Extracting prog: 1h27m25.215485973s
Minimizing prog: 35m27.363458581s
Simplifying prog options: 0s
Extracting C: 1m53.480362407s
Simplifying C: 13m22.055430695s


extracting reproducer from 28 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-syz_usb_connect-openat
detailed listing:
executing program 0:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 28 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 4, 5, 11, 9, 14, 5, 11, 6, 9, 16, 7, 2, 4, 1, 9, 8, 13, 11, 10, 10, 2, 14, 19, 4, 2, 4, 6]
detailed listing:
executing program 1:
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000883}, 0x80)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x20048840)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070029000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
writev(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)='[', 0x1}], 0x1)
executing program 4:
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, &(0x7f0000000300)='\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x0)
read(r0, &(0x7f0000000500)=""/200, 0xc8)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/serial8250/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='serial8250\x00', 0xb)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='usb251xb\x00', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/platform/drivers/usb251xb/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='serial8250\x00', 0xb)
close(r2)
executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc)
close(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)='auto\n', 0x5)
write(0xffffffffffffffff, &(0x7f0000000480)='on\n  ', 0x5)
close(0xffffffffffffffff)
executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x1, 0x2, r2})
executing program 0:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000e5"], 0x40}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0)
executing program 0:
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x200000})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil, 0x0, r2})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0x0, 0x100000, 0x8})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x0, 0x100000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, &(0x7f0000000000/0x100000)=nil, 0x0, r2})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x0, 0x100000})
executing program 3:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
syz_create_resource$binfmt(0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x3, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1a3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002000000405a06090000010102000109021900010100c0320904000001ff00000007058102000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev_mnt/ttyUSB0\x00', 0x2, 0x0)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000600))
executing program 4:
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000500)={0x1, 0x0, [{0x6, 0x4, 0x0, 0x0, @adapter={0xfffffffffffffdfd, 0xf, 0x2, 0x1, 0x4}}]})
executing program 0:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000000)="d9", 0x5e0, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r3, 0x1, 0x9, 0x6, @local}, 0x14)
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil})
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0xc)
write(0xffffffffffffffff, &(0x7f0000000400)='0\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0)
write(r2, &(0x7f0000000600)='10000\n\x00', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write(r3, &(0x7f0000000800)='1\n\x00', 0x2)
executing program 1:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000e5"], 0x40}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0)
executing program 1:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='5-1:1.0\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/digi_acceleport/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='5-1:1.0\x00', 0x8)
close(r1)
executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x0, 0x6000)
read$FUSE(r1, 0x0, 0x0)
executing program 2:
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="0417"], 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc)
close(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)='auto\n', 0x5)
write(0xffffffffffffffff, &(0x7f0000000480)='on\n  ', 0x5)
close(0xffffffffffffffff)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='file0\x00', 0x6)
close(r2)
symlink(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb)
close(r3)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)
executing program 3:
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa)
executing program 3:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
syz_create_resource$binfmt(0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-syz_usb_connect-openat
detailed listing:
executing program 0:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 28 programs with base timeout 1m40s
testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 4, 5, 11, 9, 14, 5, 11, 6, 9, 16, 7, 2, 4, 1, 9, 8, 13, 11, 10, 10, 2, 14, 19, 4, 2, 4, 6]
detailed listing:
executing program 1:
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000883}, 0x80)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x20048840)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070029000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
writev(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)='[', 0x1}], 0x1)
executing program 4:
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, &(0x7f0000000300)='\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x0)
read(r0, &(0x7f0000000500)=""/200, 0xc8)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/serial8250/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='serial8250\x00', 0xb)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='usb251xb\x00', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/platform/drivers/usb251xb/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='serial8250\x00', 0xb)
close(r2)
executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc)
close(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)='auto\n', 0x5)
write(0xffffffffffffffff, &(0x7f0000000480)='on\n  ', 0x5)
close(0xffffffffffffffff)
executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x1, 0x2, r2})
executing program 0:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000e5"], 0x40}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0)
executing program 0:
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x200000})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil, 0x0, r2})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0x0, 0x100000, 0x8})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x0, 0x100000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, &(0x7f0000000000/0x100000)=nil, 0x0, r2})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x0, 0x100000})
executing program 3:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
syz_create_resource$binfmt(0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x3, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1a3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002000000405a06090000010102000109021900010100c0320904000001ff00000007058102000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev_mnt/ttyUSB0\x00', 0x2, 0x0)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000600))
executing program 4:
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000500)={0x1, 0x0, [{0x6, 0x4, 0x0, 0x0, @adapter={0xfffffffffffffdfd, 0xf, 0x2, 0x1, 0x4}}]})
executing program 0:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000000)="d9", 0x5e0, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r3, 0x1, 0x9, 0x6, @local}, 0x14)
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil})
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0xc)
write(0xffffffffffffffff, &(0x7f0000000400)='0\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0)
write(r2, &(0x7f0000000600)='10000\n\x00', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write(r3, &(0x7f0000000800)='1\n\x00', 0x2)
executing program 1:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000e5"], 0x40}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0)
executing program 1:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='5-1:1.0\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/digi_acceleport/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='5-1:1.0\x00', 0x8)
close(r1)
executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x0, 0x6000)
read$FUSE(r1, 0x0, 0x0)
executing program 2:
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="0417"], 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc)
close(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)='auto\n', 0x5)
write(0xffffffffffffffff, &(0x7f0000000480)='on\n  ', 0x5)
close(0xffffffffffffffff)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='file0\x00', 0x6)
close(r2)
symlink(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb)
close(r3)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)
executing program 3:
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa)
executing program 3:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
syz_create_resource$binfmt(0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

