WARNING in gl861_ctrl_msg/usb_submit_urb on v7.2-rc3

WARNING in gl861_ctrl_msg/usb_submit_urb on v7.2-rc3

[CJ]

Hi,


syzbot reported "WARNING in gl861_ctrl_msg/usb_submit_urb" on linux-5.15. The same
failure is still reproducible on v7.2-rc3 with the reproducer below.


Tested kernel:
  Linux v7.2-rc3
  HEAD a13c140cc289c0b7b3770bce5b3ad42ab35074aa


Observed failure:
Call Trace:
<TASK>
usb_start_wait_urb+0x105/0x5b0
usb_control_msg+0x321/0x4a0
gl861_ctrl_msg+0x1bd/0x470
gl861_i2c_master_xfer+0x5ab/0x6f0
__i2c_transfer+0x522/0x16b0
i2c_smbus_xfer_emulated+0x313/0x1140
__i2c_smbus_xfer+0x562/0x1060
i2c_smbus_xfer+0x203/0x3c0
i2cdev_ioctl_smbus+0x4b3/0x870
i2cdev_ioctl+0x3f0/0x860
__x64_sys_ioctl+0x199/0x220
do_syscall_64+0xc4/0x7a0
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f291e895fc9
</TASK>


This is the assertion site reported by syzbot; I am not claiming a specific root cause.


This is a report of a still-reproducible failure, not a bisected root cause.


Reproducer:
  C reproducer: https://pastebin.com/raw/RzPqE5mi


Artifacts:
  console:https://pastebin.com/raw/bkcTkxBv
  kernel config: https://syzkaller.appspot.com/text?tag=KernelConfig&x=6a0cae3abafc69


Thanks.