[v6.1] WARNING in corrupted

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 7eaef76fbc46 Linux 6.1.20
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=146b98a1c80000
kernel config: https://syzkaller.appspot.com/x/.config?x=28c36fe4d02f8c88
dashboard link: https://syzkaller.appspot.com/bug?extid=22468fcc3a44c84cb839
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=175e18a6c80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1545f21cc80000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/610a00ba4375/disk-7eaef76f.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/57c1310f9a30/vmlinux-7eaef76f.xz
kernel image: https://storage.googleapis.com/syzbot-assets/81999f717d3b/bzImage-7eaef76f.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+22468f...@syzkaller.appspotmail.com

usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: config 0 descriptor??
smsusb:smsusb_probe: board id=8, interface number 0
------------[ cut here ]------------
WARNING: CPU: 1 PID: 26 at kernel/workqueue.c:3066 __flush_work+0x196/0x1a0
Modules linked in:
CPU: 1 PID: 26 Comm: kworker/1:1 Not tainted 6.1.20-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: usb_hub_wq hub_event
RIP: 0010:__flush_work+0x196/0x1a0 kernel/workqueue.c:3066
Code: 00 00 00 48 3b 8c 24 20 01 00 00 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 23 ab 30 00 0f 0b eb ab e8 1a ab 30 00 <0f> 0b eb a2 e8 f1 97 30 09 90 53 48 89 fb e8 07 ab 30 00 48 89 df
RSP: 0018:ffffc90000a1e880 EFLAGS: 00010293
RAX: ffffffff8159b606 RBX: ffff888022c24100 RCX: ffff88801278ba80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000a1e948
RBP: ffffc90000a1e9f0 R08: dffffc0000000000 R09: ffffc90000a1e8a0
R10: 0000000000000001 R11: dffffc0000000001 R12: ffff888022c240e8
R13: dffffc0000000000 R14: 1ffff92000143d10 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005597f70ce978 CR3: 000000007dc8e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
__cancel_work_timer+0x519/0x6a0 kernel/workqueue.c:3160


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this issue, for details see:
https://goo.gl/tpsmEJ#testing-patches

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 8020ae3c051d Linux 5.15.103
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=11358a16c80000
kernel config: https://syzkaller.appspot.com/x/.config?x=d4215fb4040f8f8d
dashboard link: https://syzkaller.appspot.com/bug?extid=75db45a5c12e617ec6e1

compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=15a577aac80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=148f7ad6c80000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/857e17de0f0a/disk-8020ae3c.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/9efc49fcd441/vmlinux-8020ae3c.xz
kernel image: https://storage.googleapis.com/syzbot-assets/f14c38b6bfa7/bzImage-8020ae3c.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:

Reported-by: syzbot+75db45...@syzkaller.appspotmail.com

usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: config 0 descriptor??
smsusb:smsusb_probe: board id=8, interface number 0
------------[ cut here ]------------

WARNING: CPU: 1 PID: 1065 at kernel/workqueue.c:3083 __flush_work+0x196/0x1a0
Modules linked in:
CPU: 1 PID: 1065 Comm: kworker/1:2 Not tainted 5.15.103-syzkaller #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: usb_hub_wq hub_event

RIP: 0010:__flush_work+0x196/0x1a0 kernel/workqueue.c:3083
Code: 00 00 00 48 3b 8c 24 20 01 00 00 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 43 79 2d 00 0f 0b eb ab e8 3a 79 2d 00 <0f> 0b eb a2 e8 41 d9 cf 08 90 53 48 89 fb e8 27 79 2d 00 48 89 df
RSP: 0018:ffffc900045c6880 EFLAGS: 00010293
RAX: ffffffff8152ff96 RBX: ffff88801d31e100 RCX: ffff88801c17ba00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900045c6948
RBP: ffffc900045c69f0 R08: dffffc0000000000 R09: ffffc900045c68a0
R10: 0000000000000001 R11: dffffc0000000001 R12: ffff88801d31e0e8
R13: dffffc0000000000 R14: 1ffff920008b8d10 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000

CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033

CR2: 00007ffc4a723890 CR3: 000000007ac88000 CR4: 00000000003506e0

DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>

__cancel_work_timer+0x519/0x6a0 kernel/workqueue.c:3177

[syzbot]

syzbot suspects this issue was fixed by commit:

commit 784a8027b8ac5a876d71cb3d3d4d97b2b6cb5920
Author: Duoming Zhou <duo...@zju.edu.cn>
Date: Mon May 22 23:59:32 2023 +0000

media: usb: siano: Fix warning due to null work_func_t function pointer

bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=116adeb6680000
start commit: 8020ae3c051d Linux 5.15.103
git tree: linux-5.15.y

kernel config: https://syzkaller.appspot.com/x/.config?x=d4215fb4040f8f8d
dashboard link: https://syzkaller.appspot.com/bug?extid=75db45a5c12e617ec6e1

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=15a577aac80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=148f7ad6c80000

If the result looks correct, please mark the issue as fixed by replying with:

#syz fix: media: usb: siano: Fix warning due to null work_func_t function pointer

For information about bisection process see: https://goo.gl/tpsmEJ#bisection

[syzbot]

syzbot suspects this issue was fixed by commit:

commit 8abb53c5167cfb5bb275512a3da4ec2468478626

Author: Duoming Zhou <duo...@zju.edu.cn>
Date: Mon May 22 23:59:32 2023 +0000

media: usb: siano: Fix warning due to null work_func_t function pointer

bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=153ea70e680000
start commit: ca48fc16c493 Linux 6.1.27
git tree: linux-6.1.y
kernel config: https://syzkaller.appspot.com/x/.config?x=47d3bbfdb3b1ddd2
dashboard link: https://syzkaller.appspot.com/bug?extid=22468fcc3a44c84cb839
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=15a5cab8280000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=13670eb8280000