program crashed: possible deadlock in digi_set_modem_signals
bisect: bisecting 28 programs
bisect: split chunks (needed=false): <27>
bisect: split chunk #0 of len 27 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 16, 7, 2, 4, 1, 9, 8, 13, 11, 10, 10, 2, 14, 19, 4, 2, 4, 6]
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x200000})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil, 0x0, r2})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0x0, 0x100000, 0x8})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x0, 0x100000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, &(0x7f0000000000/0x100000)=nil, 0x0, r2})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x0, 0x100000})
executing program 3:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
syz_create_resource$binfmt(0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x3, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1a3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002000000405a06090000010102000109021900010100c0320904000001ff00000007058102000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev_mnt/ttyUSB0\x00', 0x2, 0x0)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000600))
executing program 4:
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000500)={0x1, 0x0, [{0x6, 0x4, 0x0, 0x0, @adapter={0xfffffffffffffdfd, 0xf, 0x2, 0x1, 0x4}}]})
executing program 0:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000000)="d9", 0x5e0, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r3, 0x1, 0x9, 0x6, @local}, 0x14)
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil})
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0xc)
write(0xffffffffffffffff, &(0x7f0000000400)='0\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0)
write(r2, &(0x7f0000000600)='10000\n\x00', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write(r3, &(0x7f0000000800)='1\n\x00', 0x2)
executing program 1:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000e5"], 0x40}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0)
executing program 1:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='5-1:1.0\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/digi_acceleport/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='5-1:1.0\x00', 0x8)
close(r1)
executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x0, 0x6000)
read$FUSE(r1, 0x0, 0x0)
executing program 2:
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="0417"], 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc)
close(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)='auto\n', 0x5)
write(0xffffffffffffffff, &(0x7f0000000480)='on\n  ', 0x5)
close(0xffffffffffffffff)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='file0\x00', 0x6)
close(r2)
symlink(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb)
close(r3)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)
executing program 3:
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa)
executing program 3:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
syz_create_resource$binfmt(0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

program crashed: possible deadlock in digi_set_modem_signals
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 10, 10, 2, 14, 19, 4, 2, 4, 6]
detailed listing:
executing program 1:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000e5"], 0x40}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0)
executing program 1:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='5-1:1.0\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/digi_acceleport/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='5-1:1.0\x00', 0x8)
close(r1)
executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x0, 0x6000)
read$FUSE(r1, 0x0, 0x0)
executing program 2:
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="0417"], 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc)
close(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)='auto\n', 0x5)
write(0xffffffffffffffff, &(0x7f0000000480)='on\n  ', 0x5)
close(0xffffffffffffffff)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='file0\x00', 0x6)
close(r2)
symlink(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb)
close(r3)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)
executing program 3:
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa)
executing program 3:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
syz_create_resource$binfmt(0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

