------------[ cut here ]------------ WARNING: CPU: 1 PID: 7108 at net/can/isotp.c:910 isotp_tx_timer_handler+0x14c/0x25c net/can/isotp.c:874 Modules linked in: CPU: 1 PID: 7108 Comm: syz-executor.0 Not tainted 6.1.0-rc4-syzkaller-00020-gf67dd6ce0723 #0 Hardware name: linux,dummy-virt (DT) pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : isotp_tx_timer_handler+0x14c/0x25c net/can/isotp.c:910 lr : __run_hrtimer kernel/time/hrtimer.c:1685 [inline] lr : __hrtimer_run_queues+0x5f0/0xf10 kernel/time/hrtimer.c:1749 sp : ffff800010ab7d60 x29: ffff800010ab7d60 x28: ffff00002bf80570 x27: dfff800000000000 x26: ffff00006a9edb00 x25: 1fffe0000d53db69 x24: ffff00006a9edb10 x23: ffff80000de5cd50 x22: ffff00002bf907c0 x21: 1fffe000057f20f8 x20: ffff00002bf80000 x19: ffff00002bf80570 x18: 0000000000000000 x17: ffff80005cbe4000 x16: ffff800010ab8000 x15: 0000000000008000 x14: 1ffff00002156f5a x13: 0000000000000000 x12: ffff60000d53db11 x11: 1fffe0000d53db10 x10: ffff60000d53db10 x9 : dfff800000000000 x8 : 0000000000000000 x7 : 00009ffff2ac24f0 x6 : 0000000000000001 x5 : 0000000000000000 x4 : 1fffe000015fc001 x3 : 0000000000000003 x2 : dfff800000000000 x1 : 0000000000000003 x0 : 0000000000000000 Call trace: isotp_tx_timer_handler+0x14c/0x25c net/can/isotp.c:874 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x5f0/0xf10 kernel/time/hrtimer.c:1749 hrtimer_run_softirq+0x134/0x2d0 kernel/time/hrtimer.c:1766 _stext+0x28c/0x107c ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79 call_on_irq_stack+0x2c/0x54 arch/arm64/kernel/entry.S:889 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84 invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0x3bc/0x4dc kernel/softirq.c:650 irq_exit_rcu+0x14/0x80 kernel/softirq.c:662 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:577 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:122 [inline] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] _raw_spin_unlock_irqrestore+0x50/0xc0 kernel/locking/spinlock.c:194 unlock_hrtimer_base kernel/time/hrtimer.c:1017 [inline] hrtimer_start_range_ns+0x2d8/0xdcc kernel/time/hrtimer.c:1301 hrtimer_start_expires include/linux/hrtimer.h:432 [inline] hrtimer_sleeper_start_expires kernel/time/hrtimer.c:1965 [inline] do_nanosleep+0x128/0x3d4 kernel/time/hrtimer.c:2041 hrtimer_nanosleep+0x180/0x2e0 kernel/time/hrtimer.c:2097 common_nsleep+0x78/0xd0 kernel/time/posix-timers.c:1236 __do_sys_clock_nanosleep kernel/time/posix-timers.c:1276 [inline] __se_sys_clock_nanosleep kernel/time/posix-timers.c:1254 [inline] __arm64_sys_clock_nanosleep+0x208/0x320 kernel/time/posix-timers.c:1254 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x260 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x254 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x50/0x14c arch/arm64/kernel/syscall.c:206 el0_svc+0x54/0x140 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0xb8/0xc0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 irq event stamp: 3737 hardirqs last enabled at (3736): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (3736): [] _raw_spin_unlock_irqrestore+0x90/0xc0 kernel/locking/spinlock.c:194 hardirqs last disabled at (3737): [] el1_dbg+0x24/0xa0 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (3722): [] fpsimd_restore_current_state+0x3c/0x110 arch/arm64/kernel/fpsimd.c:1710 softirqs last disabled at (3733): [] ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79 ---[ end trace 0000000000000000 ]---