Extracting prog: 4m21.383743824s
Minimizing prog: 7m49.407878674s
Simplifying prog options: 0s
Extracting C: 2m8.087509756s
Simplifying C: 11m39.404633999s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0xf0, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x40, 0x27, 0xe9, 0x40, 0x5cc, 0x3352, 0x9031, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xde, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0xa0, 0x0, 0xe, 0x83, 0xe1, 0x7e, 0x0, [], [{{0x9, 0x5, 0x0, 0x8, 0x200, 0x3, 0xe1, 0x50}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x90, 0x26, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x9, 0xc7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x2af}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x1, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}, @generic={0x2, 0xd}]}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x4, 0x1, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0xf8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x5}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x81, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x6}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x6, 0x2, 0xe9, [@generic={0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x6, 0x6, 0x8, [@generic={0x2, 0xa}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x3f, 0x5, 0x40, [@generic={0x2, 0x23}, @uac_iso={0x7, 0x25, 0x1, 0x102, 0x81, 0x4}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x1, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x9, 0x1c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81}]}}]}}]}}]}}, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0xf0, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x40, 0x27, 0xe9, 0x40, 0x5cc, 0x3352, 0x9031, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xde, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0xa0, 0x0, 0xe, 0x83, 0xe1, 0x7e, 0x0, [], [{{0x9, 0x5, 0x0, 0x8, 0x200, 0x3, 0xe1, 0x50}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x90, 0x26, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x9, 0xc7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x2af}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x1, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}, @generic={0x2, 0xd}]}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x4, 0x1, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0xf8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x5}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x81, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x6}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x6, 0x2, 0xe9, [@generic={0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x6, 0x6, 0x8, [@generic={0x2, 0xa}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x3f, 0x5, 0x40, [@generic={0x2, 0x23}, @uac_iso={0x7, 0x25, 0x1, 0x102, 0x81, 0x4}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x1, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x9, 0x1c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81}]}}]}}]}}]}}, 0x0)

program crashed: WARNING in firmware_fallback_sysfs
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x40, 0x27, 0xe9, 0x40, 0x5cc, 0x3352, 0x9031, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0xa0, 0x0, 0x0, 0x83, 0xe1, 0x7e}}]}}]}}, 0x0)

program crashed: WARNING in firmware_fallback_sysfs
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: WARNING in firmware_fallback_sysfs
reproducing took 25m58.283793493s
repro crashed as (corrupted=false):
sysfs group 'power' not found for kobject 'ueagle-atm!adi930.fw'
WARNING: CPU: 1 PID: 111 at fs/sysfs/group.c:280 sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
Modules linked in:
CPU: 1 PID: 111 Comm: kworker/1:2 Not tainted 6.1.129-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Workqueue: events request_firmware_work_func
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
lr : sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
sp : ffff80001df876a0
x29: ffff80001df876a0 x28: 1fffe00019164005 x27: dfff800000000000
x26: ffff80001df87760 x25: 1fffe0001aabfc0a
 x24: 1ffff00002670ad0
x23: dfff800000000000
 x22: ffff0000d55fe068
 x21: ffff0000d55fe008

x20: ffff0000c38f1ae0 x19: ffff800013385660 x18: ffff80001df86b20
x17: 0000000000000000 x16: ffff80001232163c x15: 0000000000000000

