WARNING in cxacru_cm/usb_submit

WARNING in cxacru_cm/usb_submit_urb
Status: upstream: reported C repro on 2020/03/05 17:15
Reported-by: syzbot+00c18ee8497dd3be6ade@syzkaller.appspotmail.com
First crash: 510d, last: 9d05h

Cause bisection: failed (bisect log)

Patch testing requests:
Created	Duration	User	Patch	Repo	Result
2020/09/15 02:16	16m	brookebasile@gmail.com		upstream	OK

Sample crash report:

usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 5 at drivers/usb/core/urb.c:494 usb_submit_urb+0xacd/0x1550 drivers/usb/core/urb.c:493
Modules linked in:
CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.13.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
RIP: 0010:usb_submit_urb+0xacd/0x1550 drivers/usb/core/urb.c:493
Code: d8 48 c1 e8 03 42 8a 04 28 84 c0 0f 85 bd 07 00 00 44 8b 03 48 c7 c7 a0 8a e1 8a 4c 89 f6 4c 89 fa 89 e9 31 c0 e8 33 b4 8f fb <0f> 0b 4c 8b 74 24 30 45 89 f7 4c 89 ff 48 c7 c6 90 e2 8d 8d e8 8a
RSP: 0018:ffffc90000ca66a0 EFLAGS: 00010246
RAX: b1944d377f9a1400 RBX: ffffffff8ae188c8 RCX: ffff888012b38000
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000001 R08: ffffffff81656042 R09: ffffed1017345f90
R10: ffffed1017345f90 R11: 0000000000000000 R12: ffff8880221b5c00
R13: dffffc0000000000 R14: ffffffff8ae22b00 R15: ffff888019911c80
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000004c21c8 CR3: 0000000018ea9000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 cxacru_cm+0x3d0/0xec0 drivers/usb/atm/cxacru.c:649
 cxacru_card_status drivers/usb/atm/cxacru.c:760 [inline]
 cxacru_bind+0xb32/0xf80 drivers/usb/atm/cxacru.c:1209
 usbatm_usb_probe+0x315/0x1e40 drivers/usb/atm/usbatm.c:1055
 cxacru_usb_probe+0x154/0x1f0 drivers/usb/atm/cxacru.c:1363
 usb_probe_interface+0x633/0xb40 drivers/usb/core/driver.c:396
 really_probe+0x3cb/0x1020 drivers/base/dd.c:580
 driver_probe_device+0x178/0x350 drivers/base/dd.c:763
 bus_for_each_drv+0x16a/0x1f0 drivers/base/bus.c:431
 __device_attach+0x301/0x560 drivers/base/dd.c:938
 bus_probe_device+0xb8/0x1f0 drivers/base/bus.c:491
 device_add+0x11fc/0x1670 drivers/base/core.c:3324
 usb_set_configuration+0x1a86/0x2100 drivers/usb/core/message.c:2164
 usb_generic_driver_probe+0x83/0x140 drivers/usb/core/generic.c:238
 usb_probe_device+0x13a/0x260 drivers/usb/core/driver.c:293
 really_probe+0x3cb/0x1020 drivers/base/dd.c:580
 driver_probe_device+0x178/0x350 drivers/base/dd.c:763
 bus_for_each_drv+0x16a/0x1f0 drivers/base/bus.c:431
 __device_attach+0x301/0x560 drivers/base/dd.c:938
 bus_probe_device+0xb8/0x1f0 drivers/base/bus.c:491
 device_add+0x11fc/0x1670 drivers/base/core.c:3324
 usb_new_device+0xd45/0x1790 drivers/usb/core/hub.c:2558
 hub_port_connect+0x1055/0x27a0 drivers/usb/core/hub.c:5278
 hub_port_connect_change+0x5d0/0xbf0 drivers/usb/core/hub.c:5418
 port_event+0xaee/0x1140 drivers/usb/core/hub.c:5564
 hub_event+0x48d/0xd90 drivers/usb/core/hub.c:5646
 process_one_work+0x833/0x10c0 kernel/workqueue.c:2276
 worker_thread+0xac1/0x1300 kernel/workqueue.c:2422
 kthread+0x39a/0x3c0 kernel/kthread.c:313
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Fix bisection attempts:
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro
ci-upstream-kasan-gce	2021/06/16 14:39	upstream	94f0b2d4a1d0	a5f86b15	.config	log	report	syz	C
ci-upstream-kasan-gce	2021/05/17 14:18	upstream	d07f6ca923ea	a5f86b15	.config	log	report	syz	C
ci-upstream-kasan-gce	2021/04/17 13:55	upstream	9cdbf6467424	a5f86b15	.config	log	report	syz	C
ci-upstream-kasan-gce	2021/03/18 13:34	upstream	6417f03132a6	a5f86b15	.config	log	report	syz	C

Crashes (12):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	Title
ci-upstream-kasan-gce-smack-root	2021/06/25 22:59	upstream	44db63d1ad8d	ae6bf8dd	.config	log	report	syz	C	WARNING in cxacru_cm/usb_submit_urb
ci-upstream-kasan-gce-root	2021/06/17 20:07	upstream	70585216fe77	aba2b2fb	.config	log	report	syz	C	WARNING in cxacru_cm/usb_submit_urb
ci-qemu-upstream	2021/02/16 13:13	upstream	f40ddce88593	98682e5e	.config	log	report	syz	C	WARNING in cxacru_cm/usb_submit_urb
ci-upstream-kasan-gce	2021/02/12 08:18	upstream	291009f656e8	a5f86b15	.config	log	report	syz	C	WARNING in cxacru_cm/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/07/20 07:31	linux-next	c1a6d08348fc	bc48c9ab	.config	log	report	syz	C	WARNING in cxacru_cm/usb_submit_urb
ci2-upstream-usb	2020/12/25 13:43	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3644e2d2dda7	b982b3ea	.config	log	report	syz	C
ci2-upstream-usb	2020/06/29 17:34	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	9cf6ffae3800	ce9ef6f2	.config	log	report	syz	C
ci2-upstream-usb	2020/06/10 11:28	https://github.com/google/kasan.git usb-fuzzer	2089c6ed5a17	860c4de9	.config	log	report	syz	C
ci2-upstream-usb	2020/03/23 17:10	https://github.com/google/kasan.git usb-fuzzer	e17994d1e7b1	84f999d6	.config	log	report	syz	C
ci2-upstream-usb	2020/03/05 16:39	https://github.com/google/kasan.git usb-fuzzer	d6ff8147a51c	b655d91b	.config	log	report	syz	C
ci2-upstream-usb	2020/08/03 01:29	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e3ee0e740c38	96dd3623	.config	log	report
ci2-upstream-usb	2020/03/05 16:21	https://github.com/google/kasan.git usb-fuzzer	d6ff8147a51c	b655d91b	.config	log	report