WARNING in ath9k_hif_usb_alloc_urbs/usb_submit

WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
Status: upstream: reported C repro on 2020/06/19 17:26
Reported-by: syzbot+d625c772c7814faabef9@syzkaller.appspotmail.com
First crash: 256d, last: 7h49m

Patch testing requests:
Created	Duration	User	Patch	Repo	Result
2020/09/10 02:49	19m	bxb5544@psu.edu		upstream	OK

Sample crash report:

usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 3 != type 1
WARNING: CPU: 1 PID: 2623 at drivers/usb/core/urb.c:493 usb_submit_urb+0xcde/0x14e0 drivers/usb/core/urb.c:493
Modules linked in:
CPU: 1 PID: 2623 Comm: kworker/1:3 Not tainted 5.10.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events request_firmware_work_func
RIP: 0010:usb_submit_urb+0xcde/0x14e0 drivers/usb/core/urb.c:493
Code: 84 d4 02 00 00 e8 82 31 bd fd 4c 89 ef e8 ea 02 1b ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 60 64 41 86 e8 ad 12 f3 01 <0f> 0b e9 ca f8 ff ff e8 56 31 bd fd 48 81 c5 40 06 00 00 e9 f6 f7
RSP: 0018:ffffc90006af7b50 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff88810b9f6500 RSI: ffffffff8128f483 RDI: fffff52000d5ef5c
RBP: ffff888101a58850 R08: 0000000000000001 R09: ffff8881f6b2f5cf
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000003
R13: ffff8881015610a0 R14: ffff888103461cd0 R15: ffff888106668d00
FS:  0000000000000000(0000) GS:ffff8881f6b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558fa14b5160 CR3: 00000001030a8000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ath9k_hif_usb_alloc_rx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:901 [inline]
 ath9k_hif_usb_alloc_urbs+0x7b6/0x1010 drivers/net/wireless/ath/ath9k/hif_usb.c:1012
 ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1102 [inline]
 ath9k_hif_usb_firmware_cb+0x148/0x530 drivers/net/wireless/ath/ath9k/hif_usb.c:1235
 request_firmware_work_func+0x12c/0x230 drivers/base/firmware_loader/main.c:1079
 process_one_work+0x933/0x1520 kernel/workqueue.c:2272
 worker_thread+0x64c/0x1120 kernel/workqueue.c:2418
 kthread+0x38c/0x460 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296

