WARNING in send_hsr_supervision

WARNING in send_hsr_supervision_frame
Status: upstream: reported on 2020/08/10 14:47
Reported-by: syzbot+306c47d7ca825a3a6589@syzkaller.appspotmail.com
First crash: 257d, last: 91d

Sample crash report:

ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
------------[ cut here ]------------
HSR: Could not send supervision frame
WARNING: CPU: 3 PID: 9476 at net/hsr/hsr_device.c:299 send_hsr_supervision_frame+0x889/0xb40 net/hsr/hsr_device.c:299
Modules linked in:
CPU: 3 PID: 9476 Comm: syz-executor.1 Not tainted 5.11.0-rc4-syzkaller #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014
RIP: 0010:send_hsr_supervision_frame+0x889/0xb40 net/hsr/hsr_device.c:299
Code: 04 31 ff 89 de e8 d7 1b c5 f8 84 db 0f 85 8b fd ff ff e8 4a 15 c5 f8 48 c7 c7 c0 68 6d 8a c6 05 c1 ae 41 04 01 e8 0b 0a 0b 00 <0f> 0b e9 6c fd ff ff e8 2b 15 c5 f8 41 be 42 00 00 00 ba 01 00 00
RSP: 0000:ffffc90000598c68 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888013114600 RSI: ffffffff815b6b15 RDI: fffff520000b317f
RBP: 00000000000088fb R08: 0000000000000000 R09: 0000000000000001
R10: ffffffff815afcee R11: 0000000000000000 R12: ffff888054429f80
R13: 0000000000000000 R14: ffff888077d3eca8 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88802cd00000(0063) knlGS:00000000f5577b40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000000000054 CR3: 000000001fc1e000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 hsr_announce+0x122/0x320 net/hsr/hsr_device.c:404
 call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1417
 expire_timers kernel/time/timer.c:1462 [inline]
 __run_timers.part.0+0x67c/0xa50 kernel/time/timer.c:1731
 __run_timers kernel/time/timer.c:1712 [inline]
 run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1744
 __do_softirq+0x2bc/0xa29 kernel/softirq.c:343
 asm_call_irq_on_stack+0xf/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0xaa/0xd0 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:226 [inline]
 __irq_exit_rcu kernel/softirq.c:420 [inline]
 irq_exit_rcu+0x134/0x200 kernel/softirq.c:432
 sysvec_apic_timer_interrupt+0x4d/0x100 arch/x86/kernel/apic/apic.c:1096
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:628
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x25/0x50 kernel/locking/spinlock.c:191
Code: f8 5d c3 66 90 55 48 89 fd 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 7a d2 5c f8 48 89 ef e8 42 87 5d f8 f6 c7 02 75 1a 53 9d <bf> 01 00 00 00 e8 f1 8d 51 f8 65 8b 05 fa fc 05 77 85 c0 74 0a 5b
RSP: 0000:ffffc900033dfd08 EFLAGS: 00000246
RAX: 000000000395582b RBX: 0000000000000246 RCX: 1ffffffff1a06889
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff8880247bae40 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff81789c78 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8880247bae40 R14: ffff888013114dc0 R15: 000000000000000b
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 force_sig_info_to_task+0x353/0x410 kernel/signal.c:1335
 force_sig_fault_to_task kernel/signal.c:1673 [inline]
 force_sig_fault+0xb0/0xf0 kernel/signal.c:1680
 __bad_area_nosemaphore+0x2f5/0x3e0 arch/x86/mm/fault.c:829
 do_user_addr_fault+0x847/0xc60 arch/x86/mm/fault.c:1356
 handle_page_fault arch/x86/mm/fault.c:1450 [inline]
 exc_page_fault+0x9e/0x180 arch/x86/mm/fault.c:1506
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:580
RIP: 0023:0x804d916
Code: e8 ef 5f 01 00 83 c4 10 85 c0 0f 84 7d 01 00 00 65 f0 83 2d e4 ff ff ff 01 8b 5c 24 08 e8 a2 05 01 00 8b 00 8b 54 24 0c 85 c0 <89> 42 54 8b 72 50 0f 85 16 01 00 00 83 fe ff 0f 85 0d 01 00 00 8b
RSP: 002b:00000000f5577100 EFLAGS: 00010202
RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f55770f0
RDX: 0000000000000000 RSI: 000000000818afc0 RDI: 000000000815f000
RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Crashes (96):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Title
ci-qemu-upstream-386	2021/01/19 17:21	upstream	1e2a199f	63631df1	.config	log	report	info	WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386	2021/01/17 21:51	upstream	a527a2b3	813be542	.config	log	report	info	WARNING in send_hsr_supervision_frame
ci-upstream-kasan-gce-selinux-root	2020/12/20 07:47	upstream	467f8165	04201c06	.config	log	report	info
ci-upstream-kasan-gce-smack-root	2020/12/13 10:32	upstream	7b1b868e	bca53db9	.config	log	report	info
