------------[ cut here ]------------ can-isotp: tx timer state 00000000 cfecho 00000000 WARNING: CPU: 0 PID: 884 at net/can/isotp.c:920 isotp_tx_timer_handler+0x1a4/0x2c0 net/can/isotp.c:920 Modules linked in: CPU: 0 PID: 884 Comm: kworker/0:2 Not tainted 6.2.0-rc1-syzkaller-00043-g2258c2dc850b #0 Hardware name: linux,dummy-virt (DT) Workqueue: events nsim_dev_trap_report_work pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : isotp_tx_timer_handler+0x1a4/0x2c0 net/can/isotp.c:920 lr : isotp_tx_timer_handler+0x1a4/0x2c0 net/can/isotp.c:920 sp : ffff800008007d50 x29: ffff800008007d50 x28: ffff00002d500570 x27: dfff800000000000 x26: 1fffe0000d529fb9 x25: ffff00006a94fd90 x24: ffff80000e1acd50 x23: ffff00006a94fd80 x22: ffff00002d5107c0 x21: 1fffe00005aa20f8 x20: ffff00002d500000 x19: ffff00002d5005d4 x18: ffff00006a94cc00 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 1ffff00001000f0e x13: 1fffe000021c0b72 x12: ffff60000d52999b x11: 1fffe0000d52999a x10: ffff60000d52999a x9 : dfff800000000000 x8 : ffff00006a94ccd3 x7 : 00009ffff2ad6666 x6 : 0000000000000001 x5 : ffff00006a94ccd0 x4 : 1fffe000021c0a21 x3 : dfff800000000000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000010e05100 Call trace: isotp_tx_timer_handler+0x1a4/0x2c0 net/can/isotp.c:920 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x5f0/0xf10 kernel/time/hrtimer.c:1749 hrtimer_run_softirq+0x134/0x2d0 kernel/time/hrtimer.c:1766 _stext+0x28c/0x107c ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x2c/0x54 arch/arm64/kernel/entry.S:892 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0x3bc/0x4dc kernel/softirq.c:650 irq_exit_rcu+0x14/0x80 kernel/softirq.c:662 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x5c arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:580 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:122 [inline] lock_acquire kernel/locking/lockdep.c:5671 [inline] lock_acquire+0x5e4/0x9a0 kernel/locking/lockdep.c:5633 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x50/0x70 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:350 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:794 [inline] nsim_dev_trap_report_work+0x160/0xa20 drivers/net/netdevsim/dev.c:853 process_one_work+0x780/0x184c kernel/workqueue.c:2289 worker_thread+0x3cc/0xc40 kernel/workqueue.c:2436 kthread+0x23c/0x2a0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:863 irq event stamp: 249253 hardirqs last enabled at (249252): [] __up_console_sem+0x78/0x84 kernel/printk/printk.c:344 hardirqs last disabled at (249253): [] el1_dbg+0x24/0xa0 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (249218): [] spin_unlock_bh include/linux/spinlock.h:395 [inline] softirqs last enabled at (249218): [] nsim_dev_trap_report drivers/net/netdevsim/dev.c:823 [inline] softirqs last enabled at (249218): [] nsim_dev_trap_report_work+0x694/0xa20 drivers/net/netdevsim/dev.c:853 softirqs last disabled at (249229): [] ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:80 ---[ end trace 0000000000000000 ]---