syzbot


WARNING in hsr_forward_skb

Status: fixed on 2021/11/10 00:50
Reported-by: syzbot+fdce8f2a8903f3ba0e6b@syzkaller.appspotmail.com
Fix commit: 9d6803921a16 net: hsr: Reset MAC header for Tx path
First crash: 1906d, last: 1074d
Cause bisection: introduced by (bisect log) :
commit ab42f35d9cb5ac49b5a2a11f940e74f58f207280
Author: Ming Lei <ming.lei@redhat.com>
Date: Fri May 26 11:53:19 2017 +0000

  blk-mq: merge bio into sw queue before plugging

Crash: INFO: trying to register non-static key in can_notifier (log)
Repro: C syz .config
  
Fix bisection: fixed by (bisect log) :
commit 9d6803921a16f4d768dc41a75375629828f4d91e
Author: Kurt Kanzenbach <kurt@linutronix.de>
Date: Tue Apr 6 07:35:09 2021 +0000

  net: hsr: Reset MAC header for Tx path

  
Discussions (3)
Title Replies (including bot) Last reply
WARNING in hsr_forward_skb 5 (8) 2021/05/10 06:09
Reminder: 4 open syzbot bugs in "net/hsr" subsystem 1 (1) 2019/07/24 02:35
Reminder: 5 open syzbot bugs in "net/hsr" subsystem 1 (1) 2019/07/02 06:26
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in hsr_forward_skb C 363 383d 1804d 0/1 upstream: reported C repro on 2019/04/10 20:50
linux-4.14 WARNING in hsr_forward_skb C 245 383d 1741d 0/1 upstream: reported C repro on 2019/06/12 08:24

Sample crash report:
netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
------------[ cut here ]------------
net/hsr/hsr_forward.c:533: Malformed frame (port_src hsr0)
WARNING: CPU: 0 PID: 8418 at net/hsr/hsr_forward.c:532 hsr_forward_skb+0x1019/0x1770 net/hsr/hsr_forward.c:532
Modules linked in:
CPU: 0 PID: 8418 Comm: syz-executor387 Not tainted 5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:hsr_forward_skb+0x1019/0x1770 net/hsr/hsr_forward.c:532
Code: f4 ff ff e8 19 8a c3 f8 4c 89 e1 ba 15 02 00 00 48 c7 c6 c0 7d 6d 8a 48 c7 c7 e0 7e 6d 8a c6 05 88 24 e0 04 01 e8 61 81 0a 00 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 4c 89 fa 48 c1 ea 03 80 3c 02
RSP: 0018:ffffc90001ab78e8 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88801dae1bc0 RSI: ffffffff815b73e5 RDI: fffff52000356f0f
RBP: ffff88801247a780 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff815b05be R11: 0000000000000000 R12: ffff888028d1c000
R13: 1ffff92000356f23 R14: ffff888018413600 R15: ffff888018413610
FS:  00000000015fe300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000200000c0 CR3: 00000000210f5000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 hsr_dev_xmit+0x78/0xd0 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 __dev_direct_xmit+0x527/0x730 net/core/dev.c:4219
 dev_direct_xmit include/linux/netdevice.h:2857 [inline]
 packet_direct_xmit+0x1a5/0x280 net/packet/af_packet.c:244
 packet_snd net/packet/af_packet.c:3006 [inline]
 packet_sendmsg+0x2413/0x52b0 net/packet/af_packet.c:3031
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:672
 __sys_sendto+0x21c/0x320 net/socket.c:1975
 __do_sys_sendto net/socket.c:1987 [inline]
 __se_sys_sendto net/socket.c:1983 [inline]
 __x64_sys_sendto+0xdd/0x1b0 net/socket.c:1983
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4431a9
Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffce316ab18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007ffce316ab38 RCX: 00000000004431a9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000003 R08: 0000000020000100 R09: 0000000000000014
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce316ab40
R13: 00007ffce316ab60 R14: 00000000004b8018 R15: 00000000004004b8

