------------[ cut here ]------------ WARNING: CPU: 1 PID: 11038 at net/can/isotp.c:920 isotp_tx_timer_handler+0xe0/0x148 net/can/isotp.c:920 can-isotp: tx timer state 00000000 cfecho 00000000 Modules linked in: Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 11038 Comm: modprobe Not tainted 6.1.0-rc6-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: frame pointer underflow [<81751604>] (dump_backtrace) from [<817516f8>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:253) r7:81cf8970 r6:822228ec r5:600f0193 r4:81d06d58 [<817516e0>] (show_stack) from [<8176d3c0>] (__dump_stack lib/dump_stack.c:88 [inline]) [<817516e0>] (show_stack) from [<8176d3c0>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106) [<8176d378>] (dump_stack_lvl) from [<8176d3e4>] (dump_stack+0x18/0x1c lib/dump_stack.c:113) r5:00000000 r4:82445d14 [<8176d3cc>] (dump_stack) from [<817522a0>] (panic+0x11c/0x360 kernel/panic.c:274) [<81752184>] (panic) from [<80241604>] (__warn+0x98/0x1a4 kernel/panic.c:621) r3:00000001 r2:00000000 r1:00000000 r0:81cf8970 r7:815ff000 [<8024156c>] (__warn) from [<81752580>] (warn_slowpath_fmt+0x9c/0xd4 kernel/panic.c:651) r8:00000009 r7:815ff000 r6:00000398 r5:81eb0520 r4:81eb04f4 [<817524e8>] (warn_slowpath_fmt) from [<815ff000>] (isotp_tx_timer_handler+0xe0/0x148 net/can/isotp.c:920) r8:000000a0 r7:dddde220 r6:dddde180 r5:00000000 r4:89600278 [<815fef20>] (isotp_tx_timer_handler) from [<802e70e0>] (__run_hrtimer kernel/time/hrtimer.c:1685 [inline]) [<815fef20>] (isotp_tx_timer_handler) from [<802e70e0>] (__hrtimer_run_queues+0x1b0/0x46c kernel/time/hrtimer.c:1749) r5:dddde260 r4:89600278 [<802e6f30>] (__hrtimer_run_queues) from [<802e7428>] (hrtimer_run_softirq+0x8c/0xb8 kernel/time/hrtimer.c:1766) r10:83147300 r9:00000100 r8:00000100 r7:00000000 r6:00000000 r5:200f0113 r4:dddde180 [<802e739c>] (hrtimer_run_softirq) from [<8020133c>] (__do_softirq+0x16c/0x498 kernel/softirq.c:571) r7:ee179b30 r6:00000008 r5:00000009 r4:822040a0 [<802011d0>] (__do_softirq) from [<80249f48>] (invoke_softirq kernel/softirq.c:445 [inline]) [<802011d0>] (__do_softirq) from [<80249f48>] (__irq_exit_rcu kernel/softirq.c:650 [inline]) [<802011d0>] (__do_softirq) from [<80249f48>] (__irq_exit_rcu kernel/softirq.c:640 [inline]) [<802011d0>] (__do_softirq) from [<80249f48>] (irq_exit+0x9c/0xe8 kernel/softirq.c:674) r10:ddf4669c r9:83147300 r8:00000000 r7:ee179b30 r6:81eba878 r5:81eba890 r4:820aaa00 [<80249eac>] (irq_exit) from [<8176dab8>] (generic_handle_arch_irq+0x7c/0x80 kernel/irq/handle.c:240) r5:81eba890 r4:820aa9dc [<8176da3c>] (generic_handle_arch_irq) from [<81723aa0>] (call_with_stack+0x1c/0x20 arch/arm/lib/call_with_stack.S:40) r9:83147300 r8:823d2dc0 r7:ee179b64 r6:ffffffff r5:600f0013 r4:8045e2b8 [<81723a84>] (call_with_stack) from [<80200b44>] (__irq_svc+0x84/0xac arch/arm/kernel/entry-armv.S:221) Exception stack(0xee179b30 to 0xee179b78) 9b20: 8942f000 00000000 00000000 00000000 