Extracting prog: 4m32.341817707s
Minimizing prog: 18m8.33029382s
Simplifying prog options: 0s
Extracting C: 1m27.898585351s
Simplifying C: 10m32.307114533s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100360f87420cc055233eabd0102030109021b00020000c00009d8c100005429bc000904"], &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0})

program did not crash
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100360f87420cc055233eabd0102030109021b00020000c00009d8c100005429bc000904"], &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0})

program crashed: WARNING in firmware_fallback_sysfs
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, 0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100360f87420cc055233eabd0102030109021b00020000c00009d8c100005429bc000904"], 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100360f87420cc055233eabd0102030109021b00020000c00009d8c100005429bc000904"], &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0})

program crashed: WARNING in firmware_fallback_sysfs
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100360f87420cc055233eabd0102030109021b00020000c00009d8c100005429bc000904"], &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0})

program crashed: WARNING in firmware_fallback_sysfs
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100360f87420cc055233eabd0102030109021b00020000c00009d8c100005429bc000904"], &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0})

program crashed: WARNING in firmware_fallback_sysfs
validation run: crashed=true
reproducing took 39m44.306458422s
repro crashed as (corrupted=false):
WARNING: CPU: 0 PID: 4406 at fs/sysfs/group.c:280 sysfs_remove_group+0x170/0x280 fs/sysfs/group.c:278
Modules linked in:

CPU: 0 PID: 4406 Comm: kworker/0:22 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
Workqueue: events request_firmware_work_func
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : sysfs_remove_group+0x170/0x280 fs/sysfs/group.c:278
lr : sysfs_remove_group+0x170/0x280 fs/sysfs/group.c:278
sp : ffff800020c87740
x29: ffff800020c87740
 x28: dfff800000000000
 x27: 1fffe0001ab07f8f
x26: ffff800020c87800 x25: ffff0000cd7d50a8 x24: 1ffff0000255039c
x23: dfff800000000000 x22: ffff0000d2c59068 x21: ffff0000d2c59008
x20: ffff0000d518ed98 x19: ffff800012a81cc0 x18: ffff800011b8bf60
x17: 1fffe00033ea877e x16: ffff8000082d91a4 x15: ffff80001520d000
x14: 0000000000000001 x13: 1fffe00033eaae30 x12: 0000000000ff0100
x11: ff0080000a8db964 x10: 0000000000000003 x9 : cf1268b4e51f9f00
x8 : cf1268b4e51f9f00 x7 : ffff80000825796c x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000007 x1 : ffff800011b8da80 x0 : ffff80018a3de000
Call trace:
 sysfs_remove_group+0x170/0x280 fs/sysfs/group.c:278
 dpm_sysfs_remove+0xa4/0xd4 drivers/base/power/sysfs.c:837
 device_del+0x258/0x984 drivers/base/core.c:3862
 fw_load_sysfs_fallback drivers/base/firmware_loader/fallback.c:120 [inline]
 fw_load_from_user_helper drivers/base/firmware_loader/fallback.c:158 [inline]
 firmware_fallback_sysfs+0x5a0/0x858 drivers/base/firmware_loader/fallback.c:234
 _request_firmware+0xcf4/0xf84 drivers/base/firmware_loader/main.c:884
 request_firmware_work_func+0xa8/0x19c drivers/base/firmware_loader/main.c:1135
 process_one_work+0x7f8/0x13a4 kernel/workqueue.c:2292
 worker_thread+0x8c4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 18844
hardirqs last  enabled at (18843): [<ffff800008257a00>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1374 [inline]
hardirqs last  enabled at (18843): [<ffff800008257a00>] finish_lock_switch+0xb0/0x1c4 kernel/sched/core.c:5004
hardirqs last disabled at (18844): [<ffff800011a288ec>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (18696): [<ffff8000081ac37c>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (18696): [<ffff8000081ac37c>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (18681): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
usb 1-1: [UEAGLE-ATM] firmware is not available
usb 1-1: USB disconnect, device number 27

final repro crashed as (corrupted=false):
WARNING: CPU: 0 PID: 4406 at fs/sysfs/group.c:280 sysfs_remove_group+0x170/0x280 fs/sysfs/group.c:278
Modules linked in:

CPU: 0 PID: 4406 Comm: kworker/0:22 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
Workqueue: events request_firmware_work_func
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : sysfs_remove_group+0x170/0x280 fs/sysfs/group.c:278
lr : sysfs_remove_group+0x170/0x280 fs/sysfs/group.c:278
sp : ffff800020c87740
x29: ffff800020c87740
 x28: dfff800000000000
 x27: 1fffe0001ab07f8f
x26: ffff800020c87800 x25: ffff0000cd7d50a8 x24: 1ffff0000255039c
x23: dfff800000000000 x22: ffff0000d2c59068 x21: ffff0000d2c59008
x20: ffff0000d518ed98 x19: ffff800012a81cc0 x18: ffff800011b8bf60
x17: 1fffe00033ea877e x16: ffff8000082d91a4 x15: ffff80001520d000
x14: 0000000000000001 x13: 1fffe00033eaae30 x12: 0000000000ff0100
x11: ff0080000a8db964 x10: 0000000000000003 x9 : cf1268b4e51f9f00
x8 : cf1268b4e51f9f00 x7 : ffff80000825796c x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000007 x1 : ffff800011b8da80 x0 : ffff80018a3de000
Call trace:
 sysfs_remove_group+0x170/0x280 fs/sysfs/group.c:278
 dpm_sysfs_remove+0xa4/0xd4 drivers/base/power/sysfs.c:837
 device_del+0x258/0x984 drivers/base/core.c:3862
 fw_load_sysfs_fallback drivers/base/firmware_loader/fallback.c:120 [inline]
 fw_load_from_user_helper drivers/base/firmware_loader/fallback.c:158 [inline]
 firmware_fallback_sysfs+0x5a0/0x858 drivers/base/firmware_loader/fallback.c:234
 _request_firmware+0xcf4/0xf84 drivers/base/firmware_loader/main.c:884
 request_firmware_work_func+0xa8/0x19c drivers/base/firmware_loader/main.c:1135
 process_one_work+0x7f8/0x13a4 kernel/workqueue.c:2292
 worker_thread+0x8c4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 18844
hardirqs last  enabled at (18843): [<ffff800008257a00>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1374 [inline]
hardirqs last  enabled at (18843): [<ffff800008257a00>] finish_lock_switch+0xb0/0x1c4 kernel/sched/core.c:5004
hardirqs last disabled at (18844): [<ffff800011a288ec>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (18696): [<ffff8000081ac37c>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (18696): [<ffff8000081ac37c>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (18681): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
usb 1-1: [UEAGLE-ATM] firmware is not available
usb 1-1: USB disconnect, device number 27