input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input8 ------------[ cut here ]------------ usb 5-1: BOGUS control dir, pipe 80000680 doesn't match bRequestType 0 WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910 drivers/usb/core/urb.c:411, CPU#0: kworker/0:3/5729 Modules linked in: CPU: 0 UID: 0 PID: 5729 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: usb_hub_wq hub_event RIP: 0010:usb_submit_urb+0x157e/0x1910 drivers/usb/core/urb.c:411 Code: d2 74 5d 48 89 54 24 40 e8 8f d0 b8 fa 4c 89 ef e8 47 76 de fe 48 89 c6 48 8d 3d 2d 31 99 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 63 d0 b8 fa 89 ee bf ff 00 00 00 RSP: 0018:ffffc900039aef90 EFLAGS: 00010293 RAX: ffffffff8c81f760 RBX: ffff888072c17800 RCX: 0000000080000680 RDX: ffff88806c6fa380 RSI: ffffffff8c81f760 RDI: ffffffff90e89170 RBP: ffff8880274bc058 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880136c4650 R13: ffff8880274bc0b0 R14: 0000000080000680 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff88809710a000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000f7257310 CR3: 0000000024f7f000 CR4: 0000000000352ef0 Call Trace: igorplugusb_cmd drivers/media/rc/igorplugusb.c:127 [inline] igorplugusb_probe+0xa2f/0xf90 drivers/media/rc/igorplugusb.c:225 usb_probe_interface+0x303/0x8f0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x241/0xa60 drivers/base/dd.c:709 __driver_probe_device+0x1de/0x400 drivers/base/dd.c:851 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:881 __device_attach_driver+0x1df/0x340 drivers/base/dd.c:1009 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1081 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1136 bus_probe_device+0x64/0x160 drivers/base/bus.c:613 device_add+0x11d9/0x1920 drivers/base/core.c:3691 usb_set_configuration+0xd97/0x1c60 drivers/usb/core/message.c:2266 usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250 usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:291 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x241/0xa60 drivers/base/dd.c:709 __driver_probe_device+0x1de/0x400 drivers/base/dd.c:851 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:881 __device_attach_driver+0x1df/0x340 drivers/base/dd.c:1009 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1081 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1136 bus_probe_device+0x64/0x160 drivers/base/bus.c:613 device_add+0x11d9/0x1920 drivers/base/core.c:3691 usb_new_device.cold+0x685/0x115c drivers/usb/core/hub.c:2695 hub_port_connect drivers/usb/core/hub.c:5567 [inline] hub_port_connect_change drivers/usb/core/hub.c:5707 [inline] port_event drivers/usb/core/hub.c:5871 [inline] hub_event+0x314d/0x4af0 drivers/usb/core/hub.c:5953 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3302 process_scheduled_works kernel/workqueue.c:3385 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3466 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: d2 74 5d 48 shlb %cl,0x48(%rbp,%rbx,2) 4: 89 54 24 40 mov %edx,0x40(%rsp) 8: e8 8f d0 b8 fa call 0xfab8d09c d: 4c 89 ef mov %r13,%rdi 10: e8 47 76 de fe call 0xfede765c 15: 48 89 c6 mov %rax,%rsi 18: 48 8d 3d 2d 31 99 09 lea 0x999312d(%rip),%rdi # 0x999314c 1f: 48 8b 54 24 40 mov 0x40(%rsp),%rdx 24: 45 89 f8 mov %r15d,%r8d 27: 44 89 f1 mov %r14d,%ecx * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 c7 ed ff ff jmp 0xffffedfb 34: e8 63 d0 b8 fa call 0xfab8d09c 39: 89 ee mov %ebp,%esi 3b: bf ff 00 00 00 mov $0xff,%edi