9b40: 00000000 dddea080 dddea094 ddf4669c 823d2dc0 00000000 ddf4669c ee179c3c 9b60: ee179b38 ee179b80 80458b10 8045e2b8 600f0013 ffffffff [<8045def0>] (get_page_from_freelist) from [<8045f668>] (__alloc_pages+0xe4/0x1278 mm/page_alloc.c:5555) r10:8221d2c0 r9:83147300 r8:81ed0034 r7:00000000 r6:defc16f8 r5:00002800 r4:00000000 [<8045f584>] (__alloc_pages) from [<80460e94>] (__alloc_pages_node include/linux/gfp.h:223 [inline]) [<8045f584>] (__alloc_pages) from [<80460e94>] (alloc_pages_node include/linux/gfp.h:246 [inline]) [<8045f584>] (__alloc_pages) from [<80460e94>] (alloc_pages include/linux/gfp.h:257 [inline]) [<8045f584>] (__alloc_pages) from [<80460e94>] (__get_free_pages+0x1c/0x34 mm/page_alloc.c:5605) r10:8221d2c0 r9:ee179eb4 r8:81ed0034 r7:010eafff r6:defc16f8 r5:ee179eb4 r4:00000000 [<80460e78>] (__get_free_pages) from [<80449cbc>] (tlb_remove_table+0x114/0x294 mm/mmu_gather.c:226) [<80449ba8>] (tlb_remove_table) from [<80438bac>] (__pte_free_tlb arch/arm/include/asm/tlb.h:53 [inline]) [<80449ba8>] (tlb_remove_table) from [<80438bac>] (free_pte_range mm/memory.c:226 [inline]) [<80449ba8>] (tlb_remove_table) from [<80438bac>] (free_pmd_range mm/memory.c:244 [inline]) [<80449ba8>] (tlb_remove_table) from [<80438bac>] (free_pud_range mm/memory.c:278 [inline]) [<80449ba8>] (tlb_remove_table) from [<80438bac>] (free_p4d_range mm/memory.c:312 [inline]) [<80449ba8>] (tlb_remove_table) from [<80438bac>] (free_pgd_range+0x1d8/0x40c mm/memory.c:392) r9:ee179eb4 r8:81ed0034 r7:010eafff r6:010eb000 r5:010eb000 r4:89446048 [<804389d4>] (free_pgd_range) from [<80438ed0>] (free_pgtables+0xf0/0x13c mm/memory.c:433) r10:852e2820 r9:00002000 r8:ee179eb4 r7:010ca000 r6:7effffff r5:852e2a00 r4:852e2a00 [<80438de0>] (free_pgtables) from [<804471d4>] (exit_mmap+0xfc/0x354 mm/mmap.c:3103) r10:000000f8 r9:00000000 r8:8532a038 r7:83147b40 r6:8532a000 r5:8532a000 r4:852e2320 [<804470d8>] (exit_mmap) from [<8023d5f8>] (__mmput+0x3c/0x120 kernel/fork.c:1185) r8:80200288 r7:83147b40 r6:8532a038 r5:8532a000 r4:8532a000 [<8023d5bc>] (__mmput) from [<8023d718>] (mmput+0x3c/0x40 kernel/fork.c:1207) r5:8532a000 r4:83147300 [<8023d6dc>] (mmput) from [<8024816c>] (exit_mm kernel/exit.c:516 [inline]) [<8023d6dc>] (mmput) from [<8024816c>] (do_exit+0x2a0/0xa68 kernel/exit.c:807) [<80247ecc>] (do_exit) from [<80248a8c>] (do_group_exit+0x40/0x8c kernel/exit.c:950) r7:8293f480 [<80248a4c>] (do_group_exit) from [<80248af0>] (__do_sys_exit_group kernel/exit.c:961 [inline]) [<80248a4c>] (do_group_exit) from [<80248af0>] (__wake_up_parent+0x0/0x28 kernel/exit.c:959) r7:000000f8 r4:76efb780 [<80248ad8>] (sys_exit_group) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:64) Exception stack(0xee179fa8 to 0xee179ff0) 9fa0: 76efb780 76efb780 00000001 00000000 00000001 00000000 9fc0: 76efb780 76efb780 00000000 000000f8 00000001 00000000 76f00088 76efd000 9fe0: 00000000 7ea18bac 76de1140 76e53f34 Rebooting in 86400 seconds..