dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:02 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1871.012362][ C0] vcan0: j1939_tp_rxtimer: 0x00000000cfb1d4b8: abort rx timeout. Force session deactivation [ 1871.054705][ C0] vcan0: j1939_tp_rxtimer: 0x00000000f93ebde5: rx timeout, send abort 05:08:03 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400200, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:03 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1871.339469][ C1] vcan0: j1939_tp_rxtimer: 0x000000009773464b: rx timeout, send abort 05:08:03 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400300, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1871.567742][ C0] vcan0: j1939_tp_rxtimer: 0x00000000f93ebde5: abort rx timeout. Force session deactivation 05:08:03 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:03 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1871.847859][ C1] vcan0: j1939_tp_rxtimer: 0x000000009773464b: abort rx timeout. Force session deactivation 05:08:04 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400400, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:04 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x401f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:04 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:08:04 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:04 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x11000, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x70, 0x3, 0x3f, 0x7, 0x78, 0x0, 0x3, 0x10842, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x8001, 0x7, 0x0, 0xf, 0xfffffffffffeffff, 0x2, 0x1}, r2, 0x7, r3, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) 05:08:04 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb000200}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:05 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4d010000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:05 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x500000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:05 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x157c}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:05 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:06 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x500100, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1874.498761][ C1] vcan0: j1939_tp_rxtimer: 0x0000000086eb6ab2: rx timeout, send abort 05:08:06 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1874.546475][ C1] vcan0: j1939_tp_rxtimer: 0x000000005c055739: rx timeout, send abort [ 1874.557543][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000005c055739: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1874.572878][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000086eb6ab2: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:08:06 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x500200, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:06 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f40}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:07 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:08:07 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:08 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) 05:08:08 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x500300, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:08 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6f040000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:08 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:08 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1876.357169][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f09583bc: rx timeout, send abort [ 1876.379738][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000008b40cb0f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1876.394899][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000070c119f1: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1876.409366][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 1876.415674][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 1876.421932][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1876.428484][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1876.435173][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1876.441637][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1876.448091][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1876.454565][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1876.461078][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1876.467490][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1876.475321][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1876.481883][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1876.488364][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1876.495154][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1876.501664][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1876.508078][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1876.516371][ C1] vcan0: j1939_tp_rxtimer: 0x000000007d35dff2: rx timeout, send abort 05:08:08 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:08 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7c150000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:08 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x500400, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1876.865456][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f09583bc: abort rx timeout. Force session deactivation 05:08:08 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:08:08 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x600000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1877.026540][ C1] vcan0: j1939_tp_rxtimer: 0x000000007d35dff2: abort rx timeout. Force session deactivation 05:08:09 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x11000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:09 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x600100, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1877.598722][ C1] vcan0: j1939_tp_rxtimer: 0x00000000ca6e1870: rx timeout, send abort [ 1877.659260][ C1] vcan0: j1939_tp_rxtimer: 0x00000000109a17eb: rx timeout, send abort [ 1878.106926][ C1] vcan0: j1939_tp_rxtimer: 0x00000000ca6e1870: abort rx timeout. Force session deactivation [ 1878.167678][ C1] vcan0: j1939_tp_rxtimer: 0x00000000109a17eb: abort rx timeout. Force session deactivation 05:08:10 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r4, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r4, 0x0, {0x2, 0xf0}, 0x1f8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r5}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000240)={0x1d, r7, 0x0, {}, 0xfe}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000000)={0x9951, 0xffffffff}) sendmsg$can_j1939(r6, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) 05:08:10 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x401f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:10 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9a020000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:10 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:08:10 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x600200, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:10 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x13000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1878.936199][T20671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1879.028927][T20672] team0: Port device veth35 added 05:08:11 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x600300, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:11 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x600400, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:11 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4d01}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:11 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x14000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:11 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa00f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:12 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x700000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1880.331693][ C0] vcan0: j1939_tp_rxtimer: 0x00000000afda1b64: rx timeout, send abort [ 1880.365867][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000071d39057: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:08:12 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x700100, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:12 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:08:12 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1880.839943][ C0] vcan0: j1939_tp_rxtimer: 0x00000000afda1b64: abort rx timeout. Force session deactivation [ 1880.851847][T20672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 05:08:12 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x15000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:12 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:12 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r4, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r4}, 0x18) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000240)={0x1d, r7, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) [ 1881.048800][T20727] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1881.114671][T20728] team0: Port device veth37 added 05:08:13 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x700200, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:13 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x700300, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1881.631037][ C1] vcan0: j1939_tp_rxtimer: 0x000000001455d3e2: rx timeout, send abort 05:08:13 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:13 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7c15}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:13 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:14 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x700400, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:14 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1882.139313][ C1] vcan0: j1939_tp_rxtimer: 0x000000001455d3e2: abort rx timeout. Force session deactivation 05:08:14 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:08:14 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x800000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1882.382383][ C1] vcan0: j1939_tp_rxtimer: 0x000000000dbe7cba: rx timeout, send abort 05:08:14 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:14 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x800100, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1882.890655][ C1] vcan0: j1939_tp_rxtimer: 0x000000000dbe7cba: abort rx timeout. Force session deactivation [ 1882.930404][T20727] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 05:08:15 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket(0x22, 0x2, 0x774) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}}, 0x0) r6 = dup3(r0, r5, 0x0) getsockname$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) 05:08:15 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:15 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8804}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:15 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x800200, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:15 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:08:15 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:16 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1083a07e7ec}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:16 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9a02}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:16 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x800300, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:16 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:16 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x800400, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:16 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x401f0000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1885.368808][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e3897090: rx timeout, send abort [ 1885.377381][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000fe34dd9a: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1885.884339][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e3897090: abort rx timeout. Force session deactivation 05:08:18 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x900000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:18 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa00f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:18 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:18 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4d010000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:18 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:08:18 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/13, @ANYRES16=r4, @ANYBLOB="0100010000001c0000000f0000000500300000030000060028000000000008003900d709000005002f000000000005002f000000000008000b000000000008003c000002000005002f000000000005002e000100000008000300", @ANYRES32=r3], 0x64}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r7, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040029bd7000fedbdf250f00000008000600", @ANYRES32=r7, @ANYBLOB="05003800010000000800390010000000f86886196cefa2d9d2614d849788917fa8848c8053b255ee1c15f8401f2a3be6700857cdc83895596d8920c3ecbf1521015000f3490b3706cf44055b3f5b06c60cb0a78a15db4fd4a28a04e1b85f7b09c5fc99d6bf82a7dffe69e022b40bb25f992f69e7e44ba6d7794f6192fb67664252"], 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x81) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xff}, 0x18, &(0x7f00000000c0)}, 0x40000) bind(r6, &(0x7f0000000340)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0x80) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000240)={0x1d, r9, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r8, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) 05:08:19 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x900100, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:19 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x900200, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:19 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:19 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000b}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:19 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7c150000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:19 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:08:19 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x900300, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1888.153891][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a5e21946: rx timeout, send abort 05:08:20 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x900400, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:20 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:20 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9a020000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:20 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1888.666987][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a5e21946: abort rx timeout. Force session deactivation 05:08:20 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa00000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:20 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000480)={0xfa, 0x6, 0x3f, 0x6, 0x3, 0x1f, 0x1b, 0x3f, 0x4, 0x1f, 0x7, 0x6, 0x8, 0xea}, 0xe) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000280)=""/165, &(0x7f0000000000)=0xa5) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x2000000001000, {0x2}}, 0x18, &(0x7f0000000440)={&(0x7f0000000440)}, 0x1, 0x0, 0x0, 0x40}, 0x40084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0101000000000000000001000000440001000c00070000000000960000000c0006006c626c637200000008000b000a69700008000800000000000800090000000000080001000a000000080005"], 0x58}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xb8, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0xb8}, 0x1, 0x0, 0x0, 0x50c6ee5b63f0087a}, 0x801) 05:08:20 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1888.907405][T20896] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1888.980724][T20896] IPVS: persistence engine module ip_vs_pe_ [ 1888.980724][T20896] ip not found 05:08:21 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa00100, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:21 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa00200, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:21 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa00f0000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:21 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, 0x0, 0x0) 05:08:21 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:21 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa00300, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:21 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:22 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:22 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa00400, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:22 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfeffffff}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1891.156414][T20900] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1891.228731][T20900] IPVS: persistence engine module ip_vs_pe_ [ 1891.228731][T20900] ip not found 05:08:23 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000000)=r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) 05:08:23 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:23 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:23 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb00000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:23 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffff7f}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:23 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, 0x0, 0x0) [ 1892.084552][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e37faa5b: rx timeout, send abort [ 1892.093526][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000ff4b7eb1: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1892.109003][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000dbb2ac22: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:08:24 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb00100, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:24 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb00200, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1892.593049][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e37faa5b: abort rx timeout. Force session deactivation 05:08:24 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:24 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:24 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:24 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, 0x0, 0x0) [ 1893.305540][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a6afb398: rx timeout, send abort [ 1893.316229][ C0] vcan0: j1939_tp_rxtimer: 0x0000000073863c01: rx timeout, send abort [ 1893.813854][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a6afb398: abort rx timeout. Force session deactivation [ 1893.825255][ C0] vcan0: j1939_tp_rxtimer: 0x0000000073863c01: abort rx timeout. Force session deactivation 05:08:26 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:26 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb00300, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:26 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x13cd9a4c360}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:26 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:26 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) [ 1895.138680][ C1] vcan0: j1939_tp_rxtimer: 0x00000000002a8e9f: rx timeout, send abort 05:08:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:27 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:27 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb00400, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1895.655958][ C1] vcan0: j1939_tp_rxtimer: 0x00000000002a8e9f: abort rx timeout. Force session deactivation 05:08:27 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xc00000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:27 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:27 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:28 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xc00100, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:28 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:28 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xc00200, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:28 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:28 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 05:08:28 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:29 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:29 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xc00300, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:29 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb00020000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:29 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xc00400, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:29 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:29 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:29 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:30 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xd00000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:30 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:30 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xd00100, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:31 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 05:08:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb000200}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:31 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:31 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:31 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xd00200, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:31 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xd00300, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:31 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:32 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:32 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:32 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xe00000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:32 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xe00100, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:33 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, 0x0}, 0x0) 05:08:33 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:33 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:33 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xe00200, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:33 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:33 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:33 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xe00300, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:33 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:34 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf00000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:34 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x600000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:34 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, 0x0}, 0x0) 05:08:34 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:34 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:34 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf00100, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:35 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:35 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf00200, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:35 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:35 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:35 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, 0x0}, 0x0) 05:08:35 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f00000001c0)) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000340)="08ce81c0c2bc4f28ae4fc30e455ab43be8f2b841fc9d26858aa56dbac4cf8242a5d20d0d75b3cf6252b3f8989084e9c4a4eb4b142e2b21523ad0baddc02af2967783b87ada1a217a9419150a60f7937c21f35ea17cf9129b000eddac33f6fc163bff4f9b6d7bc560e7be6f95c034bb8ece1ab34e13177715d430aab6af7cd8c4dbefbe74234e356ed804befd1bc23f754d935cf238e556d8a8fbc21083075cc6a458c28e3a5c771850a866d6c0a765333edf9539a3b0b2bd33d2f1", 0xbb, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r8, 0xc00464be, &(0x7f0000000080)={r9}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f0000000280)={0x7fff, 0xfc8, 0x0, 'queue0\x00', 0x7}) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) 05:08:36 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf00300, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:36 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:36 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:36 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:36 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x401f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:36 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x2000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:37 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x3000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1905.326491][ C1] vcan0: j1939_tp_rxtimer: 0x000000007ed10dc7: rx timeout, send abort [ 1905.346529][ C1] vcan0: j1939_tp_rxtimer: 0x000000000fefd85f: rx timeout, send abort [ 1905.371144][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000000fefd85f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1905.385692][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000007ed10dc7: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:08:37 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:37 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x4000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:37 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:38 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={0x0}}, 0x0) 05:08:38 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x5000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:38 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4d01000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:38 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:38 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:38 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2}}, 0x18, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x8080}, 0x0) 05:08:39 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1907.259722][ C1] vcan0: j1939_tp_rxtimer: 0x000000007bb1fa70: rx timeout, send abort [ 1907.282666][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000005c0c5031: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1907.297741][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000cf460597: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:08:39 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:39 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x6000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1907.765646][ C1] vcan0: j1939_tp_rxtimer: 0x000000006a8299ba: rx timeout, send abort [ 1907.790382][ C1] vcan0: j1939_tp_rxtimer: 0x000000007bb1fa70: abort rx timeout. Force session deactivation 05:08:39 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x7000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:39 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6f04000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:39 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x401f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1908.284914][ C1] vcan0: j1939_tp_rxtimer: 0x000000006a8299ba: abort rx timeout. Force session deactivation 05:08:40 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={0x0}}, 0x0) 05:08:40 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:40 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x8000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:40 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4d010000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:40 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7c15000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:41 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) 05:08:41 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x8040000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:41 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x8800000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:41 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:41 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:41 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb00020000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:41 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x9000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:42 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={0x0}}, 0x0) 05:08:42 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:42 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7c150000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1910.621659][ C0] vcan0: j1939_tp_rxtimer: 0x000000002383bf32: rx timeout, send abort [ 1910.633903][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ee015338: rx timeout, send abort 05:08:42 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:42 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1911.132554][ C0] vcan0: j1939_tp_rxtimer: 0x000000002383bf32: abort rx timeout. Force session deactivation [ 1911.144887][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ee015338: abort rx timeout. Force session deactivation 05:08:43 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9a02000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:43 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xc000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:43 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat(r5, &(0x7f0000000000)='./file0\x00', 0x185042, 0x88) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r7, 0x89f6, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000400)={'sit0\x00', r3, 0x4, 0x3, 0x5, 0x7ff, 0xa, @ipv4={[], [], @multicast1}, @mcast1, 0x8000, 0x80, 0x9, 0x1}}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000480)={{{@in=@remote, @in=@broadcast, 0x4e23, 0x9, 0x4e21, 0xfffb, 0x2, 0x80, 0x20, 0x29, r8, r10}, {0x0, 0x1000, 0xa121, 0x3f, 0x26a9, 0xfffffffffffffb9f, 0x9, 0xff}, {0x83, 0x0, 0x11, 0x7a53e26}, 0x9, 0x6e6bba, 0x0, 0x0, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x44}, 0x4d2, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3506, 0x3, 0x2, 0x4, 0x8000, 0x3, 0x400}}, 0xe8) 05:08:43 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x88040000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:43 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa00f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:43 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xd000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:43 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:43 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, 0x0}, 0x0) 05:08:44 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xe000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:44 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:44 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xece7073a08010000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1912.551238][ C0] vcan0: j1939_tp_rxtimer: 0x000000003d8a5583: rx timeout, send abort 05:08:44 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9a020000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1912.588019][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000bccda24: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:08:44 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x10000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:44 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1913.062461][ C0] vcan0: j1939_tp_rxtimer: 0x000000003d8a5583: abort rx timeout. Force session deactivation 05:08:46 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r5, r4, 0x2}, 0x10) r6 = openat$cgroup_ro(r4, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000080)=0x63, 0x2) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) 05:08:46 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:46 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x11000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:46 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa00f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:46 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:46 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x11000, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x70, 0x3, 0x3f, 0x7, 0x78, 0x0, 0x3, 0x10842, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x8001, 0x7, 0x0, 0xf, 0xfffffffffffeffff, 0x2, 0x1}, r2, 0x7, r3, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) [ 1914.253858][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1914.510494][ C1] vcan0: j1939_tp_rxtimer: 0x00000000575c5d9f: rx timeout, send abort [ 1914.519207][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000534e3eef: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1914.534324][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000c079305b: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1914.540584][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1914.555172][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:08:46 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x12000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:46 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:46 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:46 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x13000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1914.971097][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b5d23037: rx timeout, send abort [ 1915.018734][ C1] vcan0: j1939_tp_rxtimer: 0x00000000575c5d9f: abort rx timeout. Force session deactivation 05:08:47 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:47 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1915.481365][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b5d23037: abort rx timeout. Force session deactivation [ 1915.715493][ C1] vcan0: j1939_tp_rxtimer: 