ci starts bisection 2023-01-31 08:48:09.53784837 +0000 UTC m=+740203.483910443
bisecting fixing commit since fe24a97cf2543e8832e7a2124802e5c32aac05aa
building syzkaller on 5bb7001449cd1dae6cbff2d660374d6d17cbd2c4
ensuring issue is reproducible on original commit fe24a97cf2543e8832e7a2124802e5c32aac05aa

testing commit fe24a97cf2543e8832e7a2124802e5c32aac05aa gcc
compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 2ba85cf203b07be6be8d0d6c020c1a0a9a7ebfe670b57587e46a2d2ccc4f32fe
all runs: crashed: WARNING in carl9170_usb_init_device/usb_submit_urb
testing current HEAD 9f266ccaa2f5228bfe67ad58a94ca4e0109b954a
testing commit 9f266ccaa2f5228bfe67ad58a94ca4e0109b954a gcc
compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: edb5cc627d7747b27d2f5f94e8dfa7bb24110eea3000931b7ff8f50910304d92
all runs: crashed: WARNING in carl9170_usb_init_device/usb_submit_urb
revisions tested: 2, total time: 23m3.72307497s (build: 15m59.008185919s, test: 6m22.609138193s)
the crash still happens on HEAD
commit msg: Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
crash: WARNING in carl9170_usb_init_device/usb_submit_urb
usb 1-1: reset high-speed USB device number 2 using dummy_hcd
usb 1-1: device descriptor read/64, error -71
usb 1-1: reset high-speed USB device number 2 using dummy_hcd
usb 1-1: driver   API: 1.9.9 2016-02-15 [1-1]
usb 1-1: firmware API: 1.9.6 2012-07-07
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 5062 at drivers/usb/core/urb.c:505 usb_submit_urb+0xb0e/0x1660 drivers/usb/core/urb.c:504
Modules linked in:
CPU: 0 PID: 5062 Comm: kworker/0:3 Not tainted 6.2.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Workqueue: events request_firmware_work_func
RIP: 0010:usb_submit_urb+0xb0e/0x1660 drivers/usb/core/urb.c:504
Code: 8a 4c 89 e8 48 c1 e8 03 8a 04 18 84 c0 0f 85 82 07 00 00 45 8b 45 00 48 c7 c7 00 2f c1 8a 4c 89 f2 89 e9 31 c0 e8 92 9f 4a fb <0f> 0b 48 8b 14 24 8d 42 fe 83 f8 02 73 20 8b 4c 24 18 89 c8 c1 e0
RSP: 0018:ffffc900036efa08 EFLAGS: 00010246
RAX: 8f80ba018182f800 RBX: dffffc0000000000 RCX: 0000000000000001
RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000001
RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1017344f5b
R10: ffffed1017344f5b R11: 1ffff11017344f5a R12: ffff88801cd13d00
R13: ffffffff8ac12ce8 R14: ffff888016d9a140 R15: 0000000000000cc0
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055ec230c0950 CR3: 000000002b22f000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 carl9170_usb_send_rx_irq_urb drivers/net/wireless/ath/carl9170/usb.c:504 [inline]
 carl9170_usb_init_device+0x23e/0x7c0 drivers/net/wireless/ath/carl9170/usb.c:939
 carl9170_usb_firmware_finish drivers/net/wireless/ath/carl9170/usb.c:999 [inline]
 carl9170_usb_firmware_step2+0x8a/0x210 drivers/net/wireless/ath/carl9170/usb.c:1028
 request_firmware_work_func+0x193/0x270 drivers/base/firmware_loader/main.c:1107
 process_one_work+0x794/0xc10 kernel/workqueue.c:2289
 worker_thread+0x8ff/0xfe0 kernel/workqueue.c:2436
 kthread+0x228/0x2a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>