WARNING in ath9k_hif_usb_alloc_urbs/usb_submit

WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
Status: upstream: reported C repro on 2020/06/19 17:26
Reported-by: syzbot+d625c772c7814faabef9@syzkaller.appspotmail.com
First crash: 488d, last: 4d20h

Cause bisection: failed (bisect log)

Patch testing requests:
Created	Duration	User	Patch	Repo	Result
2020/09/10 02:49	19m	bxb5544@psu.edu		upstream	OK

Sample crash report:

usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 3 != type 1
WARNING: CPU: 1 PID: 8157 at drivers/usb/core/urb.c:493 usb_submit_urb+0xd27/0x1540 drivers/usb/core/urb.c:493
Modules linked in:
CPU: 1 PID: 8157 Comm: kworker/1:4 Not tainted 5.13.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events request_firmware_work_func
RIP: 0010:usb_submit_urb+0xd27/0x1540 drivers/usb/core/urb.c:493
Code: 84 d4 02 00 00 e8 a9 78 23 fc 4c 89 ef e8 a1 85 0c ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 20 f2 26 8a e8 c0 65 8e 03 <0f> 0b e9 81 f8 ff ff e8 7d 78 23 fc 48 81 c5 40 06 00 00 e9 ad f7
RSP: 0018:ffffc9000c657b58 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff888031b98300 RSI: ffffffff815ca6f5 RDI: fffff520018caf5d
RBP: ffff888019913c50 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff815c452e R11: 0000000000000000 R12: 0000000000000003
R13: ffff8880178700a8 R14: ffff88802da56c40 R15: ffff888016df4700
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4477cee000 CR3: 00000000190b3000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ath9k_hif_usb_alloc_rx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:901 [inline]
 ath9k_hif_usb_alloc_urbs+0x7cf/0x1040 drivers/net/wireless/ath/ath9k/hif_usb.c:1012
 ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1102 [inline]
 ath9k_hif_usb_firmware_cb+0x148/0x530 drivers/net/wireless/ath/ath9k/hif_usb.c:1235

Crashes (611):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Title
ci-upstream-kasan-gce-selinux-root	2021/07/09 22:07	upstream	3dbdb38e2869	281e815f	.config	log	report	syz	C		WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-smack-root	2021/05/31 01:27	upstream	b90e90f40b4f	325a8dab	.config	log	report	syz	C		WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/05/28 02:44	upstream	d7c5303fbc8a	858ea628	.config	log	report	syz	C		WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/06/21 07:21	linux-next	a1f92694393a	aba2b2fb	.config	log	report	syz	C		WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2020/12/09 09:02	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b175d273d4e4	99917735	.config	log	report	syz	C
ci2-upstream-usb	2020/06/17 07:43	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b3a9e3b9622a	b9f3810b	.config	log	report	syz	C
ci-upstream-kasan-gce	2021/10/14 08:45	upstream	348949d9a444	5462d470	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/10/10 14:07	upstream	7fd2bf83d59a	838e7e2c	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/10/10 11:12	upstream	7fd2bf83d59a	838e7e2c	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/10/01 21:46	upstream	24f67d82c43c	cc80db95	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/10/01 13:13	upstream	4de593fb965f	1d849ab4	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/09/24 01:10	upstream	58e2cf5d7946	8cac236e	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/09/15 20:39	upstream	3ca706c189db	07e953c1	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/09/14 23:33	upstream	1619b69edce1	07e953c1	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/09/13 22:20	upstream	6880fa6c5660	3ce60af8	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/09/01 11:59	upstream	9c849ce86e0f	7eb7e152	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/09/01 06:11	upstream	9c849ce86e0f	7eb7e152	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/08/30 12:48	upstream	90ac80dcd313	be2c130d	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/08/21 20:21	upstream	002c0aef1090	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/08/13 21:01	upstream	f8e6dfc64f61	3fd2ea69	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-smack-root	2021/08/03 07:09	upstream	c500bee1c5b2	6c236867	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-386	2021/09/26 08:48	upstream	a5e0aceabef6	8cac236e	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/10/06 09:42	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	f3351eca1fb1	0a63fd36	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/09/26 12:02	linux-next	5a5d008887b4	8cac236e	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/09/12 23:45	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	78e709522d2c	3ce60af8	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/09/06 23:44	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	27151f177827	6ca60148	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/09/02 05:40	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	835d31d319d9	7eb7e152	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/09/01 19:27	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	835d31d319d9	7eb7e152	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/28 18:25	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	9c1587d99f93	be2c130d	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/27 23:09	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	9c1587d99f93	57b01c6e	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/26 13:39	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	669bc5a188b4	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/26 12:27	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	669bc5a188b4	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/26 04:31	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	d7428bc26fc7	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/25 23:33	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	d7428bc26fc7	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/25 20:36	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	d7428bc26fc7	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/25 16:02	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	d7428bc26fc7	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/25 06:02	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	d7428bc26fc7	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/23 18:16	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e4788edc730a	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/23 01:17	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e4788edc730a	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/22 23:15	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e4788edc730a	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/22 19:29	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e4788edc730a	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/22 15:26	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e4788edc730a	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/22 08:54	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e4788edc730a	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/08/22 02:21	linux-next	86ed57fd8c93	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/21 01:55	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e4788edc730a	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/21 00:29	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e4788edc730a	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/20 15:37	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e4788edc730a	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/20 02:50	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e4788edc730a	b599f2fc	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/19 22:52	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e4788edc730a	e2da378b	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/19 14:49	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e4788edc730a	e2da378b	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/19 10:49	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e4788edc730a	a2fe1cb5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/19 03:59	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e4788edc730a	a2fe1cb5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/18 22:29	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e77939ee63a7	a2fe1cb5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/08/18 14:44	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e77939ee63a7	a2fe1cb5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/01/07 13:37	upstream	71c061d24438	c104d4a3	.config	log	report			info
ci2-upstream-usb	2020/06/17 07:35	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b3a9e3b9622a	b9f3810b	.config	log	report