------------[ cut here ]------------
HSR: Could not send supervision frame
WARNING: CPU: 3 PID: 113 at net/hsr/hsr_device.c:294 send_hsr_supervision_frame+0x5fe/0x840 net/hsr/hsr_device.c:294
Modules linked in:
CPU: 3 PID: 113 Comm: kswapd0 Not tainted 6.4.0-syzkaller-01647-g6e2332e0ab53 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
RIP: 0010:send_hsr_supervision_frame+0x5fe/0x840 net/hsr/hsr_device.c:294
Code: 04 31 ff 89 de e8 d2 88 93 f7 84 db 0f 85 01 ff ff ff e8 e5 8c 93 f7 48 c7 c7 80 35 8a 8b c6 05 12 20 74 04 01 e8 a2 f8 5a f7 <0f> 0b e9 e2 fe ff ff e8 c6 8c 93 f7 41 be 3c 00 00 00 ba 01 00 00
RSP: 0000:ffffc900005e0c80 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000100
RDX: ffff888016954800 RSI: ffffffff814c1447 RDI: 0000000000000001
RBP: ffffc900005e0ce0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804ef8a300
R13: 0000000000000000 R14: 0000000000000017 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff88802c900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000cd1e3c CR3: 000000001b76a000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 hsr_announce+0x10d/0x370 net/hsr/hsr_device.c:382
 call_timer_fn+0x1a0/0x580 kernel/time/timer.c:1700
 expire_timers+0x29b/0x4b0 kernel/time/timer.c:1751
 __run_timers kernel/time/timer.c:2022 [inline]
 __run_timers kernel/time/timer.c:1995 [inline]
 run_timer_softirq+0x326/0x910 kernel/time/timer.c:2035
 __do_softirq+0x1d4/0x905 kernel/softirq.c:553
 invoke_softirq kernel/softirq.c:427 [inline]
 __irq_exit_rcu kernel/softirq.c:632 [inline]
 irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644
 sysvec_apic_timer_interrupt+0x97/0xc0 arch/x86/kernel/apic/apic.c:1109
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:do_shrink_slab+0xa2/0xaa0 mm/vmscan.c:843
Code: 4c 89 f7 41 ff 16 31 ff 48 89 c3 48 89 c6 48 89 44 24 20 e8 80 e9 cc ff 48 85 db 48 c7 44 24 08 00 00 00 00 0f 84 4c 05 00 00 <e8> 29 ed cc ff 48 89 de 48 c7 c7 fe ff ff ff e8 5a e9 cc ff 48 83
RSP: 0000:ffffc90001fe77f0 EFLAGS: 00000282
RAX: 0000000000000000 RBX: fffffffffffffffe RCX: ffffffff81b7b9b0
RDX: ffff888016954800 RSI: 0000000000000000 RDI: 0000000000000007
RBP: ffffc90001fe7900 R08: 0000000000000007 R09: 0000000000000000
R10: fffffffffffffffe R11: 0000000000000001 R12: 0000000000000000
R13: ffffc90001fe7900 R14: ffff888013348780 R15: 0000000000000400
 shrink_slab+0x175/0x6c0 mm/vmscan.c:1055
 shrink_one+0x4f9/0x710 mm/vmscan.c:5365
 shrink_many mm/vmscan.c:5415 [inline]
 lru_gen_shrink_node mm/vmscan.c:5532 [inline]
 shrink_node+0x1fd5/0x3500 mm/vmscan.c:6473
 kswapd_shrink_node mm/vmscan.c:7273 [inline]
 balance_pgdat+0xa02/0x1ac0 mm/vmscan.c:7463
 kswapd+0x677/0xd60 mm/vmscan.c:7723
 kthread+0x344/0x440 kernel/kthread.c:389
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
----------------
Code disassembly (best guess):
   0:	4c 89 f7             	mov    %r14,%rdi
   3:	41 ff 16             	callq  *(%r14)
   6:	31 ff                	xor    %edi,%edi
   8:	48 89 c3             	mov    %rax,%rbx
   b:	48 89 c6             	mov    %rax,%rsi
   e:	48 89 44 24 20       	mov    %rax,0x20(%rsp)
  13:	e8 80 e9 cc ff       	callq  0xffcce998
  18:	48 85 db             	test   %rbx,%rbx
  1b:	48 c7 44 24 08 00 00 	movq   $0x0,0x8(%rsp)
  22:	00 00
  24:	0f 84 4c 05 00 00    	je     0x576
* 2a:	e8 29 ed cc ff       	callq  0xffcced58 <-- trapping instruction
  2f:	48 89 de             	mov    %rbx,%rsi
  32:	48 c7 c7 fe ff ff ff 	mov    $0xfffffffffffffffe,%rdi
  39:	e8 5a e9 cc ff       	callq  0xffcce998
  3e:	48                   	rex.W
  3f:	83                   	.byte 0x83