------------[ cut here ]------------ WARNING: CPU: 0 PID: 2375 at net/can/isotp.c:920 isotp_tx_timer_handler+0xe0/0x148 net/can/isotp.c:920 can-isotp: tx timer state 00000000 cfecho 00000000 Modules linked in: Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 2375 Comm: kworker/0:4 Not tainted 6.1.0-rc8-syzkaller #0 Hardware name: ARM-Versatile Express Workqueue: events bpf_prog_free_deferred Backtrace: frame pointer underflow [<81751b44>] (dump_backtrace) from [<81751c38>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:253) r7:81cf8a60 r6:822228ec r5:60000193 r4:81d06e48 [<81751c20>] (show_stack) from [<8176d8f8>] (__dump_stack lib/dump_stack.c:88 [inline]) [<81751c20>] (show_stack) from [<8176d8f8>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106) [<8176d8b0>] (dump_stack_lvl) from [<8176d91c>] (dump_stack+0x18/0x1c lib/dump_stack.c:113) r5:00000000 r4:82445d14 [<8176d904>] (dump_stack) from [<817527e0>] (panic+0x11c/0x360 kernel/panic.c:274) [<817526c4>] (panic) from [<80241604>] (__warn+0x98/0x1a4 kernel/panic.c:621) r3:00000001 r2:00000000 r1:00000000 r0:81cf8a60 r7:815ff420 [<8024156c>] (__warn) from [<81752ac0>] (warn_slowpath_fmt+0x9c/0xd4 kernel/panic.c:651) r8:00000009 r7:815ff420 r6:00000398 r5:81eb0648 r4:81eb061c [<81752a28>] (warn_slowpath_fmt) from [<815ff420>] (isotp_tx_timer_handler+0xe0/0x148 net/can/isotp.c:920) r8:000000a0 r7:dddcd220 r6:dddcd180 r5:00000000 r4:85400278 [<815ff340>] (isotp_tx_timer_handler) from [<802e7148>] (__run_hrtimer kernel/time/hrtimer.c:1685 [inline]) [<815ff340>] (isotp_tx_timer_handler) from [<802e7148>] (__hrtimer_run_queues+0x1b0/0x46c kernel/time/hrtimer.c:1749) r5:dddcd260 r4:85400278 [<802e6f98>] (__hrtimer_run_queues) from [<802e7490>] (hrtimer_run_softirq+0x8c/0xb8 kernel/time/hrtimer.c:1766) r10:84134500 r9:00000100 r8:00000100 r7:00000000 r6:00000000 r5:20000113 r4:dddcd180 [<802e7404>] (hrtimer_run_softirq) from [<8020133c>] (__do_softirq+0x16c/0x498 kernel/softirq.c:571) r7:dfa21d10 r6:00000008 r5:00000009 r4:822040a0 [<802011d0>] (__do_softirq) from [<80249f48>] (invoke_softirq kernel/softirq.c:445 [inline]) [<802011d0>] (__do_softirq) from [<80249f48>] (__irq_exit_rcu kernel/softirq.c:650 [inline]) [<802011d0>] (__do_softirq) from [<80249f48>] (__irq_exit_rcu kernel/softirq.c:640 [inline]) [<802011d0>] (__do_softirq) from [<80249f48>] (irq_exit+0x9c/0xe8 kernel/softirq.c:674) r10:ddde3b9c r9:84134500 r8:00000000 r7:dfa21d10 r6:81eba9a0 r5:81eba9b8 r4:820aaa00 [<80249eac>] (irq_exit) from [<8176dff0>] (generic_handle_arch_irq+0x7c/0x80 kernel/irq/handle.c:240) r5:81eba9b8 r4:820aa9dc [<8176df74>] (generic_handle_arch_irq) from [<81723ff0>] (call_with_stack+0x1c/0x20 arch/arm/lib/call_with_stack.S:40) r9:84134500 