0x000000002adb2c29: rx timeout, send abort [ 1915.724135][ C1] vcan0: j1939_tp_rxtimer: 0x0000000031a97471: rx timeout, send abort [ 1915.727556][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c48151fb: rx timeout, send abort [ 1915.765322][ C0] vcan0: j1939_tp_rxtimer: 0x000000005846039e: rx timeout, send abort [ 1916.223898][ C1] vcan0: j1939_tp_rxtimer: 0x000000002adb2c29: abort rx timeout. Force session deactivation [ 1916.237131][ C1] vcan0: j1939_tp_rxtimer: 0x0000000031a97471: abort rx timeout. Force session deactivation [ 1916.253513][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c48151fb: abort rx timeout. Force session deactivation [ 1916.277809][ C0] vcan0: j1939_tp_rxtimer: 0x000000005846039e: abort rx timeout. Force session deactivation 05:08:49 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) timerfd_create(0x2, 0x80000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) 05:08:49 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x14000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:49 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:49 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:49 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:49 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x4}}, 0x18, &(0x7f00000000c0)}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) r3 = dup(0xffffffffffffffff) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000280)={0x4, 0x1, 'client1\x00', 0x1, "03f0042a178edd26", "05f7b62963ab4efb6d61ccc7f93942ab253558c6adea4500", 0x2, 0x1}) r5 = socket$inet(0x2, 0xa, 0x85) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r6, 0xfffffffe}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r6, 0xbea, 0x8, 0x5, 0x8, 0x4}, &(0x7f0000000080)=0x14) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000140)={0x1d, r8, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) [ 1917.521605][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b6d43f8c: rx timeout, send abort [ 1917.540802][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000004f657da0: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:08:49 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x15000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:49 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:49 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:50 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x16000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1918.039312][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b6d43f8c: abort rx timeout. Force session deactivation 05:08:50 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:50 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x17000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1918.635331][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c8337930: rx timeout, send abort [ 1918.644165][ C0] vcan0: j1939_tp_rxtimer: 0x000000006c3a8a85: rx timeout, send abort 05:08:50 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x18000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:50 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) r2 = socket(0x1e, 0x803, 0x7ff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0x5, &(0x7f00000001c0)=0x2) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c410100000b0000000000a8e7f3bfa4a00fbdb7fe5563cba1e89f57c8b660b2bbb536ca2da69afc63ec1bbf74f3e778ca1f8ddd680a4a69f56b626e379ad26561fd2e1080467a838ab3d1f51cfd5436de1d871b71e4100a8a90b8517638c721395cbe10e60f5c13ca4c47946a5805e963f8c43bd432"], 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000000)={0x13, 0x1b, 0xa, 0x2, 0x3, 0x8, 0x3, 0x122, 0xffffffffffffffff}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000240)={0x1d, r7, 0x0, {}, 0xfe}, 0x18) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') sendmsg$can_j1939(r6, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) [ 1918.768487][ C1] vcan0: j1939_tp_rxtimer: 0x000000004259695d: rx timeout, send abort 05:08:50 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:50 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:51 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:51 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:51 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1919.147856][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c8337930: abort rx timeout. Force session deactivation [ 1919.182734][ C0] vcan0: j1939_tp_rxtimer: 0x000000006c3a8a85: abort rx timeout. Force session deactivation 05:08:51 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x19000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:51 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1919.277888][ C1] vcan0: j1939_tp_rxtimer: 0x000000004259695d: abort rx timeout. Force session deactivation [ 1919.530362][ C0] vcan0: j1939_tp_rxtimer: 0x0000000001908d52: rx timeout, send abort [ 1919.545408][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000026364a77: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1919.560383][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000005313cb93: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:08:51 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:51 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:51 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10dff8bcb0e}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:51 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1a000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1920.038580][ C0] vcan0: j1939_tp_rxtimer: 0x0000000001908d52: abort rx timeout. Force session deactivation [ 1920.165822][ C0] vcan0: j1939_tp_rxtimer: 0x00000000bd6c72ce: rx timeout, send abort [ 1920.181618][ C0] vcan0: j1939_tp_rxtimer: 0x000000000f4cb8bf: rx timeout, send abort [ 1920.674123][ C0] vcan0: j1939_tp_rxtimer: 0x00000000bd6c72ce: abort rx timeout. Force session deactivation [ 1920.697114][ C0] vcan0: j1939_tp_rxtimer: 0x000000000f4cb8bf: abort rx timeout. Force session deactivation 05:08:53 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0x8001, 0x20, 0xce, 0xfff, 0x3, "b56b79a1be199a7b4caf4e2ae7b3ca0ffd06fc"}) 05:08:53 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:53 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1b000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:53 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:53 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:53 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1922.010614][ C1] vcan0: j1939_tp_rxtimer: 0x000000005357abe3: rx timeout, send abort 05:08:54 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1c000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1922.518917][ C1] vcan0: j1939_tp_rxtimer: 0x000000005357abe3: abort rx timeout. Force session deactivation 05:08:54 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1d000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:54 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x401f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:54 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:54 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:54 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1923.295735][ C0] vcan0: j1939_tp_rxtimer: 0x00000000de99687b: rx timeout, send abort [ 1923.313025][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000f295bb7f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1923.804050][ C0] vcan0: j1939_tp_rxtimer: 0x00000000de99687b: abort rx timeout. Force session deactivation 05:08:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa}]}, 0xc4}, 0x1, 0x3}, 0x0) 05:08:56 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1e000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:56 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:56 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4d01000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:56 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:56 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0x8001, 0x20, 0xce, 0xfff, 0x3, "b56b79a1be199a7b4caf4e2ae7b3ca0ffd06fc"}) [ 1925.102238][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a543eeb1: rx timeout, send abort 05:08:57 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1f000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:57 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x20000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1925.629221][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a543eeb1: abort rx timeout. Force session deactivation 05:08:57 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x60c3a4d93c010000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:57 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:57 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:58 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x21000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:58 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:58 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYBLOB="00ae8aac95e91b000000000000000000"], 0x1c}}, 0x10004081) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008085}, 0x40000d5) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) 05:08:58 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1926.470640][ C0] vcan0: j1939_tp_rxtimer: 0x00000000dc093d28: rx timeout, send abort [ 1926.511770][ C0] vcan0: j1939_tp_rxtimer: 0x000000000d84f5ba: rx timeout, send abort [ 1926.552610][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000d84f5ba: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1926.616855][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000dc093d28: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:08:58 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:58 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x22000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1927.570967][ C0] vcan0: j1939_tp_rxtimer: 0x0000000083ae7d7d: rx timeout, send abort [ 1927.605098][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000006128dbc3: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:08:59 executing program 2 (fault-call:7 fault-nth:0): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:08:59 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:08:59 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7c15000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:08:59 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x23000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:08:59 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1927.886684][T21742] FAULT_INJECTION: forcing a failure. [ 1927.886684][T21742] name failslab, interval 1, probability 0, space 0, times 0 [ 1927.926377][T21742] CPU: 0 PID: 21742 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 1927.939984][T21742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1927.952316][T21742] Call Trace: [ 1927.955720][T21742] dump_stack+0x18f/0x20d [ 1927.960072][T21742] should_fail.cold+0x5/0x14 [ 1927.964679][T21742] should_failslab+0x5/0xf [ 1927.969130][T21742] kmem_cache_alloc_node+0x257/0x3c0 [ 1927.974434][T21742] __alloc_skb+0x71/0x550 [ 1927.978776][T21742] alloc_skb_with_frags+0x92/0x570 [ 1927.983892][T21742] ? aa_label_sk_perm+0xf2/0x560 [ 1927.988840][T21742] sock_alloc_send_pskb+0x72a/0x880 [ 1927.994064][T21742] ? sock_wmalloc+0x120/0x120 [ 1927.998840][T21742] ? mark_held_locks+0x9f/0xe0 [ 1928.003608][T21742] ? do_raw_spin_lock+0x120/0x2b0 [ 1928.008645][T21742] ? __local_bh_enable_ip+0x159/0x250 [ 1928.014022][T21742] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1928.020101][T21742] ? j1939_sk_sendmsg+0xe81/0x1370 [ 1928.025214][T21742] ? trace_hardirqs_on+0x5f/0x220 [ 1928.030785][T21742] j1939_sk_sendmsg+0x6bb/0x1370 [ 1928.035740][T21742] ? rw_copy_check_uvector+0x298/0x390 [ 1928.041212][T21742] ? j1939_sk_release+0x790/0x790 [ 1928.046425][T21742] ? j1939_sk_release+0x790/0x790 [ 1928.056591][T21742] sock_sendmsg+0xcf/0x120 [ 1928.061025][T21742] ____sys_sendmsg+0x6e8/0x810 [ 1928.065805][T21742] ? kernel_sendmsg+0x50/0x50 [ 1928.070488][T21742] ? do_recvmmsg+0x6d0/0x6d0 [ 1928.075098][T21742] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1928.081262][T21742] ? _parse_integer+0x132/0x180 [ 1928.086130][T21742] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1928.092128][T21742] ___sys_sendmsg+0xf3/0x170 [ 1928.096738][T21742] ? sendmsg_copy_msghdr+0x160/0x160 [ 1928.102207][T21742] ? __fget_files+0x272/0x400 [ 1928.106904][T21742] ? lock_downgrade+0x820/0x820 [ 1928.118984][T21742] ? find_held_lock+0x2d/0x110 [ 1928.123765][T21742] ? ksys_write+0x212/0x250 [ 1928.128469][T21742] ? __fget_files+0x294/0x400 [ 1928.133207][T21742] ? __fget_light+0xea/0x280 [ 1928.138436][T21742] __sys_sendmsg+0xe5/0x1b0 [ 1928.142951][T21742] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1928.148008][T21742] ? do_syscall_64+0x1c/0xe0 [ 1928.152620][T21742] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1928.158615][T21742] do_syscall_64+0x60/0xe0 [ 1928.163044][T21742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1928.168933][T21742] RIP: 0033:0x45cba9 [ 1928.172920][T21742] Code: Bad RIP value. [ 1928.177036][T21742] RSP: 002b:00007f8a80f82c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1928.185545][T21742] RAX: ffffffffffffffda RBX: 00000000005034c0 RCX: 000000000045cba9 [ 1928.193871][T21742] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 1928.202353][T21742] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1928.211121][T21742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1928.219353][T21742] R13: 0000000000000a5f R14: 00000000004cd3be R15: 00007f8a80f836d4 [ 1928.233489][ C0] vcan0: j1939_tp_rxtimer: 0x0000000083ae7d7d: abort rx timeout. Force session deactivation [ 1928.244310][ C0] vcan0: j1939_tp_rxtimer: 0x0000000064e7953c: rx timeout, send abort [ 1928.297973][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000064e7953c: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1928.312883][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000007d6239b0: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:09:00 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x24000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:00 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:00 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcd, 0xcd, 0x3, [@enum, @var={0x3, 0x0, 0x0, 0xe, 0x4}, @fwd, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x7, 0x0, 0xf, 0x1, [{0x0, 0x6}, {}, {}, {}, {0x0, 0x3}, {}, {}], "9b"}]}, {0x0, [0x0]}}, 0x0, 0xeb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) 05:09:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:01 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x25000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:01 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1929.252810][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found 05:09:01 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1929.422477][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000fa04be41: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 1929.514600][ C1] vcan0: j1939_tp_rxtimer: 0x000000002d830d8e: rx timeout, send abort [ 1929.533159][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000004d60e03f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1929.550690][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000f874377b: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1929.565134][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 1929.571385][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 1929.577642][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.584061][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.590665][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.597155][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.603612][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.610116][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.616631][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.623132][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.629651][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.636306][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.642933][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.649423][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.656453][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.662866][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.669374][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.675814][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.682318][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.688828][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.695321][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.701880][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.708535][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.716135][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.722593][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.729433][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.735942][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.742623][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.749853][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.756419][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.763042][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.769604][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.776118][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.782531][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.789072][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.795492][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.802967][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.809437][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.815918][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.824053][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.830647][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.837275][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.845327][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.852302][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.858923][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.865433][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.872548][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.879023][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.885485][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.896134][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.902839][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.909312][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.917480][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.923892][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.930400][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.936866][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.943311][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.949783][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.956288][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.962700][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.969219][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.975644][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.982242][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1929.988722][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1929.995196][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.001670][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.008268][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.014798][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.021306][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.027778][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.034234][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.040711][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.047193][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.053612][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.060267][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.066906][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.073636][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.082373][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.089979][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.096538][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.103001][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.109668][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.116347][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.125370][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.131888][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.138456][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.144933][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.151423][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.157940][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.164354][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.176694][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.183110][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.189618][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.196087][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.202545][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.209016][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.215504][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.221994][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.228688][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.235102][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.241714][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.248901][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.255376][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.263722][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.270249][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.276732][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.283197][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.289713][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.296234][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.302738][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.309250][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found 05:09:02 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1930.315665][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.322469][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.329020][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.337535][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.344052][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.351348][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.357930][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.364397][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found 05:09:02 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9a02000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1930.370893][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.377395][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.383807][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.390307][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.396766][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.403224][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.410045][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.416547][ C1] vcan0: j1939_tp_rxtimer: 0x000000002d830d8e: abort rx timeout. Force session deactivation [ 1930.426738][ C1] vcan0: j1939_tp_rxtimer: 0x0000000024e64eff: rx timeout, send abort [ 1930.491390][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.497987][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.504444][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.511030][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.517537][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.523959][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.530510][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.536989][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.543446][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.549918][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.556508][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.563037][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.570486][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.576969][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.583447][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.589923][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.596525][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.602944][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.609447][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.615919][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.622378][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.628856][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.635760][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.642259][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.648775][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.655221][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.661920][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.668474][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.674937][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.681513][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.688017][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.694436][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.700941][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.707595][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.714277][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.720765][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.727362][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.733781][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.740469][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.746929][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.753383][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.760891][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.767397][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.773836][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.780363][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.786829][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.794530][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.801269][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.807931][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.815653][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.822165][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.828713][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.835537][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found 05:09:02 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) [ 1930.842090][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.848605][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.855281][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.861796][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.869733][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.876255][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.882672][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.889184][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.895598][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.902111][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.908579][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.915077][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.921539][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.928142][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.934555][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.941085][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.947564][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.954033][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.960611][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.967136][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.975723][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.982236][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1930.988699][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1930.995463][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.001935][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.008488][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.015095][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.021624][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.028279][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.034840][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.041391][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.047926][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.054343][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.060869][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.067355][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.074430][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.081097][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.087627][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.094057][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.100569][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.107034][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.113487][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.119945][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.126435][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.132850][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.139341][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.145981][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.152443][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.158909][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.165361][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.171871][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.178468][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.185058][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.191555][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.198020][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.204475][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.211029][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.217637][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.224050][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.230646][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.237119][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.243680][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.250363][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.257023][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.263443][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.270259][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.276726][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.283582][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.290406][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.296917][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.303415][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.311308][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.317767][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.324222][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.330682][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.337544][ C1] vcan0: j1939_tp_rxtimer: 0x0000000024e64eff: abort rx timeout. Force session deactivation 05:09:03 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:03 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:03 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa00f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1931.412027][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.420514][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.427046][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.433469][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.439978][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.447225][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.453686][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.469368][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.476080][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.482590][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.497456][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.503888][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.510637][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.517147][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.524358][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.530822][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.537462][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.544847][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.551564][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.558061][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.564573][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.571066][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.577840][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.584265][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.590785][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.597259][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.603716][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.610442][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.617034][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.623546][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.630828][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.637459][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.644061][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.650669][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.657178][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.663597][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.670176][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.676634][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.683086][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.689543][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.696023][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.702436][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.708916][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.715421][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.721899][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.728607][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.735045][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.741488][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.748056][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.754465][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.760951][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.774795][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.781824][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.788445][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.794899][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.801346][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.807998][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.814413][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.821158][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.827612][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.834067][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.840784][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.847412][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.853999][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.860489][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.866939][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.873401][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.879847][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.886413][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.892823][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.899440][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.907450][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.914086][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.920647][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.927127][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.933543][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.940028][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.949044][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.955594][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.962050][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.968707][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.975131][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.981874][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1931.988318][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1931.995232][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.001677][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.008149][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.014584][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.021597][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.028689][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.035800][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.043092][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.049880][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.056464][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.063088][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.069535][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.076095][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.082505][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.088982][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.095393][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.101881][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.108324][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.114773][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.121320][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.127813][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.134221][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.140721][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.147180][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.153717][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.160176][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.166650][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.173061][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.179556][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.186015][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.192461][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.198929][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.205377][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.212006][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.218500][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.224912][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.231421][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.237880][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.244333][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.250801][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.257303][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.263724][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.270312][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.276856][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.328852][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.335481][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.342021][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.348476][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.355384][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.362575][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.369095][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.375522][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.383676][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.390571][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.397162][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.403574][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.410075][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.417841][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.424286][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.430746][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.437354][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.443764][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.450263][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.456720][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.463167][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.469831][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.476354][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.482942][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.489538][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.496011][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.502479][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.508952][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1932.515488][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.521973][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:04 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f0000000000)={0x2}) [ 1932.528661][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1932.535100][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:04 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:04 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:05 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x26000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:05 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:05 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:05 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:05 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x27000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1933.893384][ C0] vcan0: j1939_tp_rxtimer: 0x0000000062ca6ced: rx timeout, send abort [ 1933.901634][ C0] vcan0: j1939_tp_rxtimer: 0x000000000dbb0fcd: rx timeout, send abort 05:09:05 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0xa}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:05 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1933.950616][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000dbb0fcd: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1933.965244][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000062ca6ced: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:09:06 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x28000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1934.190857][ C0] vcan0: j1939_tp_rxtimer: 0x0000000096629a54: rx timeout, send abort 05:09:06 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1934.242009][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000001ca290fb: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1934.260859][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000079f3cd2e: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1934.704206][ C0] vcan0: j1939_tp_rxtimer: 0x0000000096629a54: abort rx timeout. Force session deactivation 05:09:07 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:07 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:07 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x29000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:07 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:07 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) connect$nfc_raw(r3, &(0x7f0000000080)={0x27, 0x1, 0x2, 0x4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000280), 0x18, &(0x7f00000000c0)={&(0x7f0000000280)}}, 0x0) [ 1935.596366][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found 05:09:07 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) [ 1935.852929][ C0] vcan0: j1939_tp_rxtimer: 0x000000001b01e9cb: rx timeout, send abort [ 1935.861496][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000139e373b: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1935.877640][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000f568b047: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1935.884238][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 1935.898842][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1935.905637][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1935.912203][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1935.918712][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1935.925644][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1935.932286][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1935.934891][T21886] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1935.938815][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1935.952546][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1935.959084][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1935.965597][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1935.972151][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1935.978745][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1935.985208][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1935.991710][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1935.998215][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.004672][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.011195][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.017714][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.024268][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.030775][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.037272][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.043732][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.050485][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.057011][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.063497][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.070001][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.076515][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.083439][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.090076][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.096594][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.103069][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.109596][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.116198][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.122659][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.129204][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.135731][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.142287][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.148803][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.155603][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.162060][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.168659][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.176376][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.182837][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.189350][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.195844][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.202405][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.208911][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.215426][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.221897][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.221934][ C0] vcan0: j1939_tp_rxtimer: 0x00000000193c9af1: rx timeout, send abort [ 1936.228384][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.242984][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.249485][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.255991][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.262458][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.270733][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.277374][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.283851][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.290644][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.297155][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.304006][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.310738][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.318639][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.325189][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.357588][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.364139][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.367202][ C0] vcan0: j1939_tp_rxtimer: 0x000000001b01e9cb: abort rx timeout. Force session deactivation [ 1936.370658][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.387313][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.396342][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.402909][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.409420][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.416024][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.422491][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.429171][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.435685][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.443370][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.450196][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.457759][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.464763][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.471469][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.478010][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.484669][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.491222][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.497769][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.504499][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.511048][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.517571][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.524465][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.531081][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.537586][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.548887][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.555512][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.561985][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.575129][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.584166][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.590688][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.597476][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.603938][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.610657][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.617277][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.623740][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.630274][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.636804][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.643707][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.650246][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:08 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb00020000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1936.656910][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.663378][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.669892][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.676410][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.682915][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.689488][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.699641][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.706337][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.712841][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.719484][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.726021][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.732584][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.739208][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.746174][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.746771][ C0] vcan0: j1939_tp_rxtimer: 0x00000000193c9af1: abort rx timeout. Force session deactivation [ 1936.752731][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.769402][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.775934][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.782606][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.789348][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.796322][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.802820][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.809449][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.816014][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:08 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:08 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14d}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1936.874911][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.881743][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.888302][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.894796][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.901336][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.907962][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.914453][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.921132][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.927666][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.934131][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.940644][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.947177][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.953651][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.960172][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.966728][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.973201][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.979696][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.986197][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.992663][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1936.999155][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.005902][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.012365][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.019031][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.025520][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.031999][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.038579][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.045045][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.051536][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.058193][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.064654][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.071438][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.078037][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.084504][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.091001][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.097495][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.104417][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.110956][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.117458][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.123926][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.130421][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.136921][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.143492][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.149987][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.156493][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.162969][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.169464][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.175971][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.182436][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.188950][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.195460][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.201923][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.208528][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.215025][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.221801][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.228327][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.234794][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.241576][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.249062][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.255554][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.262709][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.269397][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.275887][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.282346][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.289012][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.313904][T21886] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1937.365043][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.371585][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.378105][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.384642][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.391163][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.397663][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.404095][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.411048][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.417649][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.424087][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.430734][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.437266][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.443738][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.450276][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.457714][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.464153][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.470811][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.477329][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.485752][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.492224][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.498728][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.505187][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.511696][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.518192][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.524649][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.531149][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.537746][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.544193][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.550701][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.557208][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.563692][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.570407][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.576911][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.583393][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.590001][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.596509][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.602969][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.610295][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.616815][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.623286][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.629805][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.636326][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.642897][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.650363][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.656880][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:09 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1937.663348][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.669860][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.676374][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.682850][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.689358][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.696995][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.703604][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.710108][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.716609][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.723169][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.730016][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.736644][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.743126][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.749641][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.756151][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.762636][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.769152][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.775956][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1937.782505][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:09 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:10 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x2a000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:10 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:10 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x2b000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:10 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:10 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) setsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000000), 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000100)={0x1, @raw_data="3ea4d334941a35f57abcb3a7d5ef28a71b42c0cf132b6d57eac154969a4c1387a7c2b61cb6bc6e04fde1aa1e0da7545e14f060f984bddf908d62c336ff0b106d6d8d4145024d862b402b97de9b419e063efa7185517db06b6c1fd1abfa4a01c4c060d492b2491ce1ec9bb7d22ddcb02c7dd35c3d2d5cac06a8447071e653d40380733f9a829adc687dd85ac013abe3388e6eb0a11032ae76eb632fd39c12d224b93f72d19421ebbe5c8a5e5ce1cf41e830bdbe2f5c0e30fe4f81e37f1a3081ee0cadf661e4167901"}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PPPIOCSCOMPRESS(r7, 0x4010744d) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x2}, 0x18, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x40c0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000000)) 05:09:10 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:10 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x8}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:10 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x2c000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1939.070318][T21943] vcan0: tx drop: invalid da for name 0x0000000000000008 05:09:11 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:11 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xecb8bff0d010000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:11 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x2d000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:11 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:11 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:12 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x2e000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:12 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1940.128977][ C1] vcan0: j1939_tp_rxtimer: 0x000000004955cf92: rx timeout, send abort [ 1940.198693][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000e480fd9f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1940.213427][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000bd4fcdd3: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1940.237622][T21943] vcan0: tx drop: invalid da for name 0x0000000000000008 05:09:12 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1940.647960][ C1] vcan0: j1939_tp_rxtimer: 0x000000004955cf92: abort rx timeout. Force session deactivation 05:09:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0xc00, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) 05:09:13 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x2f000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:13 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:13 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:13 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:13 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x11}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:14 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x30000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:14 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:14 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:14 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:14 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x31000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1943.245431][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e7ccd8ae: rx timeout, send abort [ 1943.271108][ C1] vcan0: j1939_tp_rxtimer: 0x0000000015e89dcd: rx timeout, send abort 05:09:15 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x32000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1943.302662][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000015e89dcd: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1943.317355][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000e7ccd8ae: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:09:16 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}}, 0x0) recvfrom(r2, &(0x7f0000000000)=""/56, 0x38, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000100)=0x400) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) 05:09:16 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xee}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:16 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x33000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:16 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:16 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:16 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1944.953647][T22054] vcan0: tx drop: invalid da for name 0x00000000000000ee [ 1945.075561][ C0] vcan0: j1939_tp_rxtimer: 0x0000000010080686: rx timeout, send abort 05:09:17 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x34000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1945.341794][ C0] vcan0: j1939_tp_rxtimer: 0x00000000274e2f58: rx timeout, send abort [ 1945.361494][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000387a7d9: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:09:17 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:17 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x35000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:17 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:17 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1945.866691][ C0] vcan0: j1939_tp_rxtimer: 0x00000000274e2f58: abort rx timeout. Force session deactivation [ 1946.081997][ C0] vcan0: j1939_tp_rxtimer: 0x00000000f2afb652: rx timeout, send abort 05:09:18 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1946.197189][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000fa48c860: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1946.211666][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1946.211935][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000998ba810: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1946.218160][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1946.241049][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1946.247577][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1946.254009][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1946.260537][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1946.267016][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1946.273478][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1946.280205][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1946.286998][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1946.293475][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1946.300499][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1946.307077][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1946.313619][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1946.323424][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1946.330108][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1946.336571][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1946.343111][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1946.349579][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1946.435699][ C1] vcan0: j1939_tp_rxtimer: 0x000000004ab6552c: rx timeout, send abort [ 1946.468415][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000a907f1de: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1946.489524][T22054] vcan0: tx drop: invalid da for name 0x00000000000000ee [ 1946.590225][ C0] vcan0: j1939_tp_rxtimer: 0x00000000f2afb652: abort rx timeout. Force session deactivation [ 1946.948493][ C1] vcan0: j1939_tp_rxtimer: 0x000000004ab6552c: abort rx timeout. Force session deactivation [ 1947.750895][ C1] vcan0: j1939_tp_rxtimer: 0x0000000099ade876: rx timeout, send abort 05:09:19 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0x4, {0x2}}, 0xfffffed9) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x3) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect(r2, &(0x7f0000000100)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) 05:09:19 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:19 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x36000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:19 