Crashes (1310):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/02/20 22:04 net-old 3af409ca278d 3e5ed8b4 .config console log report syz C ci-upstream-net-this-kasan-gce WARNING in hsr_forward_skb
2021/02/21 00:21 net-next-old 38b5133ad607 3e5ed8b4 .config console log report syz C ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2019/12/20 02:21 upstream 4a94c4332334 36650b4b .config console log report syz C ci-upstream-kasan-gce
2019/12/20 01:39 upstream 4a94c4332334 36650b4b .config console log report syz C ci-upstream-kasan-gce-selinux-root
2018/12/30 07:33 upstream 195303136f19 35e3f847 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2018/12/30 05:46 upstream 195303136f19 35e3f847 .config console log report syz C ci-upstream-kasan-gce
2018/12/30 05:39 upstream 195303136f19 35e3f847 .config console log report syz C ci-upstream-kasan-gce-root
2018/12/30 05:23 upstream 195303136f19 35e3f847 .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/12/20 10:04 upstream 7e0165b2f1a9 e30cbdae .config console log report syz C ci-upstream-kasan-gce-386
2018/12/30 06:58 upstream 195303136f19 35e3f847 .config console log report syz C ci-upstream-kasan-gce-386
2019/12/19 18:08 net-old 6fa9a115fe7c 36650b4b .config console log report syz C ci-upstream-net-this-kasan-gce
2018/12/30 04:48 net-old 0d9c9a238faf 35e3f847 .config console log report syz C ci-upstream-net-this-kasan-gce
2019/12/19 18:03 net-next-old a1ec57c02020 36650b4b .config console log report syz C ci-upstream-net-kasan-gce
2018/12/30 05:04 net-next-old b71acb0e3721 35e3f847 .config console log report syz C ci-upstream-net-kasan-gce
2019/12/28 06:23 linux-next 7ddd09fc4b74 be5c2c81 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/12/30 07:01 linux-next 6a1d293238c1 35e3f847 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2021/04/07 00:20 upstream 0a50438c8436 6a81331a .config console log report info ci-upstream-kasan-gce WARNING in hsr_forward_skb
2021/04/05 13:30 upstream e49d033bddf5 6a81331a .config console log report info ci-upstream-kasan-gce-root WARNING in hsr_forward_skb
2021/04/03 21:09 upstream 57fbdb15ec42 6a81331a .config console log report info ci-upstream-kasan-gce WARNING in hsr_forward_skb
2021/03/28 19:45 upstream 0f4498cef9f5 a8529b82 .config console log report info ci-upstream-kasan-gce WARNING in hsr_forward_skb
2021/03/27 03:22 upstream db24726bfefa a8529b82 .config console log report info ci-upstream-kasan-gce-root WARNING in hsr_forward_skb
2021/02/22 02:39 upstream 55f62bc87347 a659b3f1 .config console log report info ci-upstream-kasan-gce-smack-root WARNING in hsr_forward_skb
2021/01/21 21:20 upstream 9791581c049c d4f4eca5 .config console log report info ci-upstream-kasan-gce WARNING in hsr_forward_skb
2021/01/20 13:30 upstream 45dfb8a5659a d4f4eca5 .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in hsr_forward_skb
2021/01/18 19:41 upstream 19c329f68089 63631df1 .config console log report info ci-upstream-kasan-gce WARNING in hsr_forward_skb
2021/02/17 05:55 bpf 57baf8cc70ea 98682e5e .config console log report info ci-upstream-bpf-kasan-gce WARNING in hsr_forward_skb
2021/01/26 12:12 bpf b9557caaf872 52e37319 .config console log report info ci-upstream-bpf-kasan-gce WARNING in hsr_forward_skb
2021/01/20 05:20 net-old 2565ff4eef34 63631df1 .config console log report info ci-upstream-net-this-kasan-gce WARNING in hsr_forward_skb
2021/04/09 08:40 net-next-old 4438669eb703 6a81331a .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/04/03 10:05 net-next-old f3f409a9b7f5 6a81331a .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/04/01 23:03 net-next-old 040806343bb4 6a81331a .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/04/01 22:02 net-next-old 040806343bb4 6a81331a .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/03/28 11:31 net-next-old a1281601f88e a8529b82 .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/03/28 00:54 net-next-old a1281601f88e a8529b82 .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/03/26 22:19 net-next-old 6c996e19949b a8529b82 .