syzbot


WARNING in corrupted

Status: fixed on 2023/09/27 12:10
Reported-by: syzbot+22468fcc3a44c84cb839@syzkaller.appspotmail.com
Fix commit: 8abb53c5167c media: usb: siano: Fix warning due to null work_func_t function pointer
First crash: 613d, last: 494d
Fix bisection: fixed by (bisect log) :
commit 8abb53c5167cfb5bb275512a3da4ec2468478626
Author: Duoming Zhou <duoming@zju.edu.cn>
Date: Mon May 22 23:59:32 2023 +0000

  media: usb: siano: Fix warning due to null work_func_t function pointer

  
Bug presence (1)
Date Name Commit Repro Result
2023/08/02 upstream (ToT) 5d0c230f1de8 C Didn't crash
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in corrupted (2) C done 1 1546d 1546d 1/1 fixed on 2020/09/28 07:49
upstream WARNING in corrupted (2) kernel C done 40 613d 1815d 0/28 closed as dup on 2020/06/28 17:00
upstream WARNING in corrupted (3) usb C done 19 501d 548d 23/28 fixed on 2023/10/12 12:47
linux-4.19 WARNING in corrupted syz done 25 1872d 2024d 1/1 fixed on 2019/12/17 20:23
linux-4.14 WARNING in corrupted gfs2 C inconclusive 70 626d 1991d 0/1 upstream: reported C repro on 2019/06/10 00:20
linux-5.15 WARNING in corrupted C done 3 498d 613d 3/3 fixed on 2023/09/23 10:19
android-414 WARNING in corrupted C 5 1940d 1987d 0/1 public: reported C repro on 2019/06/14 15:02
linux-5.15 WARNING in corrupted (2) origin:lts-only C error 1 76d 76d 0/3 upstream: reported C repro on 2024/09/06 09:26
upstream WARNING in corrupted fs usb C 2 1959d 1959d 0/28 closed as invalid on 2019/08/01 15:17
Fix bisection attempts (4)
Created Duration User Patch Repo Result
2023/09/25 05:12 2h48m bisect fix linux-6.1.y OK (1) job log
2023/07/16 00:07 3h32m bisect fix linux-6.1.y OK (0) job log log
2023/06/07 20:29 33m bisect fix linux-6.1.y OK (0) job log log
2023/04/18 11:28 46m bisect fix linux-6.1.y OK (0) job log log

Sample crash report:
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: config 0 descriptor??
smsusb:smsusb_probe: board id=8, interface number 0
------------[ cut here ]------------
WARNING: CPU: 1 PID: 154 at kernel/workqueue.c:3066 __flush_work+0x196/0x1a0
Modules linked in:
CPU: 1 PID: 154 Comm: kworker/1:2 Not tainted 6.1.27-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
Workqueue: usb_hub_wq hub_event
RIP: 0010:__flush_work+0x196/0x1a0 kernel/workqueue.c:3066
Code: 00 00 00 48 3b 8c 24 20 01 00 00 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c3 76 30 00 0f 0b eb ab e8 ba 76 30 00 <0f> 0b eb a2 e8 b1 26 28 09 90 53 48 89 fb e8 a7 76 30 00 48 89 df
RSP: 0018:ffffc90002e5e880 EFLAGS: 00010293
RAX: ffffffff81595206 RBX: ffff88807a45e100 RCX: ffff888015be9d40
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90002e5e948
RBP: ffffc90002e5e9f0 R08: dffffc0000000000 R09: ffffc90002e5e8a0
R10: 0000000000000001 R11: dffffc0000000001 R12: ffff88807a45e0e8
R13: dffffc0000000000 R14: 1ffff920005cbd10 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005587f73cc048 CR3: 00000000276d4000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __cancel_work_timer+0x519/0x6a0 kernel/workqueue.c:3160

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/05/08 09:47 linux-6.1.y ca48fc16c493 90c93c40 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in corrupted
2023/05/08 10:28 linux-6.1.y ca48fc16c493 90c93c40 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in corrupted
2023/03/19 10:56 linux-6.1.y 7eaef76fbc46 7939252e .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in corrupted
* Struck through repros no longer work on HEAD.