syzbot


WARNING in corrupted

Status: fixed on 2023/09/23 10:19
Reported-by: syzbot+75db45a5c12e617ec6e1@syzkaller.appspotmail.com
Fix commit: 784a8027b8ac media: usb: siano: Fix warning due to null work_func_t function pointer
First crash: 375d, last: 261d
Fix bisection: fixed by (bisect log) :
commit 784a8027b8ac5a876d71cb3d3d4d97b2b6cb5920
Author: Duoming Zhou <duoming@zju.edu.cn>
Date: Mon May 22 23:59:32 2023 +0000

  media: usb: siano: Fix warning due to null work_func_t function pointer

  
Bug presence (1)
Date Name Commit Repro Result
2023/08/12 upstream (ToT) f8de32cc060b C Didn't crash
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in corrupted (2) C done 1 1308d 1308d 1/1 fixed on 2020/09/28 07:49
upstream WARNING in corrupted (2) kernel C done 40 375d 1578d 0/26 closed as dup on 2020/06/28 17:00
upstream WARNING in corrupted (3) usb C done 19 263d 311d 23/26 fixed on 2023/10/12 12:47
linux-4.19 WARNING in corrupted syz done 25 1634d 1786d 1/1 fixed on 2019/12/17 20:23
linux-4.14 WARNING in corrupted gfs2 C inconclusive 70 388d 1753d 0/1 upstream: reported C repro on 2019/06/10 00:20
android-414 WARNING in corrupted C 5 1702d 1749d 0/1 public: reported C repro on 2019/06/14 15:02
linux-6.1 WARNING in corrupted C done 3 256d 375d 3/3 fixed on 2023/09/27 12:10
upstream WARNING in corrupted fs usb C 2 1721d 1721d 0/26 closed as invalid on 2019/08/01 15:17
Fix bisection attempts (4)
Created Duration User Patch Repo Result
2023/09/22 17:50 3h10m bisect fix linux-5.15.y job log (1)
2023/07/11 17:50 1h56m bisect fix linux-5.15.y job log (0) log
2023/06/06 22:05 28m bisect fix linux-5.15.y job log (0) log
2023/04/18 12:57 37m bisect fix linux-5.15.y job log (0) log

Sample crash report:
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: config 0 descriptor??
smsusb:smsusb_probe: board id=8, interface number 0
------------[ cut here ]------------
WARNING: CPU: 1 PID: 1065 at kernel/workqueue.c:3083 __flush_work+0x196/0x1a0
Modules linked in:
CPU: 1 PID: 1065 Comm: kworker/1:2 Not tainted 5.15.103-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: usb_hub_wq hub_event
RIP: 0010:__flush_work+0x196/0x1a0 kernel/workqueue.c:3083
Code: 00 00 00 48 3b 8c 24 20 01 00 00 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 43 79 2d 00 0f 0b eb ab e8 3a 79 2d 00 <0f> 0b eb a2 e8 41 d9 cf 08 90 53 48 89 fb e8 27 79 2d 00 48 89 df
RSP: 0018:ffffc900045c6880 EFLAGS: 00010293
RAX: ffffffff8152ff96 RBX: ffff88801d31e100 RCX: ffff88801c17ba00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900045c6948
RBP: ffffc900045c69f0 R08: dffffc0000000000 R09: ffffc900045c68a0
R10: 0000000000000001 R11: dffffc0000000001 R12: ffff88801d31e0e8
R13: dffffc0000000000 R14: 1ffff920008b8d10 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffc4a723890 CR3: 000000007ac88000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __cancel_work_timer+0x519/0x6a0 kernel/workqueue.c:3177

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/03/19 11:32 linux-5.15.y 8020ae3c051d 7939252e .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in corrupted
2023/05/07 22:03 linux-5.15.y 8a7f2a5c5aa1 90c93c40 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in corrupted
2023/05/07 21:24 linux-5.15.y 8a7f2a5c5aa1 90c93c40 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in corrupted
* Struck through repros no longer work on HEAD.