------------[ cut here ]------------ ODEBUG: free active (active state 0) object type: hrtimer hint: isotp_rx_timer_handler+0x0/0x170 include/linux/list.h:71 WARNING: CPU: 1 PID: 8486 at lib/debugobjects.c:505 debug_print_object+0x16e/0x250 lib/debugobjects.c:505 Modules linked in: CPU: 1 PID: 8486 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:debug_print_object+0x16e/0x250 lib/debugobjects.c:505 Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 60 71 c2 89 4c 89 ee 48 c7 c7 60 65 c2 89 e8 27 17 02 05 <0f> 0b 83 05 d5 0e f6 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 RSP: 0018:ffffc90000dd8c90 EFLAGS: 00010082 RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 RDX: ffff88807ac58340 RSI: ffffffff815c1855 RDI: fffff520001bb184 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff815bb68e R11: 0000000000000000 R12: ffffffff896d9140 R13: ffffffff89c26ba0 R14: ffffffff8163bda0 R15: dffffc0000000000 FS: 00000000030fd400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd8b6b2a718 CR3: 000000007ac0d000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __debug_check_no_obj_freed lib/debugobjects.c:987 [inline] debug_check_no_obj_freed+0x301/0x420 lib/debugobjects.c:1018 kfree+0xd1/0x2c0 mm/slab.c:3802 sk_prot_free net/core/sock.c:1747 [inline] __sk_destruct+0x6c6/0x900 net/core/sock.c:1832 sk_destruct+0xbd/0xe0 net/core/sock.c:1847 __sk_free+0xef/0x3d0 net/core/sock.c:1858 sk_free+0x78/0xa0 net/core/sock.c:1869 sock_put include/net/sock.h:1813 [inline] can_rx_delete_receiver+0xbd/0xf0 net/can/af_can.c:497 rcu_do_batch kernel/rcu/tree.c:2558 [inline] rcu_core+0x7ab/0x13b0 kernel/rcu/tree.c:2793 __do_softirq+0x29b/0x9f6 kernel/softirq.c:559 invoke_softirq kernel/softirq.c:433 [inline] __irq_exit_rcu+0x136/0x200 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:647 RIP: 0010:__syscall_enter_from_user_work kernel/entry/common.c:87 [inline] RIP: 0010:syscall_enter_from_user_mode+0x31/0x70 kernel/entry/common.c:108 Code: 89 fd 48 8b 7c 24 10 e8 3d f8 ff ff e9 2a 00 00 00 e9 2e 00 00 00 e8 5e 08 63 f8 e8 99 06 63 f8 fb 65 48 8b 04 25 00 f0 01 00 <48> 8b 70 08 40 f6 c6 3f 75 1c 4c 89 e0 5d 41 5c c3 e9 1b 00 00 00 RSP: 0018:ffffc90001877f28 EFLAGS: 00000206 RAX: ffff88807ac58340 RBX: 0000000000000000 RCX: 1ffffffff1b92271 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90001877f58 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff817a1fe8 R11: 0000000000000000 R12: 00000000000000e6 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 do_syscall_64+0x1c/0xb0 arch/x86/entry/common.c:42 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x48a7a1 Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 aa e7 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 e3 e7 ff ff 48 8b 04 24 eb 97 66 2e 0f 1f RSP: 002b:00007ffe5be31990 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 RAX: ffffffffffffffda RBX: 0000000000000503 RCX: 000000000048a7a1 RDX: 00007ffe5be319d0 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007ffe5be31a6c R08: 0000000000000000 R09: 00007ffe5bff6080 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 R13: 0000000000096067 R14: 0000000000000009 R15: 00007ffe5be31ad0