------------[ cut here ]------------
HSR: Could not send supervision frame
WARNING: CPU: 0 PID: 108 at net/hsr/hsr_device.c:294 send_hsr_supervision_frame+0x608/0x810 net/hsr/hsr_device.c:294
Modules linked in:
CPU: 0 PID: 108 Comm: kswapd0 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:send_hsr_supervision_frame+0x608/0x810 net/hsr/hsr_device.c:294
Code: 04 31 ff 89 de e8 28 f8 6b f7 84 db 0f 85 bd fe ff ff e8 eb fc 6b f7 48 c7 c7 40 98 cf 8b c6 05 0c 75 9c 04 01 e8 98 22 32 f7 <0f> 0b e9 9e fe ff ff e8 cc fc 6b f7 41 be 3c 00 00 00 ba 01 00 00
RSP: 0000:ffffc90000007bd8 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000100
RDX: ffff888017274800 RSI: ffffffff814dc3f6 RDI: 0000000000000001
RBP: ffffc90000007c40 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 000000003a525348 R12: ffff88802a729800
R13: 0000000000000000 R14: ffffffff8a1ba1c0 R15: 0000000000000017
FS: 0000000000000000(0000) GS:ffff88802c600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8c3f53bad5 CR3: 0000000023343000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
hsr_announce+0x116/0x380 net/hsr/hsr_device.c:382
call_timer_fn+0x1a0/0x580 kernel/time/timer.c:1700
expire_timers kernel/time/timer.c:1751 [inline]
__run_timers+0x764/0xb10 kernel/time/timer.c:2022
run_timer_softirq+0x58/0xd0 kernel/time/timer.c:2035
__do_softirq+0x218/0x965 kernel/softirq.c:553
invoke_softirq kernel/softirq.c:427 [inline]
__irq_exit_rcu kernel/softirq.c:632 [inline]
irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644
sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1074
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x70 kernel/locking/spinlock.c:194
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 c6 8f 27 f7 48 89 df e8 9e 0e 28 f7 f7 c5 00 02 00 00 75 1f 9c 58 f6 c4 02 75 2f 01 00 00 00 e8 95 77 19 f7 65 8b 05 46 f2 c2 75 85 c0 74 12 5b
RSP: 0000:ffffc90000ddfca0 EFLAGS: 00000246
RAX: 0000000000000046 RBX: ffff88803fffebd8 RCX: 1ffffffff1d9c512
RDX: 0000000000000000 RSI: ffffffff8ae90360 RDI: ffffffff8a40ca8e
RBP: 0000000000000246 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff8ecdf317 R11: 000000457f48af5d R12: ffff88803fffebd8
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003
spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]
__wake_up_common_lock+0xe3/0x140 kernel/sched/wait.c:140
prepare_kswapd_sleep+0x5b/0x270 mm/vmscan.c:7289
kswapd_try_to_sleep mm/vmscan.c:7634 [inline]
kswapd+0x355/0xbf0 mm/vmscan.c:7750
kthread+0x33a/0x430 kernel/kthread.c:388
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304
----------------
Code disassembly (best guess):
0: f5 cmc
1: 53 push %rbx
2: 48 8b 74 24 10 mov 0x10(%rsp),%rsi
7: 48 89 fb mov %rdi,%rbx
a: 48 83 c7 18 add $0x18,%rdi
e: e8 c6 8f 27 f7 call 0xf7278fd9
13: 48 89 df mov %rbx,%rdi
16: e8 9e 0e 28 f7 call 0xf7280eb9
1b: f7 c5 00 02 00 00 test $0x200,%ebp
21: 75 1f jne 0x42
23: 9c pushf
24: 58 pop %rax
25: f6 c4 02 test $0x2,%ah
28: 75 2f jne 0x59
* 2a: bf 01 00 00 00 mov $0x1,%edi <-- trapping instruction
2f: e8 95 77 19 f7 call 0xf71977c9
34: 65 8b 05 46 f2 c2 75 mov %gs:0x75c2f246(%rip),%eax # 0x75c2f281
3b: 85 c0 test %eax,%eax
3d: 74 12 je 0x51
3f: 5b pop %rbx