usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 3 != type 1
WARNING: CPU: 1 PID: 3273 at drivers/usb/core/urb.c:503 usb_submit_urb+0xce2/0x1920 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 1 PID: 3273 Comm: kworker/1:2 Not tainted 5.19.0-rc1-syzkaller-00303-g7a68065eb9cd #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events request_firmware_work_func
RIP: 0010:usb_submit_urb+0xce2/0x1920 drivers/usb/core/urb.c:502
Code: 48 c1 e8 03 8a 04 18 84 c0 0f 85 d4 08 00 00 45 8b 06 48 c7 c7 60 a6 32 8b 48 8b 74 24 20 4c 89 fa 89 e9 31 c0 e8 ee e7 42 fb <0f> 0b 4c 8b 74 24 30 44 89 e5 48 89 ef 48 c7 c6 f0 dd 55 8d e8 25
RSP: 0018:ffffc90002fff9d8 EFLAGS: 00010246
RAX: 03b025edf3fdbd00 RBX: dffffc0000000000 RCX: ffff8880207b9d80
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000003 R08: ffffffff816bd62d R09: ffffed1017364f14
R10: ffffed1017364f14 R11: 1ffff11017364f13 R12: 0000000000000003
R13: ffff888016cabf00 R14: ffffffff8b32a44c R15: ffff8880177bd348
FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055b69dc70fd8 CR3: 0000000072eb9000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ath9k_hif_usb_alloc_rx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:907 [inline]
 ath9k_hif_usb_alloc_urbs+0x88a/0xe90 drivers/net/wireless/ath/ath9k/hif_usb.c:1018
 ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1108 [inline]
 ath9k_hif_usb_firmware_cb+0x12b/0x4d0 drivers/net/wireless/ath/ath9k/hif_usb.c:1241
 request_firmware_work_func+0x198/0x270 drivers/base/firmware_loader/main.c:1107
 process_one_work+0x81c/0xd10 kernel/workqueue.c:2289
 worker_thread+0xb14/0x1330 kernel/workqueue.c:2436
 kthread+0x266/0x300 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30
 </TASK>