node 0: slabs: 1781, objs: 41002, free: 0 node 1: slabs: 3347, objs: 78254, free: 6 ------------[ cut here ]------------ HSR: Could not send supervision frame WARNING: CPU: 1 PID: 0 at net/hsr/hsr_device.c:294 send_hsr_supervision_frame+0x608/0x810 net/hsr/hsr_device.c:294 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.0-syzkaller-15029-gbe3ca57cfb77 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 RIP: 0010:send_hsr_supervision_frame+0x608/0x810 net/hsr/hsr_device.c:294 Code: 04 31 ff 89 de e8 f8 bd 29 f7 84 db 0f 85 bd fe ff ff e8 bb c2 29 f7 48 c7 c7 80 88 16 8c c6 05 cf bd a4 04 01 e8 18 5a ef f6 <0f> 0b e9 9e fe ff ff e8 9c c2 29 f7 41 be 3c 00 00 00 ba 01 00 00 RSP: 0000:ffffc90000578bd8 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814e3589 RDX: ffff888014ee0000 RSI: ffffffff814e3596 RDI: 0000000000000001 RBP: ffffc90000578c40 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 000000003a525348 R12: ffff8880222a9080 R13: 0000000000000000 R14: ffffffff8a5edbe0 R15: 0000000000000017 FS: 0000000000000000(0000) GS:ffff88802c700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004335e0 CR3: 000000000cd77000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: hsr_announce+0x114/0x370 net/hsr/hsr_device.c:382 call_timer_fn+0x193/0x580 kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x764/0xb10 kernel/time/timer.c:2022 run_timer_softirq+0x58/0xd0 kernel/time/timer.c:2035 __do_softirq+0x21a/0x968 kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:72 [inline] RIP: 0010:default_idle+0xf/0x20 arch/x86/kernel/process.c:743 Code: 89 07 49 c7 c0 08 00 00 00 4d 29 c8 4c 01 c7 4c 29 c2 e9 76 ff ff ff cc cc cc cc f3 0f 1e fa 66 90 0f 00 2d 83 5c 45 00 fb f4 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 f3 0f 1e fa 65 RSP: 0000:ffffc90000457e08 EFLAGS: 00000246 RAX: 0000000000b61311 RBX: 0000000000000001 RCX: ffffffff8a81382e RDX: 0000000000000000 RSI: ffffffff8accb920 RDI: ffffffff8b2e7fc0 RBP: ffffed10029dc000 R08: 0000000000000001 R09: ffffed10058e6dbd R10: ffff88802c736deb R11: 0000000000000000 R12: 0000000000000001 R13: ffff888014ee0000 R14: ffffffff8f197650 R15: 0000000000000000 default_idle_call+0x67/0xa0 kernel/sched/idle.c:97 cpuidle_idle_call kernel/sched/idle.c:170 [inline] do_idle+0x32e/0x3f0 kernel/sched/idle.c:282 cpu_startup_entry+0x50/0x60 kernel/sched/idle.c:380 start_secondary+0x20e/0x2a0 arch/x86/kernel/smpboot.c:336 secondary_startup_64_no_verify+0x166/0x16b ---------------- Code disassembly (best guess): 0: 89 07 mov %eax,(%rdi) 2: 49 c7 c0 08 00 00 00 mov $0x8,%r8 9: 4d 29 c8 sub %r9,%r8 c: 4c 01 c7 add %r8,%rdi f: 4c 29 c2 sub %r8,%rdx 12: e9 76 ff ff ff jmp 0xffffff8d 17: cc int3 18: cc int3 19: cc int3 1a: cc int3 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d 83 5c 45 00 verw 0x455c83(%rip) # 0x455cab 28: fb sti 29: f4 hlt * 2a: fa cli <-- trapping instruction 2b: c3 ret 2c: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1) 33: 00 00 00 00 37: 0f 1f 40 00 nopl 0x0(%rax) 3b: f3 0f 1e fa endbr64 3f: 65 gs