Crashes (53):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Title
ci2-upstream-usb	2020/12/09 09:02	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b175d273	99917735	.config	log	report	syz	C
ci2-upstream-usb	2020/06/17 07:43	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b3a9e3b9	b9f3810b	.config	log	report	syz	C
ci-upstream-kasan-gce-selinux-root	2021/02/28 15:01	upstream	5695e516	4c37c133	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/02/24 04:14	upstream	3b9cdafb	fcc6d71b	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/02/22 04:03	upstream	55f62bc8	a659b3f1	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/02/09 01:29	upstream	e0756cfc	2bd9619f	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/01/29 11:54	upstream	bec4c296	6593fd32	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-selinux-root	2021/01/26 01:04	upstream	f8ad8187	52e37319	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce	2021/01/25 19:09	upstream	6ee1d745	52e37319	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/02/27 18:03	linux-next	d01f2f7e	4c37c133	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/02/18 03:05	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b5a12546	14052202	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/02/06 10:43	linux-next	aa2b8820	23a562df	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/02/05 13:40	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	23e32a59	23a562df	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/01/31 21:11	linux-next	b01f250d	fc9fd31e	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci2-upstream-usb	2021/01/27 18:56	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	1a9e38ca	a57db36f	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/01/22 07:32	linux-next	bc085f8f	d4f4eca5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root	2021/01/21 22:21	linux-next	bc085f8f	d4f4eca5	.config	log	report			info	WARNING in ath9k_hif_usb_alloc_urbs/usb_submit_urb
ci-upstream-kasan-gce-root	2021/01/07 13:37	upstream	71c061d2	c104d4a3	.config	log	report			info
ci-upstream-kasan-gce-root	2021/01/04 13:46	upstream	e71ba945	79264ae3	.config	log	report			info
ci-upstream-kasan-gce-selinux-root	2021/01/04 11:52	upstream	e71ba945	79264ae3	.config	log	report			info
ci-upstream-kasan-gce	2021/01/02 05:28	upstream	eda809ae	79264ae3	.config	log	report			info
ci-upstream-kasan-gce	2020/12/13 23:50	upstream	6bff9bb8	b22a7ec3	.config	log	report			info
ci-upstream-kasan-gce	2020/11/30 08:10	upstream	aae5ab85	a0092f9d	.config	log	report			info
ci-upstream-kasan-gce-selinux-root	2020/11/29 16:30	upstream	aae5ab85	a0092f9d	.config	log	report			info
ci-upstream-kasan-gce-selinux-root	2020/11/27 23:24	upstream	99c710c4	486f93ef	.config	log	report			info
ci-upstream-kasan-gce-root	2020/11/21 16:46	upstream	27bba9c5	68068804	.config	log	report			info
ci-upstream-kasan-gce-selinux-root	2020/11/17 09:01	upstream	9c87c9f4	1bf9a662	.config	log	report			info
ci-upstream-kasan-gce-smack-root	2020/11/17 08:17	upstream	9c87c9f4	1bf9a662	.config	log	report			info
ci-upstream-kasan-gce-root	2020/11/11 05:38	upstream	e2f0c565	cca87986	.config	log	report			info
ci-upstream-kasan-gce-smack-root	2020/11/07 15:35	upstream	659caaf6	64069d48	.config	log	report			info
ci-upstream-kasan-gce-selinux-root	2020/11/02 02:19	upstream	3cea11cd	8bc4594f	.config	log	report			info
ci2-upstream-usb	2020/12/09 21:27	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	8010622c	c090b4da	.config	log	report			info
ci2-upstream-usb	2020/12/06 20:35	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e3541d5d	c521566d	.config	log	report			info
ci2-upstream-usb	2020/12/06 08:42	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e3541d5d	f12ba0c5	.config	log	report			info
ci2-upstream-usb	2020/12/06 08:22	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e3541d5d	f12ba0c5	.config	log	report			info
ci2-upstream-usb	2020/11/29 06:17	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	ab37fa85	a0092f9d	.config	log	report			info
ci2-upstream-usb	2020/11/19 13:11	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e1e52361	0767f13f	.config	log	report			info
ci2-upstream-usb	2020/11/18 08:54	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	0fb2c41f	09323409	.config	log	report			info
ci2-upstream-usb	2020/11/04 09:33	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	35ad0d90	cba33199	.config	log	report			info
ci2-upstream-usb	2020/10/20 03:06	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	726eb70e	ff4a3345	.config	log	report			info
ci2-upstream-usb	2020/10/15 20:58	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	726eb70e	6e262c73	.config	log	report			info
ci2-upstream-usb	2020/10/07 14:35	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	9e858682	1880b4a9	.config	log	report			info
ci2-upstream-usb	2020/10/06 06:55	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	a4f88430	1880b4a9	.config	log	report			info
ci2-upstream-usb	2020/08/07 00:20	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	7b4ea945	cb436c69	.config	log	report
ci2-upstream-usb	2020/08/05 22:34	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e3ee0e74	0487ea6f	.config	log	report
ci2-upstream-usb	2020/07/22 15:05	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	c17536d0	128cd85f	.config	log	report
ci2-upstream-usb	2020/07/20 08:46	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	eed3c957	9c812472	.config	log	report
ci2-upstream-usb	2020/07/16 13:04	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	313da01a	b090c643	.config	log	report
ci2-upstream-usb	2020/07/14 12:16	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	25051b55	6f458026	.config	log	report
ci2-upstream-usb	2020/07/07 21:12	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	768a0741	08fc4ef1	.config	log	report
ci2-upstream-usb	2020/07/04 17:49	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	768a0741	4f739670	.config	log	report
ci2-upstream-usb	2020/06/17 07:35	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b3a9e3b9	b9f3810b	.config	log	report