program crashed: possible deadlock in digi_set_modem_signals
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-syz_usb_connect-openat
detailed listing:
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
bisect: split chunks (needed=true): <9>
bisect: split chunk #0 of len 9 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 4, 2, 4, 6]
detailed listing:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='file0\x00', 0x6)
close(r2)
symlink(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb)
close(r3)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)
executing program 3:
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa)
executing program 3:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
syz_create_resource$binfmt(0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 10, 10, 2, 14, 4]
detailed listing:
executing program 1:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000e5"], 0x40}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0)
executing program 1:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='5-1:1.0\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/digi_acceleport/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='5-1:1.0\x00', 0x8)
close(r1)
executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x0, 0x6000)
read$FUSE(r1, 0x0, 0x0)
executing program 2:
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="0417"], 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc)
close(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)='auto\n', 0x5)
write(0xffffffffffffffff, &(0x7f0000000480)='on\n  ', 0x5)
close(0xffffffffffffffff)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <5>
bisect: split chunk #0 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 14, 4]
detailed listing:
executing program 2:
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="0417"], 0x9)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc)
close(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)='auto\n', 0x5)
write(0xffffffffffffffff, &(0x7f0000000480)='on\n  ', 0x5)
close(0xffffffffffffffff)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 10, 10, 4]
detailed listing:
executing program 1:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000e5"], 0x40}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0)
executing program 1:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='5-1:1.0\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/digi_acceleport/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='5-1:1.0\x00', 0x8)
close(r1)
executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x0, 0x6000)
read$FUSE(r1, 0x0, 0x0)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <3>
bisect: split chunk #0 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 4]
detailed listing:
executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x0, 0x6000)
read$FUSE(r1, 0x0, 0x0)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 10, 4]
detailed listing:
executing program 1:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000e5"], 0x40}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0)
executing program 1:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='5-1:1.0\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/digi_acceleport/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='5-1:1.0\x00', 0x8)
close(r1)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 4]
detailed listing:
executing program 1:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='5-1:1.0\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/digi_acceleport/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='5-1:1.0\x00', 0x8)
close(r1)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 2 programs left: 

executing program 1:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='5-1:1.0\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/digi_acceleport/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='5-1:1.0\x00', 0x8)
close(r1)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)


bisect: trying to concatenate
bisect: concatenate 2 entries
minimizing program #0 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 4]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='5-1:1.0\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/digi_acceleport/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='5-1:1.0\x00', 0x8)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 4]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='5-1:1.0\x00', 0x8)
close(r0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/digi_acceleport/bind\x00', 0x1, 0x0)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 4]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='5-1:1.0\x00', 0x8)
close(r0)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 4]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='5-1:1.0\x00', 0x8)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/digi_acceleport/unbind\x00', 0x1, 0x0)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 4]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 4]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 4]
detailed listing:
executing program 0:
executing program 2:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
minimized 10 calls -> 1 calls
minimizing program #1 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 3]
detailed listing:
executing program 1:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
executing program 0:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 3]
detailed listing:
executing program 1:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
executing program 0:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 2]
detailed listing:
executing program 1:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
executing program 0:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 2]
detailed listing:
executing program 1:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
executing program 0:
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
minimized 4 calls -> 3 calls
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
bisect: concatenation succeeded
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=1m47.242989332s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)