ci-upstream-kasan-gce-selinux-root	2020/12/05 19:58	upstream	b3298500	50503117	.config	log	report	info
ci-upstream-kasan-gce	2020/11/15 18:54	upstream	e28c0d7c	1bf9a662	.config	log	report	info
ci-upstream-kasan-gce-root	2020/10/02 22:43	upstream	472e5b05	4969d6ca	.config	log	report	info
ci-upstream-kasan-gce-root	2020/08/09 03:13	upstream	449dc8c9	f721e4a0	.config	log	report
ci-qemu-upstream-386	2021/01/16 17:34	upstream	1d94330a	65a7a854	.config	log	report	info
ci-qemu-upstream-386	2021/01/14 01:23	upstream	65f0d241	269d24e8	.config	log	report	info
ci-qemu-upstream-386	2021/01/11 14:33	upstream	7c53f6b6	2c1f2513	.config	log	report	info
ci-qemu-upstream-386	2021/01/09 22:16	upstream	2ff90100	2c1f2513	.config	log	report	info
ci-qemu-upstream-386	2021/01/07 22:55	upstream	f5e6c330	c104d4a3	.config	log	report	info
ci-qemu-upstream-386	2021/01/07 18:15	upstream	71c061d2	c104d4a3	.config	log	report	info
ci-qemu-upstream-386	2021/01/07 04:07	upstream	71c061d2	c104d4a3	.config	log	report	info
ci-qemu-upstream-386	2021/01/06 07:35	upstream	6207214a	b1c228e1	.config	log	report	info
ci-qemu-upstream-386	2021/01/04 19:58	upstream	36bbbd0e	79264ae3	.config	log	report	info
ci-qemu-upstream-386	2020/12/30 10:34	upstream	139711f0	0fa352f2	.config	log	report	info
ci-qemu-upstream-386	2020/12/28 02:56	upstream	5c8fe583	2242f77f	.config	log	report	info
ci-qemu-upstream-386	2020/12/14 08:01	upstream	2c85ebc5	b22a7ec3	.config	log	report	info
ci-qemu-upstream-386	2020/12/13 11:32	upstream	6bff9bb8	bca53db9	.config	log	report	info
ci-qemu-upstream-386	2020/12/13 02:34	upstream	6bff9bb8	bca53db9	.config	log	report	info
ci-qemu-upstream-386	2020/12/12 05:14	upstream	94801e5c	bca53db9	.config	log	report	info
ci-qemu-upstream-386	2020/12/11 11:56	upstream	33dc9614	ba24ffcd	.config	log	report	info
ci-qemu-upstream-386	2020/12/11 10:44	upstream	33dc9614	ba24ffcd	.config	log	report	info
ci-qemu-upstream-386	2020/12/11 08:31	upstream	9fca90cf	f900b48c	.config	log	report	info
ci-qemu-upstream-386	2020/12/10 22:48	upstream	9fca90cf	f900b48c	.config	log	report	info
ci-qemu-upstream-386	2020/12/10 14:05	upstream	a2f5ea9e	2a55c22b	.config	log	report	info
ci-qemu-upstream-386	2020/12/10 10:43	upstream	a2f5ea9e	2a55c22b	.config	log	report	info
ci-qemu-upstream-386	2020/12/09 13:45	upstream	a68a0262	99917735	.config	log	report	info
ci-qemu-upstream-386	2020/12/09 07:14	upstream	7d8761ba	40cc414d	.config	log	report	info
ci-qemu-upstream-386	2020/12/01 09:00	upstream	b6505459	b3a34598	.config	log	report	info
ci-qemu-upstream-386	2020/11/30 06:54	upstream	b6505459	a0092f9d	.config	log	report	info
ci-qemu-upstream-386	2020/11/25 05:17	upstream	80145ac2	e34b696c	.config	log	report	info
ci-qemu-upstream-386	2020/11/23 09:57	upstream	d5530d82	0d27f508	.config	log	report	info
ci-qemu-upstream-386	2020/11/22 11:51	upstream	a349e4c6	0d27f508	.config	log	report	info
ci-qemu-upstream-386	2020/11/10 13:19	upstream	407ab579	cca87986	.config	log	report	info
ci-qemu-upstream-386	2020/11/06 07:59	upstream	4ef8451b	64069d48	.config	log	report	info
ci-qemu-upstream-386	2020/11/05 13:36	upstream	4ef8451b	64069d48	.config	log	report	info
ci-qemu-upstream-386	2020/11/05 09:31	upstream	4ef8451b	64069d48	.config	log	report	info
ci-qemu-upstream-386	2020/11/03 00:02	upstream	495023e4	f7362256	.config	log	report	info
ci-qemu-upstream-386	2020/10/13 05:56	upstream	1e6d1d96	d32b0bbf	.config	log	report	info
ci-qemu-upstream-386	2020/10/13 04:22	upstream	1e6d1d96	d32b0bbf	.config	log	report	info
ci-qemu-upstream-386	2020/10/13 03:16	upstream	1e6d1d96	d32b0bbf	.config	log	report	info
ci-qemu-upstream-386	2020/10/11 23:26	upstream	3dd0130f	4a77ae0b	.config	log	report	info
ci-qemu-upstream-386	2020/10/11 12:57	upstream	da690031	4a77ae0b	.config	log	report	info
ci-qemu-upstream-386	2020/10/11 05:42	upstream	da690031	4a77ae0b	.config	log	report	info
ci-qemu-upstream-386	2020/10/10 15:15	upstream	6f2f486d	4a77ae0b	.config	log	report	info
ci-qemu-upstream-386	2020/10/10 05:29	upstream	8a5f78d9	93817d89	.config	log	report	info
ci-qemu-upstream-386	2020/10/09 13:59	upstream	583090b1	fa79ed2a	.config	log	report	info
ci-qemu-upstream-386	2020/10/09 12:38	upstream	583090b1	fa79ed2a	.config	log	report	info
ci-qemu-upstream-386	2020/08/06 14:38	upstream	47ec5303	1f122f88	.config	log	report
ci-upstream-net-kasan-gce	2020/12/15 12:04	net-next	7bca5021	97183ed7	.config	log	report	info