------------[ cut here ]------------
HSR: Could not send supervision frame
WARNING: CPU: 3 PID: 4809 at net/hsr/hsr_device.c:294 send_hsr_supervision_frame+0x5fe/0x840 net/hsr/hsr_device.c:294
Modules linked in:
CPU: 3 PID: 4809 Comm: dhcpcd Not tainted 6.3.0-syzkaller-00113-g1a0beef98b58 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
RIP: 0010:send_hsr_supervision_frame+0x5fe/0x840 net/hsr/hsr_device.c:294
Code: 04 31 ff 89 de e8 02 30 a3 f7 84 db 0f 85 01 ff ff ff e8 e5 33 a3 f7 48 c7 c7 60 69 87 8b c6 05 c9 38 82 04 01 e8 b2 a3 6b f7 <0f> 0b e9 e2 fe ff ff e8 c6 33 a3 f7 41 be 3c 00 00 00 ba 01 00 00
RSP: 0000:ffffc900007e8c70 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000100
RDX: ffff8880271b0080 RSI: ffffffff814a9297 RDI: 0000000000000001
RBP: ffffc900007e8cd0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880202ab700
R13: 0000000000000000 R14: 0000000000000017 R15: 0000000000000001
FS:  00007fab72923740(0000) GS:ffff88802c900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb212909fa7 CR3: 000000001cde0000 CR4: 0000000000150ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 hsr_announce+0x10d/0x370 net/hsr/hsr_device.c:382
 call_timer_fn+0x1a0/0x580 kernel/time/timer.c:1700
 expire_timers+0x29b/0x4b0 kernel/time/timer.c:1751
 __run_timers kernel/time/timer.c:2022 [inline]
 __run_timers kernel/time/timer.c:1995 [inline]
 run_timer_softirq+0x326/0x910 kernel/time/timer.c:2035
 __do_softirq+0x1d4/0x905 kernel/softirq.c:571
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x114/0x190 kernel/softirq.c:650
 irq_exit_rcu+0x9/0x20 kernel/softirq.c:662
 sysvec_apic_timer_interrupt+0x97/0xc0 arch/x86/kernel/apic/apic.c:1107
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:finish_task_switch.isra.0+0x2bf/0xc80 kernel/sched/core.c:5186
Code: 8b 3a 4c 89 e7 48 c7 02 00 00 00 00 ff d1 4d 85 ff 75 bf 4c 89 e7 e8 60 f8 ff ff e8 3b a5 31 00 fb 65 48 8b 1c 25 c0 b8 03 00 <48> 8d bb 50 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1
RSP: 0000:ffffc90002c1f290 EFLAGS: 00000206
RAX: 000000000015cda9 RBX: ffff8880271b0080 RCX: 1ffffffff229a07e
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc90002c1f2d8 R08: 0000000000000001 R09: ffffffff914c7b97
R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c93c2c0
R13: ffff8880163b2040 R14: ffff88801b6062c0 R15: ffff88802c93ccf8
 context_switch kernel/sched/core.c:5310 [inline]
 __schedule+0xc99/0x5770 kernel/sched/core.c:6625
 schedule+0xde/0x1a0 kernel/sched/core.c:6701
 throttle_direct_reclaim+0x78c/0x940 mm/vmscan.c:6963
 try_to_free_pages+0x1b1/0x710 mm/vmscan.c:7002
 __perform_reclaim mm/page_alloc.c:4793 [inline]
 __alloc_pages_direct_reclaim mm/page_alloc.c:4815 [inline]
 __alloc_pages_slowpath.constprop.0+0x808/0x2170 mm/page_alloc.c:5220
 __alloc_pages+0x408/0x4a0 mm/page_alloc.c:5605
 alloc_pages+0x1aa/0x270 mm/mempolicy.c:2277
 folio_alloc+0x20/0x70 mm/mempolicy.c:2287
 filemap_alloc_folio+0x3c1/0x470 mm/filemap.c:976
 __filemap_get_folio+0x32b/0xdc0 mm/filemap.c:1970
 filemap_fault+0x1598/0x2450 mm/filemap.c:3292
 __do_fault+0x107/0x600 mm/memory.c:4155
 do_read_fault mm/memory.c:4506 [inline]
 do_fault mm/memory.c:4635 [inline]
 handle_pte_fault mm/memory.c:4923 [inline]
 __handle_mm_fault+0x24f3/0x3e60 mm/memory.c:5065
 handle_mm_fault+0x2ba/0x9c0 mm/memory.c:5211
 do_user_addr_fault+0x475/0x1230 arch/x86/mm/fault.c:1407
 handle_page_fault arch/x86/mm/fault.c:1498 [inline]
 exc_page_fault+0x98/0x170 arch/x86/mm/fault.c:1554
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x7fab729f0ad5
Code: Unable to access opcode bytes at 0x7fab729f0aab.
RSP: 002b:00007fffc0e2bd60 EFLAGS: 00010246
RAX: 0000000000000001 RBX: 0000556d5e74cdd0 RCX: 00007fab729f0ad5
RDX: 00007fffc0e2bd80 RSI: 0000000000000004 RDI: 0000556d5e757bd0
RBP: 00007fffc0e2c0b0 R08: 0000000000000008 R09: 00007fffc0fe2080
R10: 00007fffc0e2c0b0 R11: 0000000000000246 R12: 00007fffc0e2bda8
R13: 0000556d5d959610 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
----------------
Code disassembly (best guess):
   0:	8b 3a                	mov    (%rdx),%edi
   2:	4c 89 e7             	mov    %r12,%rdi
   5:	48 c7 02 00 00 00 00 	movq   $0x0,(%rdx)
   c:	ff d1                	callq  *%rcx
   e:	4d 85 ff             	test   %r15,%r15
  11:	75 bf                	jne    0xffffffd2
  13:	4c 89 e7             	mov    %r12,%rdi
  16:	e8 60 f8 ff ff       	callq  0xfffff87b
  1b:	e8 3b a5 31 00       	callq  0x31a55b
  20:	fb                   	sti
  21:	65 48 8b 1c 25 c0 b8 	mov    %gs:0x3b8c0,%rbx
  28:	03 00
* 2a:	48 8d bb 50 15 00 00 	lea    0x1550(%rbx),%rdi <-- trapping instruction
  31:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  38:	fc ff df
  3b:	48 89 fa             	mov    %rdi,%rdx
  3e:	48                   	rex.W
  3f:	c1                   	.byte 0xc1