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/03/26 13:17 net-next-old 6c996e19949b 6a383ecf .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/03/23 04:53 net-next-old 227d72063fcc 8092f30d .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/03/05 11:06 net-next-old d310ec03a34e 9d751681 .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/03/04 14:32 net-next-old d310ec03a34e d7e4e604 .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/02/27 18:15 net-next-old d310ec03a34e 4c37c133 .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/02/27 07:20 net-next-old d310ec03a34e 4c37c133 .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/02/24 02:51 net-next-old d310ec03a34e fcc6d71b .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/02/23 08:48 net-next-old d310ec03a34e c26fb06b .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/02/11 05:04 net-next-old dc9d87581d46 a52ee10a .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/02/09 02:46 net-next-old 8e57158683c5 2bd9619f .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/02/04 20:20 net-next-old 32d1bbb1d609 42b90a7c .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/01/30 05:19 net-next-old 46eb3c108fe1 fc9fd31e .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/01/24 20:55 bpf-next 6e66fbb10597 52e37319 .config console log report info ci-upstream-bpf-next-kasan-gce WARNING in hsr_forward_skb
2021/01/23 23:48 net-next-old e7b76db36240 52e37319 .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/01/23 05:44 net-next-old 43e5763152e2 4080af96 .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/01/22 02:10 net-next-old 9e8789c85dee d4f4eca5 .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/01/21 12:17 net-next-old 9e8789c85dee d4f4eca5 .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/01/20 15:38 net-next-old 7b8fc0103bb5 d4f4eca5 .config console log report info ci-upstream-net-kasan-gce WARNING in hsr_forward_skb
2021/01/16 19:03 upstream 1d94330a437a 65a7a854 .config console log report info ci-upstream-kasan-gce
2020/12/28 03:10 upstream f838f8d2b694 2242f77f .config console log report info ci-upstream-kasan-gce
2020/12/23 15:34 upstream 614cb5894306 c2c1d1dd .config console log report info ci-upstream-kasan-gce
2020/12/23 05:42 upstream 614cb5894306 04201c06 .config console log report info ci-upstream-kasan-gce
2020/12/14 01:35 upstream 6bff9bb8a292 b22a7ec3 .config console log report info ci-upstream-kasan-gce-386
2020/01/31 18:54 upstream 6ba3d7066c71 c30117b2 .config console log report ci-qemu-upstream-386
2021/01/07 12:33 bpf 6f02b540d759 c104d4a3 .config console log report info ci-upstream-bpf-kasan-gce
2021/01/06 21:42 bpf 67208692802c c104d4a3 .config console log report info ci-upstream-bpf-kasan-gce
2021/01/02 09:37 bpf da4282c17d69 79264ae3 .config console log report info ci-upstream-bpf-kasan-gce
2021/01/15 19:18 net-next-old 1d9f03c0a15f 65a7a854 .config console log report info ci-upstream-net-kasan-gce
2021/01/14 10:59 net-next-old 679500e385fc 269d24e8 .config console log report info ci-upstream-net-kasan-gce
2021/01/03 20:39 net-next-old 3db1a3fa9880 79264ae3 .config console log report info ci-upstream-net-kasan-gce
2020/12/30 19:25 net-next-old 3db1a3fa9880 ecb8c012 .config console log report info ci-upstream-net-kasan-gce
2020/12/26 16:05 net-next-old 3db1a3fa9880 821e0b09 .config console log report info ci-upstream-net-kasan-gce
2020/12/23 18:58 net-next-old 3db1a3fa9880 c2c1d1dd .config console log report info ci-upstream-net-kasan-gce
2020/12/21 19:04 net-next-old 3db1a3fa9880 04201c06 .config console log report info ci-upstream-net-kasan-gce
2020/12/19 22:45 net-next-old 3db1a3fa9880 04201c06 .config console log report info ci-upstream-net-kasan-gce
2020/12/17 10:04 bpf-next 3db1a3fa9880 04201c06 .config console log report info ci-upstream-bpf-next-kasan-gce
2020/05/20 21:20 linux-next ac935d227366 1255f02a .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.