Extracting prog: 25m13.52831442s
Minimizing prog: 2h25m53.982759247s
Simplifying prog options: 17m34.175836185s
Extracting C: 14m34.222689932s
Simplifying C: 0s


extracting reproducer from 64 programs
testing a last program of every proc
single: executing 20 programs separately with timeout 16m0s
testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ee)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='offline', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='n', 0x1)

program did not crash
testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program crashed: INFO: rcu detected stall in corrupted
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)

program did not crash
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
close_range(r0, r0, 0x0)

program did not crash
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program did not crash
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program did not crash
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program did not crash
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program did not crash
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program did not crash
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(0x0, 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program did not crash
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, 0x0, 0x15)
close_range(r0, r0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
program did not crash
simplifying guilty program options
testing program (duration=13m48.280727314s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program did not crash
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program crashed: WARNING in trace_suspend_resume
a never seen crash title: WARNING in trace_suspend_resume, ignore
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program crashed: WARNING in trace_suspend_resume
validation run: crashed=true
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program crashed: WARNING in trace_suspend_resume
validation run: crashed=true
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
reproducing took 4h7m47.995067526s
repro crashed as (corrupted=true):
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	0-...0: (1 GPs behind) idle=e31c/1/0x40000002 softirq=6766/6767 fqs=14964
rcu: 	         hardirqs   softirqs   csw/system
rcu: 	 number:        0          0            0
rcu: 	cputime:        0          0            0   ==> 150010(ms)
rcu: 	(detected by 1, t=30002 jiffies, g=11473, q=874 ncpus=2)
Sending NMI from CPU 1 to CPUs 0:
After 10 seconds, these CPUS still haven't responded to the NMI: 0

report is corrupted, running repro again
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program crashed: INFO: rcu detected stall in corrupted
report is corrupted, running repro again
testing program (duration=13m48.280727314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$audion-write$P9_RVERSION-close_range
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
close_range(r0, r0, 0x0)

program crashed: WARNING in trace_suspend_resume
final repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x19c/0x21c drivers/gpu/drm/drm_vblank.c:1329, CPU#1: kworker/1:0/23
faux_driver vkms: [drm] vblank wait timed out on crtc 0
Modules linked in:
Kernel panic - not syncing: kernel: panic_on_warn set ...
CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT 
Hardware name: ARM-Versatile Express
Workqueue: events drm_fb_helper_damage_work
Call trace: 
[<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257)
 r7:8321c57c r6:00000000 r5:8233f52c r4:00000001
[<80201ae4>] (show_stack) from [<8021f378>] (__dump_stack lib/dump_stack.c:94 [inline])
[<80201ae4>] (show_stack) from [<8021f378>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120)
[<8021f31c>] (dump_stack_lvl) from [<8021f3a4>] (dump_stack+0x18/0x1c lib/dump_stack.c:129)
 r7:8321c57c r6:00000000 r5:8398a580 r4:83489d7c
[<8021f38c>] (dump_stack) from [<802026b8>] (vpanic+0x114/0x320 kernel/panic.c:651)
[<802025a4>] (vpanic) from [<802028f8>] (trace_suspend_resume+0x0/0x100 kernel/panic.c:788)
 r7:80bb9bd8
[<802028c4>] (panic) from [<80251d8c>] (check_panic_on_warn kernel/panic.c:525 [inline])
[<802028c4>] (panic) from [<80251d8c>] (print_tainted+0x0/0x18 kernel/panic.c:520)
 r3:8320b188 r2:00000001 r1:82324cf4 r0:8232c7bc
[<80251d14>] (check_panic_on_warn) from [<80251f38>] (__warn+0x98/0x1a4 kernel/panic.c:1106)
[<80251ea0>] (__warn) from [<8025222c>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:1146)
 r8:00000009 r7:823c6bec r6:df879db4 r5:8398a580 r4:00000000
[<80252048>] (warn_slowpath_fmt) from [<80bb9bd8>] (drm_crtc_wait_one_vblank+0x19c/0x21c drivers/gpu/drm/drm_vblank.c:1329)
 r10:84b04444 r9:ffffff92 r8:00000000 r7:0000921c r6:00000000 r5:00000000
 r4:8403f400
[<80bb9a3c>] (drm_crtc_wait_one_vblank) from [<80bbd790>] (drm_client_modeset_wait_for_vblank+0x60/0x74 drivers/gpu/drm/drm_client_modeset.c:1331)
 r10:8403f050 r9:8403f4c4 r8:8403f588 r7:00000000 r6:8403f400 r5:00000000
 r4:84a63040
[<80bbd730>] (drm_client_modeset_wait_for_vblank) from [<80bd91e0>] (drm_fb_helper_fb_dirty drivers/gpu/drm/drm_fb_helper.c:327 [inline])
[<80bbd730>] (drm_client_modeset_wait_for_vblank) from [<80bd91e0>] (drm_fb_helper_damage_work+0x190/0x3d4 drivers/gpu/drm/drm_fb_helper.c:365)
 r7:00000000 r6:840b92b4 r5:840b9294 r4:840b9200
[<80bd9050>] (drm_fb_helper_damage_work) from [<802787bc>] (process_one_work+0x1f8/0x5cc kernel/workqueue.c:3495)
 r10:8382ae05 r9:01800000 r8:8398a580 r7:ddde5500 r6:8382ae00 r5:840b9294
 r4:8392c480
[<802785c4>] (process_one_work) from [<80279768>] (process_scheduled_works kernel/workqueue.c:3578 [inline])
[<802785c4>] (process_one_work) from [<80279768>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3659)
 r10:ddde5500 r9:8392c4b0 r8:8398a580 r7:83203d80 r6:ddde5520 r5:ddde5500
 r4:8392c480
[<802795fc>] (worker_thread) from [<80284398>] (kthread+0x11c/0x154 kernel/kthread.c:436)
 r10:00000000 r9:df819d10 r8:8392c400 r7:8392c480 r6:802795fc r5:8398a580
 r4:83927380
[<8028427c>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137)
Exception stack(0xdf879fb0 to 0xdf879ff8)
9fa0:                                     00000000 00000000 00000000 00000000
9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
9fe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8028427c r4:83927380
SMP: failed to stop secondary CPUs
Rebooting in 86400 seconds..