WARNING in ath9k_hif_usb_alloc_urbs/usb_submit

WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
Status: upstream: reported C repro on 2020/06/19 17:26
Reported-by: syzbot+d625c772c7814faabef9@syzkaller.appspotmail.com
First crash: 333d, last: 1d16h

Patch testing requests:
Created	Duration	User	Patch	Repo	Result
2020/09/10 02:49	19m	bxb5544@psu.edu		upstream	OK

Sample crash report:

usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 3 != type 1
WARNING: CPU: 1 PID: 2623 at drivers/usb/core/urb.c:493 usb_submit_urb+0xcde/0x14e0 drivers/usb/core/urb.c:493
Modules linked in:
CPU: 1 PID: 2623 Comm: kworker/1:3 Not tainted 5.10.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events request_firmware_work_func
RIP: 0010:usb_submit_urb+0xcde/0x14e0 drivers/usb/core/urb.c:493
Code: 84 d4 02 00 00 e8 82 31 bd fd 4c 89 ef e8 ea 02 1b ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 60 64 41 86 e8 ad 12 f3 01 <0f> 0b e9 ca f8 ff ff e8 56 31 bd fd 48 81 c5 40 06 00 00 e9 f6 f7
RSP: 0018:ffffc90006af7b50 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff88810b9f6500 RSI: ffffffff8128f483 RDI: fffff52000d5ef5c
RBP: ffff888101a58850 R08: 0000000000000001 R09: ffff8881f6b2f5cf
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000003
R13: ffff8881015610a0 R14: ffff888103461cd0 R15: ffff888106668d00
FS:  0000000000000000(0000) GS:ffff8881f6b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558fa14b5160 CR3: 00000001030a8000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ath9k_hif_usb_alloc_rx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:901 [inline]
 ath9k_hif_usb_alloc_urbs+0x7b6/0x1010 drivers/net/wireless/ath/ath9k/hif_usb.c:1012
 ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1102 [inline]
 ath9k_hif_usb_firmware_cb+0x148/0x530 drivers/net/wireless/ath/ath9k/hif_usb.c:1235
 request_firmware_work_func+0x12c/0x230 drivers/base/firmware_loader/main.c:1079
 process_one_work+0x933/0x1520 kernel/workqueue.c:2272
 worker_thread+0x64c/0x1120 kernel/workqueue.c:2418
 kthread+0x38c/0x460 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296

Crashes (86):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Title
ci2-upstream-usb	2020/12/09 09:02	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b175d273	99917735	.config	log	report	syz	C
ci2-upstream-usb	2020/06/17 07:43	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b3a9e3b9	b9f3810b	.config	log	report	syz	C
ci-upstream-kasan-gce-selinux-root	2021/05/12 19:32	upstream	88b06399	da958a4d	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/05/06 02:17	upstream	d2b6f8a1	06c27ff5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/05/05 22:15	upstream	d2b6f8a1	06c27ff5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/05/02 12:10	upstream	d2b6f8a1	77e2b668	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/04/29 01:33	upstream	acd3d285	77e2b668	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/04/27 22:05	upstream	57fa2369	805b5003	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/04/25 00:00	upstream	8db5efb8	17f0b706	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/04/23 23:15	upstream	18a3c5f7	17f0b706	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/04/23 16:37	upstream	18a3c5f7	17f0b706	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-smack-root	2021/04/22 15:46	upstream	16fc44d6	33c28d03	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/04/19 08:55	upstream	bf05bf16	7e2b734b	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/04/18 15:34	upstream	c98ff1d0	7e2b734b	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/04/17 01:02	upstream	2f7b98d1	7e2b734b	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/04/13 14:51	upstream	89698bec	bfeda1b1	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/04/12 05:58	upstream	7d900724	bfeda1b1	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/04/11 16:41	upstream	52e44129	bfeda1b1	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/04/06 02:49	upstream	0a50438c	6a81331a	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-smack-root	2021/04/05 02:37	upstream	e49d033b	6a81331a	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/04/03 08:53	upstream	d93a0d43	6a81331a	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-smack-root	2021/03/27 05:40	upstream	db24726b	a8529b82	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/03/05 08:02	upstream	cee407c5	9d751681	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/02/28 15:01	upstream	5695e516	4c37c133	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/02/24 04:14	upstream	3b9cdafb	fcc6d71b	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/02/22 04:03	upstream	55f62bc8	a659b3f1	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/02/09 01:29	upstream	e0756cfc	2bd9619f	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/01/29 11:54	upstream	bec4c296	6593fd32	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/01/26 01:04	upstream	f8ad8187	52e37319	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/01/25 19:09	upstream	6ee1d745	52e37319	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-386	2021/04/13 16:00	upstream	89698bec	bfeda1b1	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-386	2021/04/11 08:12	upstream	52e44129	bfeda1b1	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/05/15 04:43	linux-next	cd557f1c	8bdd5343	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/05/12 07:23	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	4676be28	86294427	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/04/24 15:24	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	caa93d9b	17f0b706	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/04/07 03:18	linux-next	9c54130c	6a81331a	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/03/29 20:39	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e5242861	6a81331a	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/03/26 06:57	linux-next	b4f20b70	6a383ecf	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/03/03 11:25	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	5e17812c	e5b64d68	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/02/27 18:03	linux-next	d01f2f7e	4c37c133	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/02/18 03:05	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b5a12546	14052202	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/02/06 10:43	linux-next	aa2b8820	23a562df	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/02/05 13:40	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	23e32a59	23a562df	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/01/31 21:11	linux-next	b01f250d	fc9fd31e	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/01/27 18:56	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	1a9e38ca	a57db36f	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/01/22 07:32	linux-next	bc085f8f	d4f4eca5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/01/21 22:21	linux-next	bc085f8f	d4f4eca5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/01/07 13:37	upstream	71c061d2	c104d4a3	.config	log	report			info
ci-upstream-kasan-gce-root	2021/01/04 13:46	upstream	e71ba945	79264ae3	.config	log	report			info
ci-upstream-kasan-gce-selinux-root	2021/01/04 11:52	upstream	e71ba945	79264ae3	.config	log	report			info
ci-upstream-kasan-gce	2021/01/02 05:28	upstream	eda809ae	79264ae3	.config	log	report			info
ci-upstream-kasan-gce	2020/12/13 23:50	upstream	6bff9bb8	b22a7ec3	.config	log	report			info
ci2-upstream-usb	2020/12/09 21:27	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	8010622c	c090b4da	.config	log	report			info
ci2-upstream-usb	2020/12/06 20:35	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e3541d5d	c521566d	.config	log	report			info
ci2-upstream-usb	2020/12/06 08:42	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e3541d5d	f12ba0c5	.config	log	report			info
ci2-upstream-usb	2020/07/22 15:05	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	c17536d0	128cd85f	.config	log	report
ci2-upstream-usb	2020/07/20 08:46	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	eed3c957	9c812472	.config	log	report
ci2-upstream-usb	2020/07/16 13:04	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	313da01a	b090c643	.config	log	report
ci2-upstream-usb	2020/07/14 12:16	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	25051b55	6f458026	.config	log	report
ci2-upstream-usb	2020/07/07 21:12	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	768a0741	08fc4ef1	.config	log	report
ci2-upstream-usb	2020/07/04 17:49	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	768a0741	4f739670	.config	log	report
ci2-upstream-usb	2020/06/17 07:35	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b3a9e3b9	b9f3810b	.config	log	report