------------[ cut here ]------------ ODEBUG: free active (active state 0) object type: hrtimer hint: isotp_rx_timer_handler+0x0/0x160 net/can/isotp.c:1415 WARNING: CPU: 1 PID: 18735 at lib/debugobjects.c:508 debug_print_object lib/debugobjects.c:505 [inline] WARNING: CPU: 1 PID: 18735 at lib/debugobjects.c:508 __debug_check_no_obj_freed lib/debugobjects.c:987 [inline] WARNING: CPU: 1 PID: 18735 at lib/debugobjects.c:508 debug_check_no_obj_freed+0x44b/0x650 lib/debugobjects.c:1018 Modules linked in: CPU: 1 PID: 18735 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:debug_print_object lib/debugobjects.c:505 [inline] RIP: 0010:__debug_check_no_obj_freed lib/debugobjects.c:987 [inline] RIP: 0010:debug_check_no_obj_freed+0x44b/0x650 lib/debugobjects.c:1018 Code: 4c 89 ef e8 f7 37 c6 fd 4d 8b 45 00 48 c7 c7 c0 a8 92 8a 48 c7 c6 e0 a4 92 8a 48 89 da 44 89 f1 4d 89 f9 31 c0 e8 05 5f 4a fd <0f> 0b 48 ba 00 00 00 00 00 fc ff df ff 05 7f 63 37 0a 48 8b 5c 24 RSP: 0018:ffffc90000dc09a8 EFLAGS: 00010246 RAX: 9fc5e7c32be6c000 RBX: ffffffff8a92aa80 RCX: ffff888021171c40 RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: ffff88802fa7e130 R08: ffffffff81656042 R09: ffffed1017365f90 R10: ffffed1017365f90 R11: 0000000000000000 R12: ffff88802fa7e12c R13: ffffffff8a30f240 R14: 0000000000000000 R15: ffffffff88e027e0 FS: 00007fe80c871700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000514170 CR3: 0000000036b4c000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: free_pages_prepare mm/page_alloc.c:1303 [inline] __free_pages_ok+0x2f5/0x1180 mm/page_alloc.c:1572 kfree+0x287/0x2d0 mm/slub.c:4209 sk_prot_free net/core/sock.c:1747 [inline] __sk_destruct+0x5d6/0x830 net/core/sock.c:1832 rcu_do_batch kernel/rcu/tree.c:2558 [inline] rcu_core+0x906/0x14b0 kernel/rcu/tree.c:2793 __do_softirq+0x372/0x7a6 kernel/softirq.c:559 invoke_softirq kernel/softirq.c:433 [inline] __irq_exit_rcu+0x245/0x280 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:647 RIP: 0010:tomoyo_check_acl+0xbd/0x430 security/tomoyo/domain.c:173 Code: 49 39 dc 0f 84 14 02 00 00 0f 1f 40 00 49 8d 6c 24 18 48 89 e8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 1d 01 00 00 0f b6 6d 00 <31> ff 89 ee e8 9a ca b9 fd 85 ed 74 16 e8 c1 c7 b9 fd e9 c6 00 00 RSP: 0018:ffffc900049ffba0 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffff88801d748e10 RCX: 0000000000040000 RDX: ffffc90011984000 RSI: 00000000000006e8 RDI: 00000000000006e9 RBP: 0000000000000000 R08: ffffffff83c54ab6 R09: ffffffff83c6e2e2 R10: 0000000000000002 R11: ffff888021171c40 R12: ffff888021e95a00 R13: dffffc0000000000 R14: ffff88801d748e00 R15: 0000000000000000 tomoyo_path_number_perm+0x40f/0x790 security/tomoyo/file.c:733 security_file_ioctl+0x55/0xb0 security/security.c:1539 __do_sys_ioctl fs/ioctl.c:1063 [inline] __se_sys_ioctl+0x48/0x170 fs/ioctl.c:1055 do_syscall_64+0x3f/0xb0 arch/x86/entry/common.c:47 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x4665d9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe80c871188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 RDX: 0000000000000005 RSI: 0000000000002405 RDI: 0000000000000004 RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 R13: 00007ffe34c3706f R14: 00007fe80c871300 R15: 0000000000022000