x14: 1ffff00002b5e0b2
 x13: dfff800000000000
 x12: 0000000000000001

x11: 0000000000ff0100
 x10: 0000000000000000
 x9 : 8168f02fd5e9e000

x8 : 8168f02fd5e9e000 x7 : ffff80000834536c x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff800008587574
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
 dpm_sysfs_remove+0xa4/0xd4 drivers/base/power/sysfs.c:837
 device_del+0x268/0x9bc drivers/base/core.c:3861
 fw_load_sysfs_fallback drivers/base/firmware_loader/fallback.c:120 [inline]
 fw_load_from_user_helper drivers/base/firmware_loader/fallback.c:158 [inline]
 firmware_fallback_sysfs+0x5c4/0x8b8 drivers/base/firmware_loader/fallback.c:234
 _request_firmware+0xdb4/0x104c drivers/base/firmware_loader/main.c:884
 request_firmware_work_func+0xfc/0x214 drivers/base/firmware_loader/main.c:1135
 process_one_work+0x804/0x1484 kernel/workqueue.c:2292
 worker_thread+0x8e4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864
irq event stamp: 90526
hardirqs last  enabled at (90525): [<ffff800008345028>] console_emit_next_record+0x6dc/0x8a4 kernel/printk/printk.c:2783
hardirqs last disabled at (90526): [<ffff80001231d31c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (90394): [<ffff8000081c40ac>] softirq_handle_end kernel/softirq.c:421 [inline]
softirqs last  enabled at (90394): [<ffff8000081c40ac>] handle_softirqs+0xb84/0xd58 kernel/softirq.c:606
softirqs last disabled at (90379): [<ffff800008020174>] __do_softirq+0x14/0x20 kernel/softirq.c:612
---[ end trace 0000000000000000 ]---
usb 1-1: [UEAGLE-ATM] firmware is not available
usb 1-1: USB disconnect, device number 39
usb 1-1: new high-speed USB device number 40 using dummy_hcd
usb 1-1: config 0 has an invalid interface number: 160 but max is 0
usb 1-1: config 0 has no interface number 0
usb 1-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=90.31
usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 1-1: config 0 descriptor??
usb 1-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0X9031): ADI930
usb 1-1: reset high-speed USB device number 40 using dummy_hcd
usb 1-1: device descriptor read/64, error -71
usb 1-1: reset high-speed USB device number 40 using dummy_hcd
usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware
usb 1-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw

final repro crashed as (corrupted=false):
sysfs group 'power' not found for kobject 'ueagle-atm!adi930.fw'
WARNING: CPU: 1 PID: 111 at fs/sysfs/group.c:280 sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
Modules linked in:
CPU: 1 PID: 111 Comm: kworker/1:2 Not tainted 6.1.129-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Workqueue: events request_firmware_work_func
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
lr : sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
sp : ffff80001df876a0
x29: ffff80001df876a0 x28: 1fffe00019164005 x27: dfff800000000000
x26: ffff80001df87760 x25: 1fffe0001aabfc0a
 x24: 1ffff00002670ad0
x23: dfff800000000000
 x22: ffff0000d55fe068
 x21: ffff0000d55fe008

x20: ffff0000c38f1ae0 x19: ffff800013385660 x18: ffff80001df86b20
x17: 0000000000000000 x16: ffff80001232163c x15: 0000000000000000

x14: 1ffff00002b5e0b2
 x13: dfff800000000000
 x12: 0000000000000001

x11: 0000000000ff0100
 x10: 0000000000000000
 x9 : 8168f02fd5e9e000

x8 : 8168f02fd5e9e000 x7 : ffff80000834536c x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff800008587574
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 sysfs_remove_group+0x174/0x288 fs/sysfs/group.c:278
 dpm_sysfs_remove+0xa4/0xd4 drivers/base/power/sysfs.c:837
 device_del+0x268/0x9bc drivers/base/core.c:3861
 fw_load_sysfs_fallback drivers/base/firmware_loader/fallback.c:120 [inline]
 fw_load_from_user_helper drivers/base/firmware_loader/fallback.c:158 [inline]
 firmware_fallback_sysfs+0x5c4/0x8b8 drivers/base/firmware_loader/fallback.c:234
 _request_firmware+0xdb4/0x104c drivers/base/firmware_loader/main.c:884
 request_firmware_work_func+0xfc/0x214 drivers/base/firmware_loader/main.c:1135
 process_one_work+0x804/0x1484 kernel/workqueue.c:2292
 worker_thread+0x8e4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864
irq event stamp: 90526
hardirqs last  enabled at (90525): [<ffff800008345028>] console_emit_next_record+0x6dc/0x8a4 kernel/printk/printk.c:2783
hardirqs last disabled at (90526): [<ffff80001231d31c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (90394): [<ffff8000081c40ac>] softirq_handle_end kernel/softirq.c:421 [inline]
softirqs last  enabled at (90394): [<ffff8000081c40ac>] handle_softirqs+0xb84/0xd58 kernel/softirq.c:606
softirqs last disabled at (90379): [<ffff800008020174>] __do_softirq+0x14/0x20 kernel/softirq.c:612
---[ end trace 0000000000000000 ]---
usb 1-1: [UEAGLE-ATM] firmware is not available
usb 1-1: USB disconnect, device number 39
usb 1-1: new high-speed USB device number 40 using dummy_hcd
usb 1-1: config 0 has an invalid interface number: 160 but max is 0
usb 1-1: config 0 has no interface number 0
usb 1-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=90.31
usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 1-1: config 0 descriptor??
usb 1-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0X9031): ADI930
usb 1-1: reset high-speed USB device number 40 using dummy_hcd
usb 1-1: device descriptor read/64, error -71
usb 1-1: reset high-speed USB device number 40 using dummy_hcd
usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware
usb 1-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw