------------[ cut here ]------------ WARNING: CPU: 1 PID: 31658 at net/can/isotp.c:910 isotp_tx_timer_handler+0x14c/0x25c net/can/isotp.c:874 Modules linked in: CPU: 1 PID: 31658 Comm: kworker/1:1 Not tainted 6.1.0-rc3-syzkaller-00072-g8e5423e991e8 #0 Hardware name: linux,dummy-virt (DT) Workqueue: events nsim_dev_trap_report_work pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : isotp_tx_timer_handler+0x14c/0x25c net/can/isotp.c:910 lr : __run_hrtimer kernel/time/hrtimer.c:1685 [inline] lr : __hrtimer_run_queues+0x5f0/0xf10 kernel/time/hrtimer.c:1749 sp : ffff800010ab7d60 x29: ffff800010ab7d60 x28: ffff000026b80570 x27: dfff800000000000 x26: ffff00006a9edac0 x25: 1fffe0000d53db61 x24: ffff00006a9edad0 x23: ffff80000de5cd50 x22: ffff000026b907c0 x21: 1fffe00004d720f8 x20: ffff000026b80000 x19: ffff000026b80570 x18: ffff00006a9eabc0 x17: ffff80005cbe4000 x16: ffff800010ab8000 x15: 0000000000008000 x14: 1ffff00002156f5a x13: 0000000000000000 x12: ffff60000d53db09 x11: 1fffe0000d53db08 x10: ffff60000d53db08 x9 : ffff80000f3d49c0 x8 : 0000000000000000 x7 : 1fffe00002336820 x6 : 00000000f3f3f3f3 x5 : 00000000f2f2f200 x4 : 1fffe000023366d1 x3 : 0000000000000003 x2 : dfff800000000000 x1 : 0000000000000003 x0 : 0000000000000000 Call trace: isotp_tx_timer_handler+0x14c/0x25c net/can/isotp.c:874 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x5f0/0xf10 kernel/time/hrtimer.c:1749 hrtimer_run_softirq+0x134/0x2d0 kernel/time/hrtimer.c:1766 _stext+0x28c/0x107c ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79 call_on_irq_stack+0x2c/0x54 arch/arm64/kernel/entry.S:889 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84 invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0x3bc/0x4dc kernel/softirq.c:650 irq_exit_rcu+0x14/0x80 kernel/softirq.c:662 __el1_irq arch/arm64/kernel/entry-common.c:471 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:485 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:490 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:577 _get_random_bytes drivers/char/random.c:393 [inline] get_random_bytes+0x18/0x24 drivers/char/random.c:395 nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:778 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:808 [inline] nsim_dev_trap_report_work+0x5c8/0xa20 drivers/net/netdevsim/dev.c:853 process_one_work+0x780/0x184c kernel/workqueue.c:2289 worker_thread+0x3cc/0xc40 kernel/workqueue.c:2436 kthread+0x23c/0x2a0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 irq event stamp: 2632613 hardirqs last enabled at (2632612): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (2632612): [] _raw_spin_unlock_irqrestore+0x90/0xc0 kernel/locking/spinlock.c:194 hardirqs last disabled at (2632613): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:404 softirqs last enabled at (2632586): [] spin_unlock_bh include/linux/spinlock.h:395 [inline] softirqs last enabled at (2632586): [] nsim_dev_trap_report drivers/net/netdevsim/dev.c:823 [inline] softirqs last enabled at (2632586): [] nsim_dev_trap_report_work+0x694/0xa20 drivers/net/netdevsim/dev.c:853 softirqs last disabled at (2632609): [] ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79 ---[ end trace 0000000000000000 ]---