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:19 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:19 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x1100}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) [ 1948.046600][T22114] vcan0: tx drop: invalid da for name 0x0000000000001100 [ 1948.168520][ C1] vcan0: j1939_tp_rxtimer: 0x000000003c2f76fb: rx timeout, send abort [ 1948.260089][ C1] vcan0: j1939_tp_rxtimer: 0x0000000099ade876: abort rx timeout. Force session deactivation 05:09:20 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x37000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:20 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x38000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1948.684165][ C1] vcan0: j1939_tp_rxtimer: 0x000000003c2f76fb: abort rx timeout. Force session deactivation 05:09:20 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:20 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:20 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:20 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x39000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1949.107925][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a629f37e: rx timeout, send abort [ 1949.156456][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000032c89d0f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1949.171051][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000ea8fd00c: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1949.231049][T22114] vcan0: tx drop: invalid da for name 0x0000000000001100 [ 1949.359443][ C0] vcan0: j1939_tp_rxtimer: 0x000000001012d80b: rx timeout, send abort [ 1949.616695][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a629f37e: abort rx timeout. Force session deactivation [ 1949.869925][ C0] vcan0: j1939_tp_rxtimer: 0x000000001012d80b: abort rx timeout. Force session deactivation 05:09:22 executing program 4: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:22 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x401f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:22 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x3a000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:22 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa0}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:22 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:22 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x3f00}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) [ 1951.126923][T22167] vcan0: tx drop: invalid da for name 0x0000000000003f00 05:09:23 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4d01000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:23 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:23 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x3b000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:23 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1951.728980][T22185] FAULT_INJECTION: forcing a failure. [ 1951.728980][T22185] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.756456][T22185] CPU: 0 PID: 22185 Comm: syz-executor.4 Not tainted 5.8.0-rc4-syzkaller #0 [ 1951.765265][T22185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1951.775782][T22185] Call Trace: [ 1951.779097][T22185] dump_stack+0x18f/0x20d [ 1951.783444][T22185] should_fail.cold+0x5/0x14 [ 1951.788098][T22185] should_failslab+0x5/0xf [ 1951.792527][T22185] kmem_cache_alloc_node+0x257/0x3c0 [ 1951.797912][T22185] __alloc_skb+0x71/0x550 [ 1951.802256][T22185] netlink_sendmsg+0x94f/0xd90 [ 1951.807035][T22185] ? netlink_unicast+0x7d0/0x7d0 [ 1951.812426][T22185] ? netlink_unicast+0x7d0/0x7d0 [ 1951.817497][T22185] sock_sendmsg+0xcf/0x120 [ 1951.821914][T22185] ____sys_sendmsg+0x6e8/0x810 [ 1951.826670][T22185] ? kernel_sendmsg+0x50/0x50 [ 1951.831329][T22185] ? do_recvmmsg+0x6d0/0x6d0 [ 1951.835920][T22185] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1951.841896][T22185] ? _parse_integer+0x132/0x180 [ 1951.846739][T22185] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1951.852711][T22185] ___sys_sendmsg+0xf3/0x170 [ 1951.857389][T22185] ? sendmsg_copy_msghdr+0x160/0x160 [ 1951.862680][T22185] ? __fget_files+0x272/0x400 [ 1951.867371][T22185] ? lock_downgrade+0x820/0x820 [ 1951.872226][T22185] ? find_held_lock+0x2d/0x110 [ 1951.876989][T22185] ? ksys_write+0x212/0x250 [ 1951.881516][T22185] ? __fget_files+0x294/0x400 [ 1951.886192][T22185] ? __fget_light+0xea/0x280 [ 1951.890768][T22185] __sys_sendmsg+0xe5/0x1b0 [ 1951.895295][T22185] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1951.900332][T22185] ? do_syscall_64+0x1c/0xe0 [ 1951.915077][T22185] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1951.921238][T22185] do_syscall_64+0x60/0xe0 05:09:23 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1951.925851][T22185] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1951.931801][T22185] RIP: 0033:0x45cba9 [ 1951.935776][T22185] Code: Bad RIP value. [ 1951.939851][T22185] RSP: 002b:00007f8a4a6bac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1951.948262][T22185] RAX: ffffffffffffffda RBX: 0000000000503880 RCX: 000000000045cba9 [ 1951.956409][T22185] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1951.966808][T22185] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1951.974782][T22185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1951.983255][T22185] R13: 0000000000000a6e R14: 00000000004cd4b3 R15: 00007f8a4a6bb6d4 05:09:24 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x3c000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:24 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:24 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:24 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7c15000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:24 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x3d000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1952.927736][T22167] vcan0: tx drop: invalid da for name 0x0000000000003f00 05:09:25 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xee00}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:25 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:25 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:25 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x3e000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:25 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1953.788060][T22232] vcan0: tx drop: invalid da for name 0x000000000000ee00 05:09:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:26 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x3f000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:26 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xefff}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:26 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x40000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:26 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:26 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8804000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:26 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1954.891093][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found 05:09:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xf, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1955.055811][T22266] vcan0: tx drop: invalid da for name 0x000000000000efff [ 1955.147607][ C0] vcan0: j1939_tp_rxtimer: 0x00000000711fe7a7: rx timeout, send abort [ 1955.156295][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000f5a35301: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1955.171349][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000c70dd40: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1955.175739][ C1] vcan0: j1939_tp_txtimer: 0x000000000c70dd40: tx aborted with unknown reason: -2 05:09:27 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xffef}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) [ 1955.198721][T22266] vcan0: tx drop: invalid da for name 0x000000000000efff [ 1955.206865][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000e8f13472: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) 05:09:27 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x41000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x2f, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1955.386592][T22274] vcan0: tx drop: invalid da for name 0x000000000000ffef 05:09:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xf0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1955.655861][ C0] vcan0: j1939_tp_rxtimer: 0x00000000711fe7a7: abort rx timeout. Force session deactivation 05:09:27 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x42000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:27 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x13}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:27 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9a02000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x157c}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x900, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:28 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa00f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1956.625198][T22274] vcan0: tx drop: invalid da for name 0x000000000000ffef 05:09:29 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x34000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xe00, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:29 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x43000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:29 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:29 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f40}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:29 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x14}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xf00, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1957.399968][T22327] vcan0: tx drop: invalid da for name 0x0000000000034000 05:09:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xf8d, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:29 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x44000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:29 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x2f00, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:29 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:30 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x3ffff}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x6000, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:30 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x15}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:30 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x45000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x8d0f, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1958.559623][T22360] vcan0: tx drop: invalid da for name 0x000000000003ffff 05:09:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xf000, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:30 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x46000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:30 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xf0ffff, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1959.638553][ C1] vcan0: j1939_tp_rxtimer: 0x000000008f02764b: rx timeout, send abort [ 1959.651963][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000043476efd: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1959.666454][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000071efbbd3: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:09:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:31 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x47000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:31 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x400300}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:31 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x14d}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:31 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1959.856162][T22403] vcan0: tx drop: invalid da for name 0x0000000000400300 05:09:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1960.151560][ C1] vcan0: j1939_tp_rxtimer: 0x000000008f02764b: abort rx timeout. Force session deactivation 05:09:32 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x48000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x9000000, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:32 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x29a}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:32 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1960.937228][ C1] vcan0: j1939_tp_rxtimer: 0x000000001aec6acb: rx timeout, send abort [ 1960.956016][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000ac258095: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1960.972944][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000f489a01e: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:09:32 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xee0000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:32 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x49000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xf000000, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:32 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d01}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1960.988252][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000a10de87d: 0x00000: (8) Duplicate sequence number (and software is not able to recover) [ 1961.002282][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000a13e881e: 0x00000: (8) Duplicate sequence number (and software is not able to recover) 05:09:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x2f000000, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1961.193759][T22446] vcan0: tx drop: invalid da for name 0x0000000000ee0000 05:09:33 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x60000000, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:33 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x4a000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1961.445632][ C1] vcan0: j1939_tp_rxtimer: 0x000000001aec6acb: abort rx timeout. Force session deactivation 05:09:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x80ffffff, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:33 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x8d0f0000, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:33 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:34 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x1000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:34 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x4b000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:34 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f04}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1962.635707][T22484] vcan0: tx drop: invalid da for name 0x0000000001000000 05:09:34 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x500}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:34 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xfcffffff, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xfffff000, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:34 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xe0ffffff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:35 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c15}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1963.192800][ C1] vcan0: j1939_tp_rxtimer: 0x0000000049f2284f: rx timeout, send abort [ 1963.237053][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000006853708d: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1963.252641][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000005341a7f7: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1963.277879][T22484] vcan0: tx drop: invalid da for name 0x0000000001000000 [ 1963.705624][ C1] vcan0: j1939_tp_rxtimer: 0x0000000049f2284f: abort rx timeout. Force session deactivation 05:09:36 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x2000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffff80, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:36 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf4ffffff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:36 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a02}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:36 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x600}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:36 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1964.217146][T22531] vcan0: tx drop: invalid da for name 0x0000000002000000 05:09:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffff9e, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:36 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:36 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfeffffff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:36 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xfffffffc, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:37 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x8000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:37 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff0f0000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:37 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:37 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000b}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xf, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:37 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1965.722317][T22568] vcan0: tx drop: invalid da for name 0x0000000008000000 05:09:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:37 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffff7f, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0x2c0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xec0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1966.226063][ C0] vcan0: j1939_tp_rxtimer: 0x000000000ae0e275: rx timeout, send abort [ 1966.235045][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000007999da70: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1966.249867][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000006878108e: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1966.249885][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.271406][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.278335][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.285112][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.292143][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.300306][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.308271][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.315089][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.322031][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.328609][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.337146][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.344149][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.351491][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.358879][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.365875][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.372456][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.379020][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.385509][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.392344][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.399218][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.406239][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.413685][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.420265][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.426864][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.433876][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.440325][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.446864][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.453447][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.460669][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.467259][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:38 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1966.474300][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.481075][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.487801][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.494634][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.501333][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.507937][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.515095][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.522103][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.529299][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.535971][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.542569][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.549712][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.556623][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.563251][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.570777][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.577469][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.584245][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.590690][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.597885][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.604746][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.612244][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.619484][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.626605][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.633864][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.640601][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.647354][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.654012][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.660447][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.667165][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.673663][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.712155][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.718946][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.726036][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.732613][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.734825][ C0] vcan0: j1939_tp_rxtimer: 0x000000000ae0e275: abort rx timeout. Force session deactivation [ 1966.740399][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.757441][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.764508][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.771631][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.778399][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.785205][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.791864][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.798492][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.806171][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.812696][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.819342][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.825926][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.833335][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.840046][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.847007][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.854226][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.860797][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.867385][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.874342][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.881720][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.888451][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.895126][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.902054][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.908978][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.916127][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.922762][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.929991][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.936580][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.943580][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.950092][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.956979][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.964417][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.971404][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.978236][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.984990][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1966.991596][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1966.998509][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.005479][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.012324][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.019942][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.026788][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.033456][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.040012][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.046905][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.053667][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.060180][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.066942][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.073444][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.079998][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.086465][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.093390][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.099827][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.107506][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.114791][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.121702][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.128360][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.135058][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.141896][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.148607][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.155371][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.162026][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.169120][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.176459][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.183221][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.189810][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.196322][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.202978][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.209543][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.216095][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.222647][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.229639][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.236572][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.243296][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.250155][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.257878][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.264479][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.271511][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.280120][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.286686][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.293461][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.301449][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.308127][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.315322][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.323162][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.330250][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.337710][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.344414][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.351012][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.357855][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.365215][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.372069][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.379780][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.386414][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.392852][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.399482][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.406127][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.413632][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.420324][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.426927][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.434218][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.440920][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.447713][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.455336][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.461851][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.468414][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.475198][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.482027][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.488641][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.495386][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.501990][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.509156][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.515906][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.522945][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.529525][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.536335][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.546311][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.552965][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.559792][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.571751][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.579876][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.586931][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.593570][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.600044][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1967.606647][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1967.613253][ C1] vcan0: j1939_tp_rxtimer: 0x000000007999da70: rx timeout, send abort 05:09:39 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x11000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0x33fe0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:39 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:39 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:39 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa00}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1967.641626][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found 05:09:39 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffffe0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0x20000238, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1967.858682][T22606] vcan0: tx drop: invalid da for name 0x0000000011000000 [ 1967.898487][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a79bc620: rx timeout, send abort 05:09:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0x7ffff000, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1967.909098][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000001395646a: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1967.930811][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000002c50d15c: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1967.969672][T22606] vcan0: tx drop: invalid da for name 0x0000000011000000 05:09:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xfffffdef, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0xf, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:40 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffff4, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1968.408108][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a79bc620: abort rx timeout. Force session deactivation 05:09:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:40 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x3f000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:40 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:40 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:40 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:40 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1969.025820][T22637] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. 05:09:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x1b, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1969.150005][T22647] vcan0: tx drop: invalid da for name 0x000000003f000000 05:09:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:41 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:41 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1969.344342][T22655] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. 05:09:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x26, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1969.528713][T22662] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. 