff8157a7d2 R09: 1ffff110172851a2
R10: dffffc0000000000 R11: ffffed10172851a3 R12: dffffc0000000000
R13: ffff888029233100 R14: dffffc0000000000 R15: ffff8880788455e0
FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055f9d71ee440 CR3: 0000000053a84000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 pvr2_send_request_ex+0xfd6/0x22a0 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:3676
 pvr2_send_request+0x3a/0x50 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:3819
 pvr2_i2c_read drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:130 [inline]
 pvr2_i2c_basic_op+0x49a/0x950 drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:172
 pvr2_i2c_xfer+0x698/0xd00 drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:445
 __i2c_transfer+0x806/0x20d0
 i2c_smbus_xfer_emulated drivers/i2c/i2c-core-smbus.c:469 [inline]
 __i2c_smbus_xfer+0x173f/0x2da0 drivers/i2c/i2c-core-smbus.c:607
 i2c_smbus_xfer+0x291/0x3d0 drivers/i2c/i2c-core-smbus.c:545
 i2c_smbus_read_byte_data+0x105/0x1e0 drivers/i2c/i2c-core-smbus.c:142
 saa711x_detect_chip drivers/media/i2c/saa7115.c:1718 [inline]
 saa711x_probe+0x1ba/0x1590 drivers/media/i2c/saa7115.c:1824
 i2c_device_probe+0x73c/0xa70 drivers/i2c/i2c-core-base.c:587
 really_probe+0x29e/0xc50 drivers/base/dd.c:658
 __driver_probe_device+0x1a2/0x3e0 drivers/base/dd.c:800
 driver_probe_device+0x50/0x430 drivers/base/dd.c:830
 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958
 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457
 __device_attach+0x333/0x520 drivers/base/dd.c:1030
 bus_probe_device+0x189/0x260 drivers/base/bus.c:532
 device_add+0x8ff/0xca0 drivers/base/core.c:3625
 i2c_new_client_device+0x960/0xe20 drivers/i2c/i2c-core-base.c:989
 v4l2_i2c_new_subdev_board+0xa1/0x220 drivers/media/v4l2-core/v4l2-i2c.c:80
 v4l2_i2c_new_subdev+0xe4/0x150 drivers/media/v4l2-core/v4l2-i2c.c:135
 pvr2_hdw_load_modules drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2074 [inline]
 pvr2_hdw_setup_low drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2155 [inline]
 pvr2_hdw_setup drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2261 [inline]
 pvr2_hdw_initialize+0xee9/0x3d10 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2338
 pvr2_context_check drivers/media/usb/pvrusb2/pvrusb2-context.c:109 [inline]
 pvr2_context_thread_func+0x4b3/0xb50 drivers/media/usb/pvrusb2/pvrusb2-context.c:158
 kthread+0x2f0/0x390 kernel/kthread.c:388
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:242
 </TASK>