r8:8220c5d8 r7:dfa21d44 r6:ffffffff r5:80000013 r4:8021c17c [<81723fd4>] (call_with_stack) from [<80200b44>] (__irq_svc+0x84/0xac arch/arm/kernel/entry-armv.S:221) Exception stack(0xdfa21d10 to 0xdfa21d58) 1d00: e9c9c000 ee78b000 00000000 8021c164 1d20: ffffffff 00000000 00000000 82495928 8220c5d8 00000000 ddde3b9c dfa21d84 1d40: ee78b000 dfa21d60 80211640 8021c17c 80000013 ffffffff [<802115dc>] (flush_tlb_kernel_range) from [<804536bc>] (__purge_vmap_area_lazy+0xac/0x6f4 mm/vmalloc.c:1749) [<80453610>] (__purge_vmap_area_lazy) from [<80453e40>] (_vm_unmap_aliases.part.0+0x13c/0x178 mm/vmalloc.c:2173) r10:ddde3b9c r9:00000000 r8:8220c5d8 r7:8220c490 r6:00000000 r5:ffffffff r4:00000002 [<80453d04>] (_vm_unmap_aliases.part.0) from [<80457164>] (_vm_unmap_aliases mm/vmalloc.c:2142 [inline]) [<80453d04>] (_vm_unmap_aliases.part.0) from [<80457164>] (vm_remove_mappings mm/vmalloc.c:2672 [inline]) [<80453d04>] (_vm_unmap_aliases.part.0) from [<80457164>] (__vunmap+0x19c/0x2d4 mm/vmalloc.c:2699) r10:00000001 r9:00000000 r8:82495928 r7:00000001 r6:00000000 r5:ffffffff r4:851e21c0 [<80456fc8>] (__vunmap) from [<80457330>] (__vfree+0x40/0x80 mm/vmalloc.c:2761) r10:dddd8205 r9:85099800 r8:00000000 r7:00000000 r6:dddd4a40 r5:00001000 r4:7f013000 [<804572f0>] (__vfree) from [<804573a4>] (vfree+0x34/0x3c mm/vmalloc.c:2792) r5:00001000 r4:7f013000 [<80457370>] (vfree) from [<802da310>] (module_memfree+0x40/0x60 kernel/module/main.c:1137) [<802da2d0>] (module_memfree) from [<8036ed4c>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1001) r5:00001000 r4:ed58f000 [<8036ed3c>] (bpf_jit_free_exec) from [<8036ef14>] (bpf_jit_binary_free kernel/bpf/core.c:1047 [inline]) [<8036ed3c>] (bpf_jit_free_exec) from [<8036ef14>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1172) [<8036eeac>] (bpf_jit_free) from [<8036f118>] (bpf_prog_free_deferred+0x188/0x1a0 kernel/bpf/core.c:2567) r5:85099b40 r4:85099b40 [<8036ef90>] (bpf_prog_free_deferred) from [<8026122c>] (process_one_work+0x20c/0x5ac kernel/workqueue.c:2289) r9:84134500 r8:00000000 r7:dddd8200 r6:dddd4a40 r5:84ffa980 r4:85099b40 [<80261020>] (process_one_work) from [<80261638>] (worker_thread+0x6c/0x4e0 kernel/workqueue.c:2436) r10:dddd4a40 r9:00000008 r8:82204d40 r7:dddd4a5c r6:84ffa998 r5:dddd4a40 r4:84ffa980 [<802615cc>] (worker_thread) from [<80269b90>] (kthread+0xec/0x11c kernel/kthread.c:376) r10:00000000 r9:df835e8c r8:84ffca00 r7:84ffa980 r6:802615cc r5:84134500 r4:84ffc980 [<80269aa4>] (kthread) from [<80200100>] (ret_from_fork+0x14/0x34 arch/arm/kernel/entry-common.S:148) Exception stack(0xdfa21fb0 to 0xdfa21ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80269aa4 r4:84ffc980 Rebooting in 86400 seconds..