bisecting fixing commit since b2d229d4ddb17db541098b83524d901257e93845
building syzkaller on 8bcc32a67bc7180173447e1a78c03dae096b4231
testing commit b2d229d4ddb17db541098b83524d901257e93845
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 3678f943e91a2bda2a4058169915fcb53fc666d86f59a60d9c3f0f1d1ba55fe1
run #0: crashed: KASAN: use-after-free Read in kernfs_next_descendant_post
run #1: crashed: KASAN: use-after-free Read in kernfs_next_descendant_post
run #2: crashed: WARNING in firmware_fallback_sysfs
run #3: crashed: WARNING in firmware_fallback_sysfs
run #4: crashed: WARNING in firmware_fallback_sysfs
run #5: crashed: WARNING in firmware_fallback_sysfs
run #6: crashed: WARNING in firmware_fallback_sysfs
run #7: crashed: WARNING in firmware_fallback_sysfs
run #8: crashed: WARNING in firmware_fallback_sysfs
run #9: crashed: WARNING in firmware_fallback_sysfs
run #10: crashed: WARNING in firmware_fallback_sysfs
run #11: crashed: WARNING in firmware_fallback_sysfs
run #12: crashed: WARNING in firmware_fallback_sysfs
run #13: crashed: WARNING in firmware_fallback_sysfs
run #14: crashed: WARNING in firmware_fallback_sysfs
run #15: crashed: WARNING in firmware_fallback_sysfs
run #16: crashed: WARNING in firmware_fallback_sysfs
run #17: crashed: WARNING in firmware_fallback_sysfs
run #18: crashed: WARNING in firmware_fallback_sysfs
run #19: crashed: WARNING in firmware_fallback_sysfs
testing current HEAD b13baccc3850ca8b8cccbf8ed9912dbaa0fdf7f3
testing commit b13baccc3850ca8b8cccbf8ed9912dbaa0fdf7f3
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 28a1a7b9735ae52465d0bb13f2c54e41aeb8a0a40f853d87cd2da7b4280e326a
run #0: crashed: WARNING in firmware_fallback_sysfs
run #1: crashed: WARNING in firmware_fallback_sysfs
run #2: crashed: WARNING in firmware_fallback_sysfs
run #3: crashed: WARNING in corrupted
run #4: crashed: WARNING in firmware_fallback_sysfs
run #5: crashed: WARNING in firmware_fallback_sysfs
run #6: crashed: WARNING in firmware_fallback_sysfs
run #7: crashed: WARNING in firmware_fallback_sysfs
run #8: crashed: WARNING in firmware_fallback_sysfs
run #9: crashed: WARNING in firmware_fallback_sysfs
revisions tested: 2, total time: 22m43.622875283s (build: 13m5.144445532s, test: 9m4.983014785s)
the crash still happens on HEAD
commit msg: Linux 5.19-rc2
crash: WARNING in firmware_fallback_sysfs
------------[ cut here ]------------
sysfs group 'power' not found for kobject 'ueagle-atm!eagleII.fw'
WARNING: CPU: 1 PID: 918 at fs/sysfs/group.c:278 sysfs_remove_group+0xf2/0x140 fs/sysfs/group.c:278
Modules linked in:
CPU: 1 PID: 918 Comm: kworker/1:2 Not tainted 5.19.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events request_firmware_work_func
RIP: 0010:sysfs_remove_group+0xf2/0x140 fs/sysfs/group.c:278
Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 3e 48 8b 33 48 c7 c7 00 b7 fd 88 e8 2c a1 70 06 <0f> 0b 48 83 c4 08 5b 5d 41 5c c3 e8 be de cc ff e9 26 ff ff ff 48
RSP: 0018:ffffc90004327a80 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffffffff89597540 RCX: 0000000000000000
RDX: 0000000000000001 RSI: 0000000000000004 RDI: fffff52000864f42
RBP: 0000000000000000 R08: 0000000000000001 R09: ffff8880b9f2792b
R10: ffffed10173e4f25 R11: 0000000000002000 R12: ffff88807826c008
R13: ffff88801a9d90a8 R14: ffff88807826c088 R15: ffff8880231d8e00
FS:  0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb9503a0000 CR3: 000000007c833000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 device_del+0x1ee/0xb80 drivers/base/core.c:3581
 fw_load_sysfs_fallback drivers/base/firmware_loader/fallback.c:120 [inline]
 fw_load_from_user_helper drivers/base/firmware_loader/fallback.c:158 [inline]
 firmware_fallback_sysfs+0x457/0x920 drivers/base/firmware_loader/fallback.c:234
 _request_firmware+0x2c2/0x760 drivers/base/firmware_loader/main.c:856
 request_firmware_work_func+0xd7/0x230 drivers/base/firmware_loader/main.c:1105
 process_one_work+0x841/0x13a0 kernel/workqueue.c:2289
 worker_thread+0x598/0xec0 kernel/workqueue.c:2436
 kthread+0x299/0x340 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302
 </TASK>