WARNING in ath9k_hif_usb_alloc_urbs/usb_submit

WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
Status: upstream: reported C repro on 2020/06/19 17:26
Reported-by: syzbot+d625c772c7814faabef9@syzkaller.appspotmail.com
First crash: 589d, last: 1d15h

Cause bisection: failed (bisect log)

Patch testing requests:
Created	Duration	User	Patch	Repo	Result
2020/09/10 02:49	19m	bxb5544@psu.edu		upstream	OK

Sample crash report:

usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 3 != type 1
WARNING: CPU: 1 PID: 8157 at drivers/usb/core/urb.c:493 usb_submit_urb+0xd27/0x1540 drivers/usb/core/urb.c:493
Modules linked in:
CPU: 1 PID: 8157 Comm: kworker/1:4 Not tainted 5.13.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events request_firmware_work_func
RIP: 0010:usb_submit_urb+0xd27/0x1540 drivers/usb/core/urb.c:493
Code: 84 d4 02 00 00 e8 a9 78 23 fc 4c 89 ef e8 a1 85 0c ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 20 f2 26 8a e8 c0 65 8e 03 <0f> 0b e9 81 f8 ff ff e8 7d 78 23 fc 48 81 c5 40 06 00 00 e9 ad f7
RSP: 0018:ffffc9000c657b58 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff888031b98300 RSI: ffffffff815ca6f5 RDI: fffff520018caf5d
RBP: ffff888019913c50 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff815c452e R11: 0000000000000000 R12: 0000000000000003
R13: ffff8880178700a8 R14: ffff88802da56c40 R15: ffff888016df4700
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4477cee000 CR3: 00000000190b3000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ath9k_hif_usb_alloc_rx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:901 [inline]
 ath9k_hif_usb_alloc_urbs+0x7cf/0x1040 drivers/net/wireless/ath/ath9k/hif_usb.c:1012
 ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1102 [inline]
 ath9k_hif_usb_firmware_cb+0x148/0x530 drivers/net/wireless/ath/ath9k/hif_usb.c:1235

Crashes (678):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Title
ci-upstream-kasan-gce-selinux-root	2021/07/09 22:07	upstream	3dbdb38e2869	281e815f	.config	log	report	syz	C		WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-smack-root	2021/05/31 01:27	upstream	b90e90f40b4f	325a8dab	.config	log	report	syz	C		WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/05/28 02:44	upstream	d7c5303fbc8a	858ea628	.config	log	report	syz	C		WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2022/01/06 06:16	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	01ec4a2e8f01	6acc789a	.config	log	report	syz	C		WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/06/21 07:21	linux-next	a1f92694393a	aba2b2fb	.config	log	report	syz	C		WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2020/12/09 09:02	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b175d273d4e4	99917735	.config	log	report	syz	C
ci2-upstream-usb	2020/06/17 07:43	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b3a9e3b9622a	b9f3810b	.config	log	report	syz	C
ci-upstream-kasan-gce-root	2022/01/25 17:38	upstream	a08b41ab9e2e	2cbffd88	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-qemu-upstream	2022/01/19 17:42	upstream	1d1df41c5a33	0620189b	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2022/01/19 16:36	upstream	e9f5cbc0c851	0620189b	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-smack-root	2022/01/15 10:35	upstream	112450df61b7	723cfaf0	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2022/01/12 00:44	upstream	6f38be8f2ccd	44d1319a	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2022/01/02 12:43	upstream	278218f6778b	e1768e9c	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2022/01/01 20:19	upstream	800829388818	e1768e9c	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-smack-root	2022/01/01 16:31	upstream	800829388818	e1768e9c	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/12/24 19:47	upstream	7a29b11da965	6caa12e4	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/12/23 03:47	upstream	3f066e882bf1	6caa12e4	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/12/15 02:35	upstream	5472f14a3742	d018dd31	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-qemu-upstream	2021/12/06 00:09	upstream	944207047ca4	a617004c	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-smack-root	2021/12/04 07:32	upstream	12119cfa1052	a617004c	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/12/02 15:15	upstream	58e1100fdc59	61f86278	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/12/02 00:53	upstream	58e1100fdc59	61f86278	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/11/29 03:04	upstream	d06c942efea4	63eeac02	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-qemu-upstream	2021/11/28 18:22	upstream	3498e7f2bb41	63eeac02	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-qemu-upstream	2021/11/28 12:57	upstream	3498e7f2bb41	63eeac02	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/11/26 16:54	upstream	a4849f6000e2	63eeac02	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/11/22 15:50	upstream	136057256686	545ab074	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/11/21 18:39	upstream	923dcc5eb0c1	4eb20a4e	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/11/21 16:36	upstream	923dcc5eb0c1	4eb20a4e	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/11/19 07:32	upstream	4c388a8e740d	31a30fc0	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/11/19 02:55	upstream	6fdf886424cf	31a30fc0	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-qemu-upstream	2021/11/19 00:57	upstream	6fdf886424cf	31a30fc0	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/11/18 20:31	upstream	42eb8fdac2fc	31a30fc0	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/11/17 16:11	upstream	8ab774587903	cafff8b6	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-qemu-upstream	2021/11/15 18:41	upstream	8ab774587903	83f5c9b5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/11/14 05:30	upstream	ccfff0a2bd2a	83f5c9b5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/11/13 09:19	upstream	66f4beaa6c1d	83f5c9b5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/11/13 01:08	upstream	7246f4dcaccc	83f5c9b5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/11/12 19:45	upstream	5833291ab6de	83f5c9b5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/11/12 06:28	upstream	5833291ab6de	75b04091	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/11/10 09:15	upstream	cb690f5238d7	55fa030c	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/11/08 23:18	upstream	e851dfae4371	d29682f1	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/11/08 08:09	upstream	6b75d88fa81b	4c1be0be	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/11/08 06:02	upstream	6b75d88fa81b	4c1be0be	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-qemu-upstream-386	2022/01/11 05:41	upstream	133d9c53c9dc	ddb0ab8c	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-qemu-upstream-386	2022/01/09 08:10	upstream	21f35d2ca83e	2ca0d385	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-qemu-upstream-386	2021/12/04 16:10	upstream	12119cfa1052	a617004c	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-qemu-upstream-386	2021/12/02 02:43	upstream	58e1100fdc59	61f86278	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-qemu-upstream-386	2021/11/29 07:26	upstream	d06c942efea4	63eeac02	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-qemu-upstream-386	2021/11/20 12:27	upstream	9539ba4308ad	4eb20a4e	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-qemu-upstream-386	2021/11/18 05:05	upstream	ee1703cda8dc	cafff8b6	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-386	2021/09/26 08:48	upstream	a5e0aceabef6	8cac236e	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2022/01/26 14:11	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	75c19f487fcd	2cbffd88	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2022/01/03 13:29	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e681a9d2050c	e1768e9c	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/12/30 12:11	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	510a0bdb2bfc	2e49f10d	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/12/21 08:07	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	4daf08a0afa8	a938f0b8	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/12/08 10:03	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	d598c3c46ea6	a4a2a501	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/12/03 12:22	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	76c4c95dac0d	c7c20675	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/12/02 09:53	linux-next	f81e94e91878	61f86278	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/11/29 15:25	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	4d012040161c	d0830353	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/11/27 04:12	linux-next	f81e94e91878	63eeac02	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/11/17 20:09	linux-next	fd96a4057bd0	cafff8b6	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/11/12 00:40	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	048ff8629e11	75b04091	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/01/07 13:37	upstream	71c061d24438	c104d4a3	.config	log	report			info
ci2-upstream-usb	2020/06/17 07:35	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b3a9e3b9622a	b9f3810b	.config	log	report