------------[ cut here ]------------ WARNING: CPU: 0 PID: 2186 at net/can/isotp.c:852 isotp_tx_timer_handler+0x574/0xaa0 net/can/isotp.c:763 Modules linked in: CPU: 0 PID: 2186 Comm: syz-fuzzer Not tainted 5.17.0-rc7-syzkaller #0 Hardware name: linux,dummy-virt (DT) pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : isotp_tx_timer_handler+0x574/0xaa0 net/can/isotp.c:852 lr : __run_hrtimer kernel/time/hrtimer.c:1685 [inline] lr : __hrtimer_run_queues+0x564/0xdec kernel/time/hrtimer.c:1749 sp : ffff800010cf7aa0 x29: ffff800010cf7aa0 x28: ffff00002b8a8568 x27: ffff00002b8a8000 x26: ffff00006aa2bac0 x25: 1fffe0000d545761 x24: 1fffe0000d54575a x23: ffff00006aa2bad0 x22: 0000000000000004 x21: ffff80000dc7cb18 x20: ffff00006aa2b840 x19: ffff00002b8a8568 x18: 0000000000000000 x17: ffff80005ce09000 x16: ffff800008008000 x15: 0000000000008000 x14: 1ffff0000219ef1a x13: 0000000000000002 x12: ffff70000219ef49 x11: 1ffff0000219ef48 x10: ffff70000219ef48 x9 : dfff800000000000 x8 : ffff800010cf7a47 x7 : ffff00002b8aa5e8 x6 : 1ffff0000219ef68 x5 : 00000000f1f1f1f1 x4 : 0000000000000000 x3 : 1fffe000057154bd x2 : 0000000000000003 x1 : dfff800000000000 x0 : 0000000000000000 Call trace: isotp_tx_timer_handler+0x574/0xaa0 net/can/isotp.c:763 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x564/0xdec kernel/time/hrtimer.c:1749 hrtimer_run_softirq+0x134/0x2d0 kernel/time/hrtimer.c:1766 _stext+0x3f4/0xff8 do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] invoke_softirq kernel/softirq.c:439 [inline] __irq_exit_rcu+0x208/0x4f0 kernel/softirq.c:637 irq_exit_rcu+0x14/0x80 kernel/softirq.c:649 el0_interrupt+0x84/0x2d0 arch/arm64/kernel/entry-common.c:680 __el0_irq_handler_common+0x18/0x24 arch/arm64/kernel/entry-common.c:687 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:692 el0t_64_irq+0x1a0/0x1a4 arch/arm64/kernel/entry.S:573 irq event stamp: 4988747 hardirqs last enabled at (4988746): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (4988746): [] _raw_spin_unlock_irqrestore+0x108/0x180 kernel/locking/spinlock.c:194 hardirqs last disabled at (4988747): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:375 softirqs last enabled at (4988736): [] __ll_sc_atomic64_andnot arch/arm64/include/asm/atomic_ll_sc.h:229 [inline] softirqs last enabled at (4988736): [] arch_atomic64_andnot arch/arm64/include/asm/atomic.h:64 [inline] softirqs last enabled at (4988736): [] arch_atomic_long_andnot include/linux/atomic/atomic-long.h:299 [inline] softirqs last enabled at (4988736): [] arch_clear_bit include/asm-generic/bitops/atomic.h:25 [inline] softirqs last enabled at (4988736): [] clear_bit include/asm-generic/bitops/instrumented-atomic.h:42 [inline] softirqs last enabled at (4988736): [] clear_ti_thread_flag include/linux/thread_info.h:94 [inline] softirqs last enabled at (4988736): [] fpsimd_update_current_state+0x15c/0x1c0 arch/arm64/kernel/fpsimd.c:1276 softirqs last disabled at (4988743): [] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] softirqs last disabled at (4988743): [] invoke_softirq kernel/softirq.c:439 [inline] softirqs last disabled at (4988743): [] __irq_exit_rcu+0x208/0x4f0 kernel/softirq.c:637 ---[ end trace 0000000000000000 ]---