program did not crash
testing program (duration=1m47.242989332s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-openat
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
testing program (duration=1m47.242989332s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mount-openat
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
testing program (duration=1m47.242989332s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount-openat
detailed listing:
executing program 0:
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
testing program (duration=1m47.242989332s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, 0x0, 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
testing program (duration=1m47.242989332s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
testing program (duration=1m47.242989332s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
mkdir(0x0, 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
testing program (duration=1m47.242989332s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
testing program (duration=1m47.242989332s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program did not crash
testing program (duration=1m47.242989332s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xe002, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m47.242989332s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
program crashed: possible deadlock in digi_set_modem_signals
simplifying C reproducer
testing compiled C program (duration=1m47.242989332s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
program crashed: possible deadlock in digi_set_modem_signals
testing compiled C program (duration=1m47.242989332s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
program crashed: possible deadlock in digi_set_modem_signals
testing compiled C program (duration=1m47.242989332s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
program crashed: possible deadlock in digi_set_modem_signals
testing compiled C program (duration=1m47.242989332s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
program crashed: possible deadlock in digi_set_modem_signals
testing compiled C program (duration=1m47.242989332s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
program crashed: possible deadlock in digi_set_modem_signals
testing compiled C program (duration=1m47.242989332s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
program crashed: possible deadlock in digi_set_modem_signals
testing compiled C program (duration=1m47.242989332s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
program crashed: possible deadlock in digi_set_modem_signals
testing program (duration=1m47.242989332s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
validation run: crashed=true
testing program (duration=1m47.242989332s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
validation run: crashed=true
testing program (duration=1m47.242989332s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdir-mount-openat
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080320904000008ff0000000705810200020007050102000200070582020002000705020200020007058302000200070503020002000705840200020007050402000200"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0)

program crashed: possible deadlock in digi_set_modem_signals
validation run: crashed=true
reproducing took 2h25m1.8336284s
repro crashed as (corrupted=false):
============================================
WARNING: possible recursive locking detected
syzkaller #0 Not tainted
--------------------------------------------
syz.0.17/5895 is trying to acquire lock:
ffff8880382d9058 (&priv->dp_port_lock){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline]
ffff8880382d9058 (&priv->dp_port_lock){+.+.}-{3:3}, at: digi_set_modem_signals+0x19d/0x8c0 drivers/usb/serial/digi_acceleport.c:525

but task is already holding lock:
ffff8880382d9858 (&priv->dp_port_lock){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline]
ffff8880382d9858 (&priv->dp_port_lock){+.+.}-{3:3}, at: digi_set_modem_signals+0x195/0x8c0 drivers/usb/serial/digi_acceleport.c:524

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(&priv->dp_port_lock);
  lock(&priv->dp_port_lock);

 *** DEADLOCK ***

 May be due to missing lock nesting notation

3 locks held by syz.0.17/5895:
 #0: ffff8880380da1a0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev+0x74/0x4d0 drivers/tty/tty_io.c:1406
 #1: ffff8880382d9858 (&priv->dp_port_lock){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline]
 #1: ffff8880382d9858 (&priv->dp_port_lock){+.+.}-{3:3}, at: digi_set_modem_signals+0x195/0x8c0 drivers/usb/serial/digi_acceleport.c:524
 #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
 #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline]
 #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 kernel/locking/spinlock_rt.c:57

stack backtrace:
CPU: 1 UID: 0 PID: 5895 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_deadlock_bug+0x279/0x290 kernel/locking/lockdep.c:3041
 check_deadlock kernel/locking/lockdep.c:3093 [inline]
 validate_chain kernel/locking/lockdep.c:3895 [inline]
 __lock_acquire+0x24df/0x2ce0 kernel/locking/lockdep.c:5237
 lock_acquire+0x106/0x350 kernel/locking/lockdep.c:5868
 rt_spin_lock+0x83/0x400 kernel/locking/spinlock_rt.c:56
 spin_lock include/linux/spinlock_rt.h:45 [inline]
 digi_set_modem_signals+0x19d/0x8c0 drivers/usb/serial/digi_acceleport.c:525
 tty_port_raise_dtr_rts drivers/tty/tty_port.c:456 [inline]
 tty_port_block_til_ready+0x386/0x890 drivers/tty/tty_port.c:540
 tty_open+0x496/0xcd0 drivers/tty/tty_io.c:2137
 chrdev_open+0x4dc/0x600 fs/char_dev.c:411
 do_dentry_open+0x849/0x1420 fs/open.c:947
 vfs_open+0x3b/0x350 fs/open.c:1052
 do_open fs/namei.c:4700 [inline]
 path_openat+0x2e60/0x3850 fs/namei.c:4863
 do_file_open+0x23e/0x4a0 fs/namei.c:4892
 do_sys_openat2+0x115/0x200 fs/open.c:1368
 do_sys_open fs/open.c:1374 [inline]
 __do_sys_openat fs/open.c:1390 [inline]
 __se_sys_openat fs/open.c:1385 [inline]
 __x64_sys_openat+0x138/0x170 fs/open.c:1385
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6cb8efdf99
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc74d2b3f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f6cb9185fa0 RCX: 00007f6cb8efdf99
RDX: 000000000000e002 RSI: 0000200000000400 RDI: ffffffffffffff9c
RBP: 00007f6cb8f94ec4 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f6cb9185fac R14: 00007f6cb9185fa0 R15: 00007f6cb9185fa0
 </TASK>