05:09:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x2, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:42 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xfdffffff}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x8, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:42 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:42 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc00}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:42 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:42 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1970.224187][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found 05:09:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x300, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1970.423674][T22687] vcan0: tx drop: invalid da for name 0x00000000fdffffff 05:09:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1970.498620][ C1] vcan0: j1939_tp_rxtimer: 0x00000000383c741f: rx timeout, send abort [ 1970.532026][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000f8953e90: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:09:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x2, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1970.547966][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000006d5d4413: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1970.606505][T22687] vcan0: tx drop: invalid da for name 0x00000000fdffffff 05:09:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x3, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:42 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:42 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1971.007063][ C1] vcan0: j1939_tp_rxtimer: 0x00000000383c741f: abort rx timeout. Force session deactivation 05:09:43 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xfeffffff}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:43 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x4, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:43 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd00}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:43 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x8, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:43 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1971.735876][T22718] vcan0: tx drop: invalid da for name 0x00000000feffffff 05:09:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x9, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:43 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xe, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xf, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:44 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:44 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xffef0000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x2f, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:44 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfa0}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:44 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:44 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:44 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x60, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1973.078672][T22758] vcan0: tx drop: invalid da for name 0x00000000ffef0000 05:09:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xf0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x300, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:45 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x6, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:45 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x900, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1973.644919][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a0e4082c: rx timeout, send abort [ 1973.656042][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000008dcc0118: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1973.670459][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1973.670817][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000098fe2463: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1973.677076][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1973.697946][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.704590][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1973.711019][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.717794][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1973.724376][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.730855][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1973.737348][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.743893][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1973.750352][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.761863][T22758] vcan0: tx drop: invalid da for name 0x00000000ffef0000 [ 1973.798623][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1973.806084][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.812628][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1973.819841][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.826394][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1973.833941][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.840456][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1973.849484][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.856066][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1973.863345][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.869826][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1973.877253][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.884502][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1973.891746][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.898313][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1973.905612][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.912356][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1973.919928][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.926472][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1973.933743][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.940304][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1973.947588][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.954129][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1973.961336][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.968007][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1973.975299][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.981882][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1973.989158][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1973.995699][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.002997][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.009840][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.017634][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.025415][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.032690][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.039148][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.046516][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.053039][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.060255][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.066802][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.074248][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.080892][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.088162][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.094721][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.101990][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.108891][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.116264][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.122820][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.130019][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.136673][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.143954][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.150419][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.153343][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a0e4082c: abort rx timeout. Force session deactivation [ 1974.157677][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.174439][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.183101][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.189583][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.196842][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.203383][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.210841][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.218490][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.225739][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.232181][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.239426][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.245963][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.253215][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.259702][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.267005][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.273624][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.280813][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.287352][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.294709][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.301210][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.308552][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.315082][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.322268][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.329098][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.336711][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.343264][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.350458][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.356999][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.364277][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.370742][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.378141][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.384705][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.392009][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.398587][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.405869][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.412343][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.419604][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.426139][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.433442][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.439923][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.447192][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.453719][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.460894][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.467419][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.474752][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.481319][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.488571][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.495104][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.502292][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.508814][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.516432][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.522945][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.530848][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.537855][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.545104][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.551553][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.558974][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.565508][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.572764][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.580699][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.587992][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.594605][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.601795][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.608588][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.615988][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.622453][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.629714][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.636341][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.643600][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.650160][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.657446][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.663977][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.671156][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.677685][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.684935][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.691416][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.698765][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.707009][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.715887][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.722345][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.729680][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.736263][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.743519][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.749977][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.757230][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.763767][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.771014][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.777564][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.784998][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.791460][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.798713][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.805248][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.812454][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.819486][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.826831][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.834070][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.841264][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.847811][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.855074][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.861518][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.868767][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.875297][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.882578][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.889044][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.896299][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.902823][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.910000][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.916525][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.923774][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.930213][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.937538][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.944074][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.951264][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.957781][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.965025][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.971485][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.978849][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.985383][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1974.992641][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1974.999115][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.006467][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.012990][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.020175][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.026711][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.033968][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.040540][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.047798][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.054603][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.061780][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.068336][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.075605][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.082071][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.089498][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.096030][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.103284][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.109819][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.117341][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.123992][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.131700][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.138252][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.145510][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.152615][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.159906][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.166446][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.173822][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.180279][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.187637][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.194172][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.201463][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.207989][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.215244][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.221716][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.229003][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.235651][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.242932][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.249387][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.256634][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.263202][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.270477][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.276986][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.284308][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.290787][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.298151][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.304785][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.312116][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.318677][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.326405][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.333147][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.341032][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.347612][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.354955][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.361685][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.368941][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.375467][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.382717][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.389195][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.396450][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.402972][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.410157][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.416683][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.423948][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.430419][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.438189][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.444733][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.451930][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.458634][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.465901][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.472354][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.479607][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.486159][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.493422][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.499894][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.507142][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.513872][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.521055][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.527577][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.535288][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.541734][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.548981][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.555523][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.562800][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.570304][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.577545][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.584106][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.591398][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.602961][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.610181][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.616713][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.624234][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.630678][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.637945][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.644467][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.651650][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.658199][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.665476][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.671942][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.679325][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.685954][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.693225][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.699675][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.706921][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.713479][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.720677][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.727216][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.734481][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.741070][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.748468][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.755022][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.762758][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.769221][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.776592][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.783161][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.790375][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.796907][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.804182][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.810860][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.818235][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.825024][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.832291][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.840061][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.847384][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.854013][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.862068][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.868715][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.876208][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.882754][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.891961][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.898518][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.905974][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.912519][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.919813][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.926340][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.933593][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.940133][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.947408][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:47 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xffff0300}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xe00, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:47 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1100}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:47 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:47 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1975.953955][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.961207][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1975.967739][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000c0ce6a5a: last 00 [ 1975.976905][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:48 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1976.119864][T22794] vcan0: tx drop: invalid da for name 0x00000000ffff0300 05:09:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xf00, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:48 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:48 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xf8d, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x2f00, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:48 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:49 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xffffff7f}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x6000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:49 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:49 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:49 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:49 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1300}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x8d0f, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1977.379053][T22834] vcan0: tx drop: invalid da for name 0x00000000ffffff7f 05:09:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xf000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1977.474095][ C1] vcan0: j1939_tp_rxtimer: 0x000000007dcdff61: rx timeout, send abort [ 1977.483485][ C1] vcan0: j1939_tp_rxtimer: 0x000000002d205eae: rx timeout, send abort [ 1977.508049][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000001aacfed2: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:09:49 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xa, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1977.523191][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000491f9aaa: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1977.542550][T22834] vcan0: tx drop: invalid da for name 0x00000000ffffff7f [ 1977.549879][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.557291][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.563815][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.571028][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.577565][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.584842][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.593032][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.600252][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.606893][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.614255][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.620888][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.629563][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.636343][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.643613][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.650184][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.657911][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.664518][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.671823][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.678370][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.685642][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.692116][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.699390][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.705934][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.713214][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xf0ffff, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1977.720219][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.727529][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.734594][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.741798][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.748427][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.755691][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.762163][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.769444][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.775978][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.783259][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.789732][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.797012][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.803553][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.810755][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.818260][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.825965][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.832595][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.839805][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.846356][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.853630][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.860108][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.867486][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.874116][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.881323][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.887992][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.895277][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.901912][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.909191][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.917142][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 05:09:49 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1977.924639][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.933792][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.942055][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.949777][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.959759][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.966611][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.973891][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.980545][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1977.989236][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1977.992078][ C1] vcan0: j1939_tp_rxtimer: 0x000000002d205eae: abort rx timeout. Force session deactivation [ 1977.995986][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.013812][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.020284][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.027548][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.034077][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.041743][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.048333][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.055678][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.062355][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.071210][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.077752][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.085239][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.092160][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.099429][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.105980][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.113359][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:50 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1978.120032][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.127487][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.134016][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.141224][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.147756][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.155203][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.161688][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.168964][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.175514][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.182793][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.189278][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.196559][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.203119][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.210327][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.216877][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.224144][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.230664][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.238213][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.244756][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.251972][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.258518][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.266574][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.273116][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.280319][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.286878][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.294141][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.300805][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.308099][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.315094][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.322561][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.329234][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.336599][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.343164][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.350454][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.357179][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.364444][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.371018][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.378275][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.384922][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.392128][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.398837][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.406206][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.412743][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.419947][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.426491][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.433754][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.440230][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.447496][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1978.454121][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000000d07affb: last 00 [ 1978.461432][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:50 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xfffffffd}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x1000000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:50 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1400}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1978.476709][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000d07affb: 0x00000: (5) Maximal retransmit request limit reached 05:09:50 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000200}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:50 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xb, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x2000000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1978.659057][T22868] vcan0: tx drop: invalid da for name 0x00000000fffffffd 05:09:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x3000000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:50 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xc, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:50 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14d}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x4000000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x8000000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:51 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xd, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:51 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xfffffffe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x9000000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:51 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:51 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xe, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:51 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1500}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1979.697810][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found 05:09:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xe000000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:51 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1979.870347][T22911] vcan0: tx drop: invalid da for name 0x00000000fffffffe [ 1979.954321][ C1] vcan0: j1939_tp_rxtimer: 0x00000000eed2159a: rx timeout, send abort [ 1979.962943][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000002ae822ef: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1979.977413][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1979.977965][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000dd31c356: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1979.983932][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found 05:09:51 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xf, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1980.004835][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.037795][T22911] vcan0: tx drop: invalid da for name 0x00000000fffffffe [ 1980.046968][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 05:09:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xf000000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1980.054472][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.060964][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.069282][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.075809][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.083516][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.090004][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.097292][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x2f000000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1980.104343][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.111628][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.118161][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.125443][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.132156][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.139354][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.146158][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.153707][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.160539][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.167834][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.174395][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.181626][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.188180][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.196008][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x60000000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1980.203171][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.210553][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.217559][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.224825][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.231309][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.238584][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.245120][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 05:09:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x80ffffff, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1980.252464][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.258937][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.266743][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.273548][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.281621][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.288178][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.295446][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.301929][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.309467][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.316284][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.323901][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.330385][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.337653][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.344187][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.351394][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.358097][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.365359][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.371930][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.379188][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.385704][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.392982][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.399591][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.407087][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.413793][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.421170][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.427694][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.435036][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.441503][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.448765][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.455366][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.462586][ C1] vcan0: j1939_tp_rxtimer: 0x00000000eed2159a: abort rx timeout. Force session deactivation [ 1980.462739][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.479620][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.486893][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.493606][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.500798][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.507985][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.515261][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.521738][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.529091][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.535796][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.543053][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.549525][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.556874][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.563410][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.570744][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.577301][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.584576][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.591083][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.598339][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.605013][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.612276][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.621838][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.629479][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.636045][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.643932][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.650418][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.657708][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.664255][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.671461][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.678018][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.685286][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.691764][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.699056][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.705583][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.712956][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.719446][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.726726][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.733263][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.740479][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.747033][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.754313][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.760884][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.768149][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.774730][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.781927][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.788636][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.795894][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.802437][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.809646][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.816196][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.823474][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.829957][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.837258][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.843816][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.851164][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.857886][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.865158][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.871625][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.878905][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.885448][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.892744][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.899218][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.906478][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.913098][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.920556][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.927244][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.934518][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.941537][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.949476][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.957752][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.965049][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.971548][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.978935][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.985474][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1980.992736][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1980.999224][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.007213][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.013734][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.020916][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.027466][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.034722][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.041176][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.048583][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.055127][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.062465][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.070132][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.077475][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.084213][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.091421][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.097959][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.105384][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.111856][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.119366][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.125914][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.133189][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.139641][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.146903][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.153433][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.160622][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.167153][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.174408][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.180869][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.188641][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.195156][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.202528][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.208982][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.216308][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.223021][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.230396][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.237057][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.244682][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.251181][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.258436][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.264950][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.272206][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.278679][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.286419][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.293087][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.300742][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.307275][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.314648][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.321105][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.328620][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.335175][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.342455][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.349091][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.357644][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.364177][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.371356][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.377874][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.385119][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.391592][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.398860][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.405368][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.412617][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.419082][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.426321][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.433355][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.440554][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.447251][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.454538][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.461140][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.468757][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.476348][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.483803][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.490450][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.497748][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.504370][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.511578][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.518090][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.525427][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.531887][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.539137][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.545661][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.553089][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.559717][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.567049][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.573736][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.582209][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.589135][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.596497][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.603314][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.610498][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.617011][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.624546][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.631887][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.640292][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.647002][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.654262][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.660713][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.668045][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.674566][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.681770][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.688485][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.695840][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.702389][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.709614][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.716135][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.723387][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.729831][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.737147][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.743749][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.750941][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.757623][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.765090][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.771550][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.779303][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.786101][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.793855][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.800491][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.807745][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.814278][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.821547][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.828061][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.835482][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1981.842452][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000007a1bfdf: last 00 [ 1981.849826][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:09:53 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x1c144329393}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x8d0f0000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:53 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:53 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x157c}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:53 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1981.861147][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000007a1bfdf: 0x00000: (5) Maximal retransmit request limit reached 05:09:53 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x10, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x9effffff, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1982.055973][T22949] vcan0: tx drop: invalid da for name 0x000001c144329393 05:09:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xf0ffffff, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xfcffffff, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:54 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x11, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xfffff000, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xffffff7f, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:55 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x40030000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:55 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1f40}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:55 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x488}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xffffff80, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:55 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:55 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x12, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1983.172586][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found 05:09:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xffffff9e, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1983.360816][T22991] vcan0: tx drop: invalid da for name 0x0040030000000000 [ 1983.429082][ C0] vcan0: j1939_tp_rxtimer: 0x000000006eb7dace: rx timeout, send abort [ 1983.437597][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000011e1b282: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1983.451977][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1983.452508][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000005e38399c: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1983.462484][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1983.479194][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.485944][T22991] vcan0: tx drop: invalid da for name 0x0040030000000000 [ 1983.487224][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.501504][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.508023][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.515286][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.521796][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 05:09:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffff0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1983.529042][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.535654][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.543001][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.549486][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.556746][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.563275][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.570569][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.577142][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.584930][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.591409][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.598943][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.605487][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.612761][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.619233][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.626597][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.633135][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.640342][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.646892][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.654165][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.660651][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.667928][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.675706][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.682973][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.689452][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.696721][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.703353][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.710565][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.717112][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 05:09:55 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1983.725851][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.732719][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.739925][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.746462][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.753740][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.760214][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.767597][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.775548][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.783861][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.790516][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.797796][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.804508][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.812213][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.818688][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 05:09:55 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1983.826018][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.832537][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.839906][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.846415][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.853685][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.860173][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.867443][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.873973][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.881176][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.887692][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.894946][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.901414][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.908664][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.915185][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.922434][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.928908][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.936154][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.937329][ C0] vcan0: j1939_tp_rxtimer: 0x000000006eb7dace: abort rx timeout. Force session deactivation [ 1983.942704][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.942716][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.942757][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.975279][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.981770][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1983.989652][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1983.996194][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.003455][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.010028][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.017345][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.023910][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.031141][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.037668][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.044930][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.051408][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.058962][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.065493][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.072753][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.079234][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.086488][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.093027][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.100752][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.107293][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.114567][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.121136][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.128399][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.134940][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.142210][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.148776][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.156052][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.162579][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.169781][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.176316][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.183596][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.192484][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.200480][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.207045][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.214394][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.220889][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.228431][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.234986][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.243463][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.251032][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.258750][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.265813][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.275401][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.282822][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.290580][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.297228][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.304540][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.311454][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.321434][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.327996][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.335280][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.341976][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.349450][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.356799][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.364070][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.370815][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 05:09:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:56 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xee000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:56 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1984.378109][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.384643][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000609dda5d: last 00 [ 1984.391890][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1984.417103][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000609dda5d: 0x00000: (5) Maximal retransmit request limit reached 05:09:56 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x13, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:56 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1984.775976][T23037] vcan0: tx drop: invalid da for name 0x00ee000000000000 05:09:56 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x4, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x8, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:57 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x14, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x9, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1985.876534][T23037] vcan0: tx drop: invalid da for name 0x00ee000000000000 05:09:58 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x100000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:58 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xe, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:58 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:58 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x15, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:58 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1986.534388][T23074] vcan0: tx drop: invalid da for name 0x0100000000000000 05:09:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xf, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2f, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:58 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x16, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x60, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xf0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:58 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:59 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x200000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:09:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x300, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:09:59 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:59 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x401f}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:09:59 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x17, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:09:59 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:09:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x900, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1987.764897][T23112] vcan0: tx drop: invalid da for name 0x0200000000000000 [ 1987.862395][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f35c15f2: rx timeout, send abort 05:09:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xe00, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:00 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x18, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xf00, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:00 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xf8d, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1988.853683][ C1] vcan0: j1939_tp_rxtimer: 0x000000002231f7bb: rx timeout, send abort [ 1988.862276][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000462a8b72: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1988.876749][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000005325912b: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1988.898509][T23116] vcan0: tx drop: invalid da for name 0x0200000000000000 [ 1989.368213][ C1] vcan0: j1939_tp_rxtimer: 0x000000002231f7bb: abort rx timeout. Force session deactivation 05:10:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x800000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:01 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:01 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x19, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:01 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4d01}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2f00, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:01 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x6000, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1989.729659][T23153] vcan0: tx drop: invalid da for name 0x0800000000000000 05:10:01 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1a, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x8d0f, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xf000, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:02 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1b, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xf0ffff, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:02 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x1100000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1000000, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:02 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:02 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1c, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:02 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:02 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7c15}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1990.684390][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found 05:10:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2000000, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1990.827973][T23189] vcan0: tx drop: invalid da for name 0x1100000000000000 [ 1991.014387][ C0] vcan0: j1939_tp_rxtimer: 0x000000006bb261c3: rx timeout, send abort [ 1991.049010][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000e9b712b1: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:10:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x3000000, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1991.063983][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000066f0c78f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1991.102906][T23184] vcan0: tx drop: invalid da for name 0x1100000000000000 05:10:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x4000000, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:03 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1d, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x8000000, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:03 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1e, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1991.524902][ C0] vcan0: j1939_tp_rxtimer: 0x000000006bb261c3: abort rx timeout. Force session deactivation 05:10:03 