Extracting prog: 3m30.270340279s
Minimizing prog: 9m10.496642005s
Simplifying prog options: 0s
Extracting C: 1m39.178099172s
Simplifying C: 10m50.204714074s


1 programs, timeouts [15s 6m0s]
extracting reproducer from 1 programs
single: executing 1 programs separately with timeout 15s
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf6, 0x78, 0xbf, 0x10, 0x5cc, 0x3352, 0x4494, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xcc, 0x31, 0x2d, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xb}]}}]}}]}}]}}, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf6, 0x78, 0xbf, 0x10, 0x5cc, 0x3352, 0x4494, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xcc, 0x31, 0x2d, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0xb}]}}]}}]}}]}}, 0x0)

program crashed: INFO: rcu detected stall in corrupted
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
simplifying C reproducer
testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
reproducing took 25m10.149818659s
repro crashed as (corrupted=false):
sysfs group 'power' not found for kobject 'ueagle-atm!adi930.fw'
WARNING: CPU: 0 PID: 3874 at fs/sysfs/group.c:280 sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
Modules linked in:
CPU: 0 PID: 3874 Comm: kworker/0:3 Not tainted 6.1.106-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
Workqueue: events request_firmware_work_func
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
lr : sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
sp : ffff8000205e76a0
x29: ffff8000205e76a0
 x28: 1fffe0001b0e837d x27: dfff800000000000
x26: ffff8000205e7760 x25: 1fffe0001aad0e0a x24: 1ffff00002658060
x23: dfff800000000000 x22: ffff0000d5687068 x21: ffff0000d5687008
x20: ffff0000c3a8bd98 x19: ffff8000132c02e0 x18: ffff8000205e6aa0
x17: 0000000000000000 x16: ffff80001228a15c x15: 0000000000000000
x14: 1ffff00002b380b0 x13: dfff800000000000 x12: 0000000000000001
x11: 0000000000ff0100 x10: 0000000000000000 x9 : 5de6de8b8eefcd00
x8 : 5de6de8b8eefcd00 x7 : ffff8000083488f4 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000858d428
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
 dpm_sysfs_remove+0xa4/0xd4 drivers/base/power/sysfs.c:837
 device_del+0x268/0x9bc drivers/base/core.c:3857
 fw_load_sysfs_fallback drivers/base/firmware_loader/fallback.c:120 [inline]
 fw_load_from_user_helper drivers/base/firmware_loader/fallback.c:158 [inline]
 firmware_fallback_sysfs+0x5c4/0x8b8 drivers/base/firmware_loader/fallback.c:234
 _request_firmware+0xccc/0xf4c drivers/base/firmware_loader/main.c:856
 request_firmware_work_func+0xfc/0x214 drivers/base/firmware_loader/main.c:1105
 process_one_work+0x7ac/0x1404 kernel/workqueue.c:2292
 worker_thread+0x8e4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864
irq event stamp: 80164
hardirqs last  enabled at (80163): [<ffff800008348564>] console_emit_next_record+0x92c/0xb40 kernel/printk/printk.c:2783
hardirqs last disabled at (80164): [<ffff800012285e14>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (80030): [<ffff8000081c80cc>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last  enabled at (80030): [<ffff8000081c80cc>] handle_softirqs+0xb84/0xd58 kernel/softirq.c:599
softirqs last disabled at (80009): [<ffff800008020174>] __do_softirq+0x14/0x20 kernel/softirq.c:605
---[ end trace 0000000000000000 ]---
usb 1-1: [UEAGLE-ATM] firmware is not available
usb 1-1: USB disconnect, device number 28
usb 1-1: new high-speed USB device number 29 using dummy_hcd
usb 1-1: Using ep0 maxpacket: 16
usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping
usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
usb 1-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=44.94
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: config 0 descriptor??
usb 1-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0X4494): ADI930
usb 1-1: reset high-speed USB device number 29 using dummy_hcd
usb 1-1: device descriptor read/64, error -71
usb 1-1: reset high-speed USB device number 29 using dummy_hcd
usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware
usb 1-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw

final repro crashed as (corrupted=false):
sysfs group 'power' not found for kobject 'ueagle-atm!adi930.fw'
WARNING: CPU: 0 PID: 3874 at fs/sysfs/group.c:280 sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
Modules linked in:
CPU: 0 PID: 3874 Comm: kworker/0:3 Not tainted 6.1.106-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
Workqueue: events request_firmware_work_func
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
lr : sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
sp : ffff8000205e76a0
x29: ffff8000205e76a0
 x28: 1fffe0001b0e837d x27: dfff800000000000
x26: ffff8000205e7760 x25: 1fffe0001aad0e0a x24: 1ffff00002658060
x23: dfff800000000000 x22: ffff0000d5687068 x21: ffff0000d5687008
x20: ffff0000c3a8bd98 x19: ffff8000132c02e0 x18: ffff8000205e6aa0
x17: 0000000000000000 x16: ffff80001228a15c x15: 0000000000000000
x14: 1ffff00002b380b0 x13: dfff800000000000 x12: 0000000000000001
x11: 0000000000ff0100 x10: 0000000000000000 x9 : 5de6de8b8eefcd00
x8 : 5de6de8b8eefcd00 x7 : ffff8000083488f4 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000858d428
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
 dpm_sysfs_remove+0xa4/0xd4 drivers/base/power/sysfs.c:837
 device_del+0x268/0x9bc drivers/base/core.c:3857
 fw_load_sysfs_fallback drivers/base/firmware_loader/fallback.c:120 [inline]
 fw_load_from_user_helper drivers/base/firmware_loader/fallback.c:158 [inline]
 firmware_fallback_sysfs+0x5c4/0x8b8 drivers/base/firmware_loader/fallback.c:234
 _request_firmware+0xccc/0xf4c drivers/base/firmware_loader/main.c:856
 request_firmware_work_func+0xfc/0x214 drivers/base/firmware_loader/main.c:1105
 process_one_work+0x7ac/0x1404 kernel/workqueue.c:2292
 worker_thread+0x8e4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864
irq event stamp: 80164
hardirqs last  enabled at (80163): [<ffff800008348564>] console_emit_next_record+0x92c/0xb40 kernel/printk/printk.c:2783
hardirqs last disabled at (80164): [<ffff800012285e14>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (80030): [<ffff8000081c80cc>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last  enabled at (80030): [<ffff8000081c80cc>] handle_softirqs+0xb84/0xd58 kernel/softirq.c:599
softirqs last disabled at (80009): [<ffff800008020174>] __do_softirq+0x14/0x20 kernel/softirq.c:605
---[ end trace 0000000000000000 ]---
usb 1-1: [UEAGLE-ATM] firmware is not available
usb 1-1: USB disconnect, device number 28
usb 1-1: new high-speed USB device number 29 using dummy_hcd
usb 1-1: Using ep0 maxpacket: 16
usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping
usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
usb 1-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=44.94
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: config 0 descriptor??
usb 1-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0X4494): ADI930
usb 1-1: reset high-speed USB device number 29 using dummy_hcd
usb 1-1: device descriptor read/64, error -71
usb 1-1: reset high-speed USB device number 29 using dummy_hcd
usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware
usb 1-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw