------------[ cut here ]------------
HSR: Could not send supervision frame
WARNING: CPU: 1 PID: 3348 at net/hsr/hsr_device.c:293 send_hsr_supervision_frame+0x66d/0x8d0 net/hsr/hsr_device.c:293
Modules linked in:
CPU: 1 PID: 3348 Comm: dhcpcd Not tainted 5.15.0-syzkaller #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
RIP: 0010:send_hsr_supervision_frame+0x66d/0x8d0 net/hsr/hsr_device.c:293
Code: 1d 0b e9 71 04 31 ff 89 de e8 cf 4a 8d f8 84 db 75 b6 e8 e6 46 8d f8 48 c7 c7 00 80 b7 8a c6 05 eb e8 71 04 01 e8 da d0 0c 00 <0f> 0b eb 9a e8 ca 46 8d f8 41 be 3c 00 00 00 ba 01 00 00 00 4c 89
RSP: 0000:ffffc90000508c60 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888017b99d00 RSI: ffffffff815f39c8 RDI: fffff520000a117e
RBP: ffff88804c9a2c80 R08: 0000000000000000 R09: 0000000000000001
R10: ffffffff815ed79e R11: 0000000000000000 R12: ffff88801ac4aa00
R13: 0000000000000000 R14: ffff88801ac4aa18 R15: 0000000000000017
FS: 00007f28f5818740(0000) GS:ffff88802cb00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f28f58de0c8 CR3: 0000000017e00000 CR4: 0000000000150ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
hsr_announce+0x109/0x330 net/hsr/hsr_device.c:382
call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1421
expire_timers kernel/time/timer.c:1466 [inline]
__run_timers.part.0+0x675/0xa20 kernel/time/timer.c:1734
__run_timers kernel/time/timer.c:1715 [inline]
run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1747
__do_softirq+0x29b/0x9c2 kernel/softirq.c:558
invoke_softirq kernel/softirq.c:432 [inline]
__irq_exit_rcu+0x123/0x180 kernel/softirq.c:636
irq_exit_rcu+0x5/0x20 kernel/softirq.c:648
sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:dump_stack_lvl+0x12c/0x134 lib/dump_stack.c:108
Code: 48 85 ed 74 0a e8 49 1e 70 f8 e8 54 16 33 00 e8 3f 1e 70 f8 31 ff 48 89 de e8 c5 20 70 f8 48 85 db 74 06 e8 2b 1e 70 f8 fb 5b <5d> 41 5c e9 21 1e 70 f8 e8 1c 1e 70 f8 48 c7 c7 e0 24 e8 89 e9 bb
RSP: 0000:ffffc90002a3f2e0 EFLAGS: 00000293
RAX: 0000000000000000 RBX: ffffc90002a3f568 RCX: 0000000000000000
RDX: ffff888017b99d00 RSI: ffffffff8907a845 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8fd5bc0f
R10: ffffffff8907a83b R11: 0000000000000000 R12: ffffffff89e824e0
R13: ffffc90002a3f578 R14: 0000000000000000 R15: 0000000000000002
dump_header+0x106/0x624 mm/oom_kill.c:463
oom_kill_process.cold+0x10/0x15 mm/oom_kill.c:982
out_of_memory+0x119b/0x1460 mm/oom_kill.c:1101
__alloc_pages_may_oom mm/page_alloc.c:4314 [inline]
__alloc_pages_slowpath.constprop.0+0x1b03/0x20d0 mm/page_alloc.c:5051
__alloc_pages+0x412/0x500 mm/page_alloc.c:5382
alloc_pages+0x1a7/0x300 mm/mempolicy.c:2191
__pte_alloc_one include/asm-generic/pgalloc.h:63 [inline]
pte_alloc_one+0x16/0x230 arch/x86/mm/pgtable.c:33
__pte_alloc+0x69/0x250 mm/memory.c:464
copy_pte_range mm/memory.c:1024 [inline]
copy_pmd_range mm/memory.c:1159 [inline]
copy_pud_range mm/memory.c:1196 [inline]
copy_p4d_range mm/memory.c:1220 [inline]
copy_page_range+0x186e/0x42c0 mm/memory.c:1293
dup_mmap kernel/fork.c:609 [inline]
dup_mm+0xa4e/0x13e0 kernel/fork.c:1450
copy_mm kernel/fork.c:1502 [inline]
copy_process+0x6fe5/0x75a0 kernel/fork.c:2191
kernel_clone+0xe7/0xab0 kernel/fork.c:2581
__do_sys_clone+0xc8/0x110 kernel/fork.c:2698
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f28f58de0f2
Code: Unable to access opcode bytes at RIP 0x7f28f58de0c8.
RSP: 002b:00007ffe8f70f310 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000561cad623e08 RCX: 00007f28f58de0f2
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000561cad623dd0
R10: 00007f28f5818a10 R11: 0000000000000246 R12: 0000000000000000
R13: 0000561cad623dd0 R14: 0000000000000000 R15: 0000561cad623e04
----------------
Code disassembly (best guess):
0: 48 85 ed test %rbp,%rbp
3: 74 0a je 0xf
5: e8 49 1e 70 f8 callq 0xf8701e53
a: e8 54 16 33 00 callq 0x331663
f: e8 3f 1e 70 f8 callq 0xf8701e53
14: 31 ff xor %edi,%edi
16: 48 89 de mov %rbx,%rsi
19: e8 c5 20 70 f8 callq 0xf87020e3
1e: 48 85 db test %rbx,%rbx
21: 74 06 je 0x29
23: e8 2b 1e 70 f8 callq 0xf8701e53
28: fb sti
29: 5b pop %rbx
* 2a: 5d pop %rbp <-- trapping instruction
2b: 41 5c pop %r12
2d: e9 21 1e 70 f8 jmpq 0xf8701e53
32: e8 1c 1e 70 f8 callq 0xf8701e53
37: 48 c7 c7 e0 24 e8 89 mov $0xffffffff89e824e0,%rdi
3e: e9 .byte 0xe9
3f: bb .byte 0xbb