------------[ cut here ]------------
HSR: Could not send supervision frame
WARNING: CPU: 2 PID: 1090 at net/hsr/hsr_device.c:294 send_hsr_supervision_frame+0x608/0x810 net/hsr/hsr_device.c:294
Modules linked in:
CPU: 2 PID: 1090 Comm: kworker/u17:6 Not tainted 6.5.0-rc5-syzkaller-00056-gcacc6e22932f #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: writeback wb_workfn (flush-8:0)
RIP: 0010:send_hsr_supervision_frame+0x608/0x810 net/hsr/hsr_device.c:294
Code: 04 31 ff 89 de e8 a8 52 75 f7 84 db 0f 85 bd fe ff ff e8 6b 57 75 f7 48 c7 c7 00 7b ad 8b c6 05 ee 21 85 04 01 e8 98 19 3c f7 <0f> 0b e9 9e fe ff ff e8 4c 57 75 f7 41 be 3c 00 00 00 ba 01 00 00
RSP: 0000:ffffc90000530bd8 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000100
RDX: ffff88801f0aa400 RSI: ffffffff814ccc86 RDI: 0000000000000001
RBP: ffffc90000530c40 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 000000003a525348 R12: ffff88801b8aa400
R13: 0000000000000000 R14: ffffffff8a10b350 R15: 0000000000000017
FS: 0000000000000000(0000) GS:ffff88802c800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000f725a907 CR3: 000000001b192000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
hsr_announce+0x116/0x380 net/hsr/hsr_device.c:382
call_timer_fn+0x1a0/0x580 kernel/time/timer.c:1700
expire_timers kernel/time/timer.c:1751 [inline]
__run_timers+0x764/0xb10 kernel/time/timer.c:2022
run_timer_softirq+0x58/0xd0 kernel/time/timer.c:2035
__do_softirq+0x218/0x965 kernel/softirq.c:553
invoke_softirq kernel/softirq.c:427 [inline]
__irq_exit_rcu kernel/softirq.c:632 [inline]
irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644
sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1109
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 kernel/locking/spinlock.c:202
Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 9a 7c 31 f7 48 89 df e8 72 fb 31 f7 e8 dd 25 57 f7 fb bf 01 00 00 00 22 9e 23 f7 65 8b 05 f3 2b ce 75 85 c0 74 02 5b c3 e8 50 f4 ca
RSP: 0000:ffffc90007515e80 EFLAGS: 00000206
RAX: 000000000010b8ff RBX: ffff88807111a050 RCX: 1ffffffff23123a8
RDX: 0000000000000000 RSI: ffffffff8a6c80a0 RDI: 0000000000000001
RBP: 0000000000001000 R08: 0000000000000001 R09: fffffbfff2309be4
R10: ffffffff9184df27 R11: 0000000000000000 R12: 0000000000000001
R13: dffffc0000000000 R14: ffff88807111a000 R15: 0000000000000000
spin_unlock_irq include/linux/spinlock.h:401 [inline]
evict_folios+0x62e/0x18f0 mm/vmscan.c:5176
try_to_shrink_lruvec+0x769/0xb00 mm/vmscan.c:5357
shrink_one+0x45f/0x700 mm/vmscan.c:5401
shrink_many mm/vmscan.c:5453 [inline]
lru_gen_shrink_node mm/vmscan.c:5570 [inline]
shrink_node+0x20c2/0x3730 mm/vmscan.c:6510
shrink_zones mm/vmscan.c:6763 [inline]
do_try_to_free_pages+0x3cf/0x1990 mm/vmscan.c:6825
try_to_free_pages+0x2b3/0x710 mm/vmscan.c:7060
__perform_reclaim mm/page_alloc.c:3678 [inline]
__alloc_pages_direct_reclaim mm/page_alloc.c:3700 [inline]
__alloc_pages_slowpath.constprop.0+0x798/0x2360 mm/page_alloc.c:4105
__alloc_pages+0x411/0x4a0 mm/page_alloc.c:4490
alloc_pages+0x1a9/0x270 mm/mempolicy.c:2292
folio_alloc+0x1e/0x60 mm/mempolicy.c:2302
filemap_alloc_folio+0x3bb/0x490 mm/filemap.c:979
__filemap_get_folio+0x288/0x990 mm/filemap.c:1933
pagecache_get_page+0x2c/0x270 mm/folio-compat.c:99
find_or_create_page include/linux/pagemap.h:639 [inline]
ext4_mb_load_buddy_gfp+0x693/0x1350 fs/ext4/mballoc.c:1617
ext4_mb_load_buddy fs/ext4/mballoc.c:1708 [inline]
ext4_mb_find_by_goal+0x1ee/0xe50 fs/ext4/mballoc.c:2313
ext4_mb_regular_allocator+0x23a/0x41c0 fs/ext4/mballoc.c:2781
ext4_mb_new_blocks+0x2662/0x4af0 fs/ext4/mballoc.c:6242
ext4_ext_map_blocks+0x1fd2/0x5b00 fs/ext4/extents.c:4285
ext4_map_blocks+0x619/0x1770 fs/ext4/inode.c:621
mpage_map_one_extent fs/ext4/inode.c:2159 [inline]
mpage_map_and_submit_extent fs/ext4/inode.c:2212 [inline]
ext4_do_writepages+0x1949/0x34a0 fs/ext4/inode.c:2677
ext4_writepages+0x30b/0x780 fs/ext4/inode.c:2766
do_writepages+0x1b4/0x690 mm/page-writeback.c:2553
__writeback_single_inode+0x158/0xe70 fs/fs-writeback.c:1603
writeback_sb_inodes+0x599/0x1010 fs/fs-writeback.c:1894
__writeback_inodes_wb+0xff/0x2d0 fs/fs-writeback.c:1965
wb_writeback+0x7f8/0xa90 fs/fs-writeback.c:2072
wb_check_background_flush fs/fs-writeback.c:2142 [inline]
wb_do_writeback fs/fs-writeback.c:2230 [inline]
wb_workfn+0x874/0xfd0 fs/fs-writeback.c:2257
process_one_work+0xaa2/0x16f0 kernel/workqueue.c:2600
worker_thread+0x687/0x1110 kernel/workqueue.c:2751
kthread+0x33a/0x430 kernel/kthread.c:389
ret_from_fork+0x2c/0x70 arch/x86/kernel/process.c:145
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304
----------------
Code disassembly (best guess):
0: 90 nop
1: f3 0f 1e fa endbr64
5: 53 push %rbx
6: 48 8b 74 24 08 mov 0x8(%rsp),%rsi
b: 48 89 fb mov %rdi,%rbx
e: 48 83 c7 18 add $0x18,%rdi
12: e8 9a 7c 31 f7 call 0xf7317cb1
17: 48 89 df mov %rbx,%rdi
1a: e8 72 fb 31 f7 call 0xf731fb91
1f: e8 dd 25 57 f7 call 0xf7572601
24: fb sti
25: bf 01 00 00 00 mov $0x1,%edi
* 2a: e8 22 9e 23 f7 call 0xf7239e51 <-- trapping instruction
2f: 65 8b 05 f3 2b ce 75 mov %gs:0x75ce2bf3(%rip),%eax # 0x75ce2c29
36: 85 c0 test %eax,%eax
38: 74 02 je 0x3c
3a: 5b pop %rbx
3b: c3 ret
3c: e8 .byte 0xe8
3d: 50 push %rax
3e: f4 hlt
3f: ca .byte 0xca