syzbot


WARNING in send_hsr_supervision_frame (3)

Status: upstream: reported on 2022/11/15 17:18
Reported-by: syzbot+3ae0a3f42c84074b7c8e@syzkaller.appspotmail.com
First crash: 130d, last: 2d00h
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in send_hsr_supervision_frame (2) 36 338d 528d 0/24 auto-closed as invalid on 2022/04/24 21:22
upstream WARNING in send_hsr_supervision_frame 96 678d 840d 0/24 auto-closed as invalid on 2021/05/19 17:21

Sample crash report:
------------[ cut here ]------------
HSR: Could not send supervision frame
WARNING: CPU: 1 PID: 4446 at net/hsr/hsr_device.c:293 send_hsr_supervision_frame+0x671/0x8d0 net/hsr/hsr_device.c:293
Modules linked in:
CPU: 1 PID: 4446 Comm: kworker/1:7 Not tainted 6.1.0-rc6-syzkaller-00315-gfaf68e3523c2 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
Workqueue:  0x0 (events)
RIP: 0010:send_hsr_supervision_frame+0x671/0x8d0 net/hsr/hsr_device.c:293
Code: 1d 11 f9 ab 04 31 ff 89 de e8 7b 70 ef f7 84 db 75 b6 e8 02 74 ef f7 48 c7 c7 60 3a 84 8b c6 05 f1 f8 ab 04 01 e8 0a c8 16 00 <0f> 0b eb 9a e8 e6 73 ef f7 41 be 3c 00 00 00 ba 01 00 00 00 4c 89
RSP: 0000:ffffc90000738c40 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88801ac94280 RSI: ffffffff8164964c RDI: fffff520000e717a
RBP: ffff8880755a8c80 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000101 R11: 0000000000000001 R12: ffff88801c390a00
R13: 0000000000000000 R14: ffff88801c390a18 R15: 0000000000000017
FS:  0000000000000000(0000) GS:ffff88802c700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3a442b0dd7 CR3: 0000000042c93000 CR4: 0000000000150ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 hsr_announce+0x110/0x330 net/hsr/hsr_device.c:382
 call_timer_fn+0x1da/0x7c0 kernel/time/timer.c:1474
 expire_timers kernel/time/timer.c:1519 [inline]
 __run_timers.part.0+0x6a2/0xaf0 kernel/time/timer.c:1790
 __run_timers kernel/time/timer.c:1768 [inline]
 run_timer_softirq+0xb7/0x1d0 kernel/time/timer.c:1803
 __do_softirq+0x1fb/0xadc kernel/softirq.c:571
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650
 irq_exit_rcu+0x9/0x20 kernel/softirq.c:662
 sysvec_apic_timer_interrupt+0x97/0xc0 arch/x86/kernel/apic/apic.c:1107
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:__schedule+0x15/0x53f0 kernel/sched/core.c:6412
Code: f1 dd dc f7 e9 6c ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 41 57 48 8d 85 78 ff ff ff 41 56 48 c1 e8 03 41 55 <49> c7 c5 80 b1 03 00 41 54 53 48 89 c3 48 81 ec 18 01 00 00 48 89
RSP: 0000:ffffc90002fa7e00 EFLAGS: 00000a06
RAX: 1ffff920005f4fb2 RBX: ffff88801ac94280 RCX: 1ffffffff2337730
RDX: 1ffff11003592ad9 RSI: ffffffff89eebef9 RDI: 0000000000000000
RBP: ffffc90002fa7e18 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000000 R12: ffff88801ac942ac
R13: ffffed1003592850 R14: ffff888023ea8a00 R15: ffff88802c73a9c0
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 worker_thread+0x160/0x1090 kernel/workqueue.c:2457
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
----------------
Code disassembly (best guess), 2 bytes skipped:
   0:	dc f7                	fdiv   %st,%st(7)
   2:	e9 6c ff ff ff       	jmpq   0xffffff73
   7:	66 66 2e 0f 1f 84 00 	data16 nopw %cs:0x0(%rax,%rax,1)
   e:	00 00 00 00
  12:	90                   	nop
  13:	55                   	push   %rbp
  14:	48 89 e5             	mov    %rsp,%rbp
  17:	41 57                	push   %r15
  19:	48 8d 85 78 ff ff ff 	lea    -0x88(%rbp),%rax
  20:	41 56                	push   %r14
  22:	48 c1 e8 03          	shr    $0x3,%rax
  26:	41 55                	push   %r13
* 28:	49 c7 c5 80 b1 03 00 	mov    $0x3b180,%r13 <-- trapping instruction
  2f:	41 54                	push   %r12
  31:	53                   	push   %rbx
  32:	48 89 c3             	mov    %rax,%rbx
  35:	48 81 ec 18 01 00 00 	sub    $0x118,%rsp
  3c:	48                   	rex.W
  3d:	89                   	.byte 0x89

Crashes (28):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-qemu-upstream 2022/11/27 11:27 upstream faf68e3523c2 f4470a7b .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream 2022/11/26 10:23 upstream 0b1dcc2cf55a f4470a7b .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream 2022/11/24 07:33 upstream 4312098baf37 ff68ff8f .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream 2022/11/24 07:30 upstream 4312098baf37 ff68ff8f .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream 2022/11/22 09:56 upstream eb7081409f94 1c576c23 .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream 2022/11/20 15:35 upstream 77c51ba552a1 5bb70014 .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream 2022/11/20 14:37 upstream 77c51ba552a1 5bb70014 .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream 2022/11/19 08:03 upstream ab290eaddc4c 5bb70014 .config log report info WARNING in send_hsr_supervision_frame
ci-upstream-kasan-gce 2022/10/15 15:05 upstream 55be6084c8e0 67cb024c .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream 2022/08/14 22:26 upstream aea23e7c464b 8dfcaa3d .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream 2022/08/03 01:16 upstream 7d0d3fa7339e 1c9013ac .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream 2022/07/22 06:31 upstream 4a57a8400075 5e6028b9 .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/11/27 11:01 upstream faf68e3523c2 f4470a7b .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/11/26 11:07 upstream 0b1dcc2cf55a f4470a7b .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/11/24 08:23 upstream 4312098baf37 ff68ff8f .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/11/21 05:49 upstream eb7081409f94 5bb70014 .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/11/18 11:38 upstream 84368d882b96 5bb70014 .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/11/17 07:30 upstream cc675d22e422 3a127a31 .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/11/17 03:08 upstream cc675d22e422 3a127a31 .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/11/16 18:59 upstream 59d0d52c30d4 3a127a31 .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/11/12 18:47 upstream 8f2975c2bb4c f42ee5d8 .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/11/10 21:42 upstream 1767a722a708 3ead01ad .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/11/08 17:01 upstream 59f2f4b8a757 060f945e .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/11/07 21:18 upstream f0c4d9fc9cc9 a779b11a .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/11/07 19:42 upstream f0c4d9fc9cc9 a779b11a .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/11/05 19:30 upstream b208b9fbbcba 6d752409 .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/10/28 10:09 upstream 200204f56f3b 8168b69e .config log report info WARNING in send_hsr_supervision_frame
ci-qemu-upstream-386 2022/10/25 19:26 upstream 1a2dcbdde82e 45645420 .config log report info WARNING in send_hsr_supervision_frame
* Struck through repros no longer work on HEAD.