final repro crashed as (corrupted=false):
============================================
WARNING: possible recursive locking detected
syzkaller #0 Not tainted
--------------------------------------------
syz.0.17/5895 is trying to acquire lock:
ffff8880382d9058 (&priv->dp_port_lock){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline]
ffff8880382d9058 (&priv->dp_port_lock){+.+.}-{3:3}, at: digi_set_modem_signals+0x19d/0x8c0 drivers/usb/serial/digi_acceleport.c:525

but task is already holding lock:
ffff8880382d9858 (&priv->dp_port_lock){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline]
ffff8880382d9858 (&priv->dp_port_lock){+.+.}-{3:3}, at: digi_set_modem_signals+0x195/0x8c0 drivers/usb/serial/digi_acceleport.c:524

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(&priv->dp_port_lock);
  lock(&priv->dp_port_lock);

 *** DEADLOCK ***

 May be due to missing lock nesting notation

3 locks held by syz.0.17/5895:
 #0: ffff8880380da1a0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev+0x74/0x4d0 drivers/tty/tty_io.c:1406
 #1: ffff8880382d9858 (&priv->dp_port_lock){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline]
 #1: ffff8880382d9858 (&priv->dp_port_lock){+.+.}-{3:3}, at: digi_set_modem_signals+0x195/0x8c0 drivers/usb/serial/digi_acceleport.c:524
 #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
 #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline]
 #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 kernel/locking/spinlock_rt.c:57

stack backtrace:
CPU: 1 UID: 0 PID: 5895 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_deadlock_bug+0x279/0x290 kernel/locking/lockdep.c:3041
 check_deadlock kernel/locking/lockdep.c:3093 [inline]
 validate_chain kernel/locking/lockdep.c:3895 [inline]
 __lock_acquire+0x24df/0x2ce0 kernel/locking/lockdep.c:5237
 lock_acquire+0x106/0x350 kernel/locking/lockdep.c:5868
 rt_spin_lock+0x83/0x400 kernel/locking/spinlock_rt.c:56
 spin_lock include/linux/spinlock_rt.h:45 [inline]
 digi_set_modem_signals+0x19d/0x8c0 drivers/usb/serial/digi_acceleport.c:525
 tty_port_raise_dtr_rts drivers/tty/tty_port.c:456 [inline]
 tty_port_block_til_ready+0x386/0x890 drivers/tty/tty_port.c:540
 tty_open+0x496/0xcd0 drivers/tty/tty_io.c:2137
 chrdev_open+0x4dc/0x600 fs/char_dev.c:411
 do_dentry_open+0x849/0x1420 fs/open.c:947
 vfs_open+0x3b/0x350 fs/open.c:1052
 do_open fs/namei.c:4700 [inline]
 path_openat+0x2e60/0x3850 fs/namei.c:4863
 do_file_open+0x23e/0x4a0 fs/namei.c:4892
 do_sys_openat2+0x115/0x200 fs/open.c:1368
 do_sys_open fs/open.c:1374 [inline]
 __do_sys_openat fs/open.c:1390 [inline]
 __se_sys_openat fs/open.c:1385 [inline]
 __x64_sys_openat+0x138/0x170 fs/open.c:1385
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6cb8efdf99
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc74d2b3f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f6cb9185fa0 RCX: 00007f6cb8efdf99
RDX: 000000000000e002 RSI: 0000200000000400 RDI: ffffffffffffff9c
RBP: 00007f6cb8f94ec4 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f6cb9185fac R14: 00007f6cb9185fa0 R15: 00007f6cb9185fa0
 </TASK>