usb 3-1: BOGUS urb xfer, pipe 3 != type 1
smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5279 at mm/slub.c:6756 free_large_kmalloc+0xc2/0x120
Modules linked in:
CPU: 0 UID: 0 PID: 5279 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: usb_hub_wq hub_event
RIP: 0010:free_large_kmalloc+0xc2/0x120
Code: 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 55 c7 43 30 ff ff ff ff 48 89 df 44 89 f6 5b 41 5e 5d e9 8f d5 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 fc 41 72 8d 5b 41 5e 5d e9 38 0b 0d ff
RSP: 0018:ffffc900033f6b00 EFLAGS: 00010206
RAX: 00000000ff000000 RBX: ffffea0004727880 RCX: 0000000000000000
RDX: ffffc90029267000 RSI: ffff88811c9e2000 RDI: ffffea0004727880
RBP: 0000000000000100 R08: ffff888111e82103 R09: 1ffff110223d0420
R10: dffffc0000000000 R11: ffffed10223d0421 R12: 1ffff110228fda82
R13: 0000000000000000 R14: ffff888111e82160 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff88818eb36000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fffdcfa3f88 CR3: 00000001ac2c8000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 usb_free_urb+0xd0/0x120
 smsusb_term_device+0x1d6/0x3b0
 smsusb_probe+0x1a04/0x2060
 usb_probe_interface+0x668/0xc30
 really_probe+0x26d/0x9e0
 __driver_probe_device+0x18c/0x2f0
 driver_probe_device+0x4f/0x430
 __device_attach_driver+0x2ce/0x530
 bus_for_each_drv+0x251/0x2e0
 __device_attach+0x2b8/0x400
 bus_probe_device+0x185/0x260
 device_add+0x7b6/0xb50
 usb_set_configuration+0x1a87/0x20e0
 usb_generic_driver_probe+0x8d/0x150
 usb_probe_device+0x1c4/0x390
 really_probe+0x26d/0x9e0
 __driver_probe_device+0x18c/0x2f0
 driver_probe_device+0x4f/0x430
 __device_attach_driver+0x2ce/0x530
 bus_for_each_drv+0x251/0x2e0
 __device_attach+0x2b8/0x400
 bus_probe_device+0x185/0x260
 device_add+0x7b6/0xb50
 usb_new_device+0xa39/0x16f0
 hub_event+0x2958/0x4a20
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x4bc/0x870
 ret_from_fork_asm+0x1a/0x30
 </TASK>
