------------[ cut here ]------------ WARNING: CPU: 1 PID: 2252 at net/can/isotp.c:910 isotp_tx_timer_handler+0x94/0x124 net/can/isotp.c:874 Modules linked in: CPU: 1 PID: 2252 Comm: syz-executor.0 Not tainted 6.1.0-rc4-syzkaller-00011-g59f2f4b8a757 #0 Hardware name: linux,dummy-virt (DT) pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : isotp_tx_timer_handler+0x94/0x124 net/can/isotp.c:910 lr : __run_hrtimer kernel/time/hrtimer.c:1685 [inline] lr : __hrtimer_run_queues+0x140/0x1e0 kernel/time/hrtimer.c:1749 sp : ffff80000800beb0 x29: ffff80000800beb0 x28: ffff00007fbcf200 x27: ffff00007fbcf240 x26: ffff800009693700 x25: 0000000000000000 x24: 0000000000000001 x23: 0000000000000000 x22: 0000011fddd3dd30 x21: ffff00007fbcf100 x20: fdff000026b00000 x19: fdff000026b00370 x18: 0000000000000000 x17: ffff80007599e000 x16: ffff80000800c000 x15: 0000000000004000 x14: 000000000000036d x13: 000000000000036d x12: 0000000000000001 x11: 0000000000000001 x10: ffff80007599e000 x9 : c75188b3a39bb407 x8 : f2ff000002975e28 x7 : 0000000000000000 x6 : 00000000025c8e0f x5 : f1ff000026ac0370 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000000 x1 : f2ff000002974ec0 x0 : 0000000000000000 Call trace: isotp_tx_timer_handler+0x94/0x124 net/can/isotp.c:874 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x140/0x1e0 kernel/time/hrtimer.c:1749 hrtimer_run_softirq+0x6c/0xd0 kernel/time/hrtimer.c:1766 _stext+0x124/0x2a4 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84 invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x6c arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x2c arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:577 arch_local_irq_enable arch/arm64/include/asm/irqflags.h:35 [inline] raw_spin_rq_unlock_irq kernel/sched/sched.h:1366 [inline] finish_lock_switch kernel/sched/core.c:4950 [inline] finish_task_switch.isra.0+0x7c/0x270 kernel/sched/core.c:5068 context_switch kernel/sched/core.c:5194 [inline] __schedule+0x280/0x7c4 kernel/sched/core.c:6503 schedule+0x5c/0xcc kernel/sched/core.c:6579 do_nanosleep.constprop.0+0x5c/0x160 kernel/time/hrtimer.c:2044 hrtimer_nanosleep+0x9c/0x11c kernel/time/hrtimer.c:2097 common_nsleep+0x44/0x70 kernel/time/posix-timers.c:1236 __do_sys_clock_nanosleep kernel/time/posix-timers.c:1276 [inline] __se_sys_clock_nanosleep kernel/time/posix-timers.c:1254 [inline] __arm64_sys_clock_nanosleep+0xbc/0x134 kernel/time/posix-timers.c:1254 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0x44/0xec arch/arm64/kernel/syscall.c:142 do_el0_svc+0x2c/0xd0 arch/arm64/kernel/syscall.c:206 el0_svc+0x2c/0xb0 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0xb8/0xc0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:581 ---[ end trace 0000000000000000 ]---