------------[ cut here ]------------ HSR: No self node WARNING: net/hsr/hsr_framereg.c:39 at hsr_addr_is_self+0x211/0x3f0 net/hsr/hsr_framereg.c:39, CPU#1: kworker/1:1/12843 Modules linked in: CPU: 1 UID: 0 PID: 12843 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Workqueue: mld mld_dad_work RIP: 0010:hsr_addr_is_self+0x211/0x3f0 net/hsr/hsr_framereg.c:39 Code: 33 2f 41 0f b7 dd 89 ee 09 de 31 ff e8 08 6f bb f6 09 dd 74 54 e8 4f 6a bb f6 31 ed eb 53 e8 46 6a bb f6 48 8d 3d ef d6 92 04 <67> 48 0f b9 3a 31 ed eb 42 e8 b1 28 1f 00 89 c5 31 ff 89 c6 e8 d6 RSP: 0018:ffffc90004707240 EFLAGS: 00010293 RAX: ffffffff8b0961da RBX: ffffffff8b095ff6 RCX: ffff88802f701ec0 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8f9c38d0 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: ffffc90004707348 R11: fffff520008e0e6b R12: dffffc0000000000 R13: ffff88803641a640 R14: ffff88805f9c3002 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff88812601f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9e4d9d4ff8 CR3: 00000000341e8000 CR4: 00000000003526f0 DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: check_local_dest net/hsr/hsr_forward.c:592 [inline] fill_frame_info net/hsr/hsr_forward.c:728 [inline] hsr_forward_skb+0xa11/0x2a80 net/hsr/hsr_forward.c:739 hsr_dev_xmit+0x253/0x370 net/hsr/hsr_device.c:236 __netdev_start_xmit include/linux/netdevice.h:5382 [inline] netdev_start_xmit include/linux/netdevice.h:5391 [inline] xmit_one net/core/dev.c:3889 [inline] dev_hard_start_xmit+0x2df/0x860 net/core/dev.c:3905 __dev_queue_xmit+0x1428/0x3900 net/core/dev.c:4871 NF_HOOK_COND include/linux/netfilter.h:307 [inline] ip6_output+0x340/0x550 net/ipv6/ip6_output.c:246 dst_output include/net/dst.h:488 [inline] NF_HOOK+0x177/0x4f0 include/linux/netfilter.h:318 mld_sendpack+0x8b4/0xe40 net/ipv6/mcast.c:1842 mld_dad_work+0x45/0x5b0 net/ipv6/mcast.c:2281 process_one_work+0x98b/0x1630 kernel/workqueue.c:3306 process_scheduled_works kernel/workqueue.c:3389 [inline] worker_thread+0xb49/0x1140 kernel/workqueue.c:3470 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: 33 2f xor (%rdi),%ebp 2: 41 0f b7 dd movzwl %r13w,%ebx 6: 89 ee mov %ebp,%esi 8: 09 de or %ebx,%esi a: 31 ff xor %edi,%edi c: e8 08 6f bb f6 call 0xf6bb6f19 11: 09 dd or %ebx,%ebp 13: 74 54 je 0x69 15: e8 4f 6a bb f6 call 0xf6bb6a69 1a: 31 ed xor %ebp,%ebp 1c: eb 53 jmp 0x71 1e: e8 46 6a bb f6 call 0xf6bb6a69 23: 48 8d 3d ef d6 92 04 lea 0x492d6ef(%rip),%rdi # 0x492d719 * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 31 ed xor %ebp,%ebp 31: eb 42 jmp 0x75 33: e8 b1 28 1f 00 call 0x1f28e9 38: 89 c5 mov %eax,%ebp 3a: 31 ff xor %edi,%edi 3c: 89 c6 mov %eax,%esi 3e: e8 .byte 0xe8 3f: d6 (bad)