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x3f00000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x9000000, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:03 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9a02}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:03 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d010000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:03 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:03 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x21, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xe000000, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1992.154969][T23228] vcan0: tx drop: invalid da for name 0x3f00000000000000 05:10:04 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x22, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:04 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xf000000, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2f000000, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:04 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x23, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1993.133626][T23228] vcan0: tx drop: invalid da for name 0x3f00000000000000 05:10:05 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x24, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x60000000, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:05 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x93933244c1010000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:05 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa00f}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:05 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f040000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:05 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa0}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1993.756481][T23255] vcan0: tx drop: invalid da for name 0x93933244c1010000 05:10:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x80ffffff, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:05 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x25, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x8d0f0000, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x9effffff, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xf0ffffff, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:06 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x26, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfcffffff, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffff000, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:06 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xfdffffff00000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:06 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x27, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xffffff7f, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:06 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000b}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:06 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:06 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c150000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1994.887099][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found 05:10:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xffffff80, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xffffff9e, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1995.047634][T23305] vcan0: tx drop: invalid da for name 0xfdffffff00000000 [ 1995.144046][ C0] vcan0: j1939_tp_rxtimer: 0x00000000142b5f97: rx timeout, send abort [ 1995.152643][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000cdf11b74: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1995.167862][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000006b7da4bd: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1995.167880][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found 05:10:07 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x28, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1995.188665][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.204601][T23305] vcan0: tx drop: invalid da for name 0xfdffffff00000000 [ 1995.258921][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.266302][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.272847][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.280055][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.286925][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.294200][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.301889][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.309182][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.315743][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.324158][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.336170][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.343436][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.349919][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.357354][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.364239][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.372668][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.379248][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.386868][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.393433][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.401749][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found 05:10:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffff0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1995.408245][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.415530][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.422241][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.429459][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.435996][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.443239][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.449724][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.457158][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.464200][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.471542][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.478027][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.485310][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.491850][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.499841][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.506383][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.513655][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.520136][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.527472][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.534005][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.541248][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.547716][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.554984][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.561501][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.568710][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.575231][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.582485][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.588963][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.596222][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.602843][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.610422][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.617371][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.624628][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.631130][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.638414][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.644953][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.652200][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.652462][ C0] vcan0: j1939_tp_rxtimer: 0x00000000142b5f97: abort rx timeout. Force session deactivation [ 1995.658835][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.658849][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.683083][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.690284][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.696916][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.707407][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.714125][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.721392][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.727879][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.735577][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.742384][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.749594][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.756225][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.763491][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.770231][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.777763][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.784289][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.791550][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.798035][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.805312][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.811854][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.819062][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.825685][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.833552][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.840030][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.847294][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.853812][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.861052][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.867529][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.874769][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.881391][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.888592][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.895106][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.902357][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.908834][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.916095][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.922709][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.929998][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.936514][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.943764][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.950234][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.957489][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.964016][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.971333][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.977793][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.985046][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1995.991572][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1995.998769][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1996.005292][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1996.012620][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1996.019091][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1996.027138][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1996.033864][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1996.041557][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1996.048023][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1996.055267][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1996.061842][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1996.069664][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1996.076274][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1996.083543][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1996.090000][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1996.097253][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1996.103785][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1996.111027][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1996.117468][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1996.124713][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1996.131243][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1996.138427][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1996.144930][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1996.152169][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found 05:10:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xffffffff, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:08 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xfeffffff00000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:08 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:08 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:08 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a020000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1996.159229][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000002dba8a18: last 00 [ 1996.166641][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1996.175759][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000002dba8a18: 0x00000: (5) Maximal retransmit request limit reached 05:10:08 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x29, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000008, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:08 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2a, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000300, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xff010000, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:08 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:08 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:09 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xffef000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:09 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2b, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:09 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1997.651275][T23374] vcan0: tx drop: invalid da for name 0xffef000000000000 05:10:09 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2c, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:09 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:09 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:10 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2d, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:10 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xffff030000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x9, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:10 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2e, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:10 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1998.726572][ C1] vcan0: j1939_tp_rxtimer: 0x00000000ae54d919: rx timeout, send abort [ 1998.738245][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000e9b712b1: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1998.751242][T23401] vcan0: tx drop: invalid da for name 0xffef000000000000 [ 1998.753233][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000005c272528: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:10:10 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1998.856137][T23412] vcan0: tx drop: invalid da for name 0xffff030000000000 05:10:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0xe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:10 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x157c}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:10 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2f, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0xf, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:11 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x2f, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 1999.240910][ C1] vcan0: j1939_tp_rxtimer: 0x00000000ae54d919: abort rx timeout. Force session deactivation 05:10:11 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f40}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2000.006849][T23412] vcan0: tx drop: invalid da for name 0xffff030000000000 05:10:12 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xffffff7f00000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:12 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x30, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x60, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:12 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:12 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:12 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0xf0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x300, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2000.714678][T23456] vcan0: tx drop: invalid da for name 0xffffff7f00000000 05:10:12 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x31, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x900, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:12 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x32, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0xe00, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2001.620867][T23456] vcan0: tx drop: invalid da for name 0xffffff7f00000000 05:10:14 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0xffffffff00000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0xf00, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:14 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:14 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x33, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:14 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:14 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0xf8d, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:14 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x34, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2002.362855][T23493] vcan0: tx drop: invalid da for name 0xffffffff00000000 05:10:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x2f00, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:14 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:14 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1083a07e7ec}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x6000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2003.414414][T23493] vcan0: tx drop: invalid da for name 0xffffffff00000000 05:10:15 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:15 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x35, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x8d0f, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:15 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:15 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d01}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:15 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0xf000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:15 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:16 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x36, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0xffff, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:16 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2004.227768][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000be37002a: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 05:10:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:17 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:17 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:17 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x37, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:17 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c15}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:17 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 2005.079372][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found 05:10:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:17 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x38, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2005.345114][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a2269063: rx timeout, send abort 05:10:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x4, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:17 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8804}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2005.400355][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000139e4b9e: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2005.417421][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000a9943466: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:10:17 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2005.857120][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a2269063: abort rx timeout. Force session deactivation 05:10:18 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x8}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x9, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:18 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x39, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:18 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:18 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a02}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:18 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0xe, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:18 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3a, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0xf, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x2f, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x60, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:18 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3b, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:19 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x11}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:19 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0xf0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:19 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:19 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3c, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:19 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 2007.487981][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found 05:10:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x300, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2007.901355][ C0] vcan0: j1939_tp_rxtimer: 0x000000004e09d445: rx timeout, send abort [ 2007.934158][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000096730cd0: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:10:19 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3d, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x900, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2007.949389][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000021a4a249: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:10:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0xe00, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0xf00, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:20 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000b}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2008.410977][ C0] vcan0: j1939_tp_rxtimer: 0x000000004e09d445: abort rx timeout. Force session deactivation 05:10:20 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:20 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3e, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0xf8d, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:20 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:20 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:20 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x2f00, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2009.051340][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000001f31e738: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 05:10:21 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x41, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x6000, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x8d0f, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:21 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x42, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0xf000, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:22 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x2}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0xffff, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:22 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x43, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:22 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:22 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:22 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2010.312194][ C1] vcan0: j1939_tp_rxtimer: 0x0000000077fa5beb: rx timeout, send abort [ 2010.321052][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d0cbf66b: rx timeout, send abort [ 2010.329520][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000001597ea9b: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2010.343910][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.344416][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000069a179bb: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2010.350428][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.371069][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.377560][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.384057][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.390848][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.397266][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.404232][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.410723][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.417443][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.423945][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.430491][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.436912][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.443467][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.449952][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.456443][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.462924][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.465450][T23716] binder: 23704:23716 ioctl c004500a 20000300 returned -22 [ 2010.469387][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.469397][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.469437][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.469446][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.469483][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.509159][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.515722][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.522226][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.528700][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.535208][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.542787][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.549200][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.555711][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found 05:10:22 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:22 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x44, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2010.562202][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.568670][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.575172][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.581881][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.588389][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.594929][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.601418][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:10:22 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2010.607893][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.614399][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.620934][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.627350][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.634068][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.640657][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.647124][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.653704][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.660249][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.666662][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.673198][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.679641][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.686199][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.692683][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.699156][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.705672][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:10:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2010.712379][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.718809][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.725351][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.731843][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.738330][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.744812][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.752023][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.758433][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.764963][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.771431][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.777887][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.784364][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.791185][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.797695][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.804214][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.810788][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.817256][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.823734][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.829210][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d0cbf66b: abort rx timeout. Force session deactivation [ 2010.830247][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.846724][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.853233][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.859648][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.866171][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.870184][T23726] binder: 23720:23726 ioctl c004500a 20000300 returned -22 [ 2010.872634][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.895930][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.902412][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.908874][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.916257][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.922778][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.929192][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.935702][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.942180][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.948653][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.955134][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.961660][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.968174][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2010.974707][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2010.981205][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:10:22 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x8}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:22 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:22 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb000200}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:23 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x45, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:23 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:23 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x9, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:23 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x46, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xe, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xf, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2011.767262][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e4cda1b5: rx timeout, send abort [ 2011.776345][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000093ce6d84: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2011.802836][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000194335fa: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2011.804889][ C0] vcan0: j1939_xtp_rx_dpo: no connection found [ 2011.823427][ C0] vcan0: j1939_xtp_rx_dpo: no connection found [ 2011.829629][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2011.836090][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2011.842772][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2011.849187][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2011.855694][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2011.862339][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2011.868821][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2011.875289][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2011.881803][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2011.888218][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2011.894828][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2011.901301][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2011.907779][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2011.914238][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2011.920758][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2011.927252][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2011.942188][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2011.949576][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2011.956273][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2011.963549][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2011.970067][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2011.977260][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2011.983768][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2011.991025][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2011.997838][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.005096][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.011611][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.018822][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.025463][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.032729][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.039191][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.046476][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.053005][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.060257][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.066711][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.073971][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.080519][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.087819][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.094389][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.101652][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.108120][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.115395][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.121916][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.129094][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.135600][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.143020][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.149468][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.156815][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.165043][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.172309][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.178756][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.186006][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.192509][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.199866][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.206336][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.213590][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.220141][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.227339][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.233959][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.241217][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.247691][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.254929][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.261581][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.273803][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.275548][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e4cda1b5: abort rx timeout. Force session deactivation [ 2012.280350][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.297718][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.304496][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.311864][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.318409][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.325833][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.332505][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.340310][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.346854][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.354098][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.360618][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.367793][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.374302][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.381631][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.388101][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.395352][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.401893][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.409082][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.415592][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.422838][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.429374][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.440211][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.446662][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.453924][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.460449][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.468961][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.475559][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.482809][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.489292][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.496709][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.503244][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.510513][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.516982][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.524231][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.530757][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.537933][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.545232][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.552564][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.564912][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.572261][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.578728][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.585992][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.592612][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.599955][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.606412][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.613656][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.620204][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.627407][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.633928][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.641430][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.647893][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.655125][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.661667][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.668958][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.675489][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.682732][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.689177][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.696588][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.703734][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.711002][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.717451][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.724687][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.731205][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.739334][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.745978][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.753254][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.759800][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.768638][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.775152][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.782429][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.788871][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.796120][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.802647][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.809897][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.816375][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.823651][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.830230][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.837434][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.843957][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.851413][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.858028][ C0] vcan0: j1939_tp_rxtimer: 0x000000006d8a3339: rx timeout, send abort [ 2012.869271][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.876791][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.883345][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.890622][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.897112][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.904355][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.910907][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.918708][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.925419][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.932946][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.939391][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.946716][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.953229][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.960506][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.966976][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.974221][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.980757][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2012.987949][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2012.994488][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.001759][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.008348][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.015692][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.022235][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.029533][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.036045][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.043288][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.049942][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.057170][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.063761][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.071095][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.079574][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.086865][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.093476][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.100741][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.107192][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.114983][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.127333][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.136144][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.142791][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.150148][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.156709][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.163995][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.170635][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.177824][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.184385][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.191783][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.198238][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.205482][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.214333][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.221606][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.228059][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.235441][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.241999][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.249201][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.255736][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.263028][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.269481][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.276742][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.283279][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.290554][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.297033][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.304418][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.310945][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.318145][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.324728][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.332052][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.338497][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.345730][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.352252][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.359438][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.365951][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.373204][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.381027][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.388264][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.394765][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.403246][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.409759][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.416979][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.423485][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.430858][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.437626][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.444908][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.451430][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.458653][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.465211][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.472740][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.479187][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.486470][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.493003][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.500262][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.506757][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.514029][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.520812][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.527993][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.534610][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.541860][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.548307][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.555646][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.563489][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.572922][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.579461][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.586983][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.593607][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.600958][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.607429][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.614673][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.621197][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.628491][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.635005][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.642254][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.648900][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.656456][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.662989][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.670262][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.676745][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.684255][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.690792][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.698071][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.706690][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.714047][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.720873][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.728065][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.734776][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.742218][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.748675][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.755936][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.762467][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.769726][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.781349][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.788550][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.795049][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.802319][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.808863][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.816103][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.822639][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.830608][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.837162][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.844418][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.851048][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.858259][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.864947][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.873679][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.880197][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.887507][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.894022][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.901334][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.908064][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.915327][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.921860][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.929052][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.935675][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.942939][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.949390][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.956772][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.963578][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.970838][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.977297][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.984540][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2013.991071][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2013.998251][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2014.004778][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2014.012027][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2014.018483][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2014.025724][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2014.032261][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2014.039609][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2014.046075][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2014.055159][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2014.061874][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2014.069571][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:10:26 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x11}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:26 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x47, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x2f, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:26 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:26 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:26 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 2014.076041][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2014.083301][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2014.089834][ C0] vcan0: j1939_xtp_rx_dat_one: 0x0000000032a61771: last 00 [ 2014.099086][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:10:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x60, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:26 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:26 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x48, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:26 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xf0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x300, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:27 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:27 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x49, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x900, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:27 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 2015.466406][ C0] vcan0: j1939_tp_rxtimer: 0x000000006d5d4413: rx timeout, send abort 05:10:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xe00, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:27 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00020000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2015.712316][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000095588670: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 05:10:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xf00, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:27 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4a, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xf8d, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x2f00, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x6000, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2016.701256][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000069e10a09: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2016.730506][ C0] vcan0: j1939_tp_rxtimer: 0x00000000347c6291: rx timeout, send abort 05:10:28 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:28 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4b, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x8d0f, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:28 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:28 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:28 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2016.748077][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000081a259d: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2016.762886][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000025fe9b1d: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:10:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xf000, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:28 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x50, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2017.238737][ C0] vcan0: j1939_tp_rxtimer: 0x00000000347c6291: abort rx timeout. Force session deactivation 05:10:29 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x60, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:29 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:29 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x70, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:29 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:29 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:29 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:30 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x90, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x8, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:30 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:30 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xa0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2018.720680][ C1] vcan0: j1939_tp_rxtimer: 0x0000000071990647: rx timeout, send abort [ 2018.729364][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000fafabadc: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2018.743729][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2018.744043][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000044af05d0: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2018.750241][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2018.771324][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.777764][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2018.784210][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.790837][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2018.797303][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.803846][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2018.810357][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.816892][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2018.823390][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.829934][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2018.836394][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.842912][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2018.849401][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.855843][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2018.862300][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.868770][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2018.875263][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.881817][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2018.888319][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.894853][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2018.901340][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.916151][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2018.923459][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.930328][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2018.937522][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.944049][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2018.951320][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.957879][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2018.965150][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.971686][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2018.978882][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2018.986284][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2018.994071][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.000597][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.007796][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.014456][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.021725][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.028184][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.035434][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.041980][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.049426][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.055883][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.063123][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.073523][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.080797][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.087546][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.094812][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.101539][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.108751][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.115281][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.122539][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.128988][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.136226][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.142741][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.150614][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.157073][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.164323][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.170853][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.178029][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.184548][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.191794][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.198244][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.205575][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.212087][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.219772][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.226224][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.229030][ C1] vcan0: j1939_tp_rxtimer: 0x0000000071990647: abort rx timeout. Force session deactivation [ 2019.233635][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.250169][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.257448][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.263965][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.271231][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.277709][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.284955][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.291475][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.298776][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.305500][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.312768][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.319398][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.327107][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.333666][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.340916][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.347376][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.354618][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.361143][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.368320][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.374821][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.382066][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.388504][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.395839][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.399228][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c8eef4cd: rx timeout, send abort [ 2019.402357][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.417614][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.424117][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.431350][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.437808][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.445136][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.451656][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.458856][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.465403][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.472675][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.480013][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.487219][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.493732][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.500978][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.507617][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.514896][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.521549][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.528755][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.535316][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.543224][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.549766][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.556966][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.563490][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.570769][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.577235][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.584516][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.591677][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.599040][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.605814][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.613169][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.619733][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.627099][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.633767][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.641470][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.647924][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.655180][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.661712][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.668893][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.675529][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.683063][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.689600][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.696815][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.703332][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.710767][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.717574][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.724844][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.731540][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.738824][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.745340][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.752600][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.759751][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.766947][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.773478][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.780723][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.787183][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.794655][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.801188][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 [ 2019.808375][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.814909][ C0] vcan0: j1939_xtp_rx_dat_one: 0x000000001b757d93: last 00 05:10:31 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x11}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x9, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000200}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:31 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xb0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:31 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x13000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:31 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2019.822173][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2019.829403][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000001b757d93: 0x00000: (5) Maximal retransmit request limit reached 05:10:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xe, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:32 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xc0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xf, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x2f, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:32 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xd0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x60, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2021.273066][ C1] vcan0: j1939_tp_rxtimer: 0x00000000244170ff: rx timeout, send abort 05:10:33 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xf0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:33 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xe0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:33 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:33 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:33 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x14000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x300, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:33 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xf0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2021.754666][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000009a4ca72f: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 05:10:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x900, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xe00, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:34 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x300, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xf00, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:34 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:34 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:34 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x408, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:34 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xf8d, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:34 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x15000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x2f00, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:34 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x500, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x6000, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x8d0f, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:35 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x600, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xf000, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 2023.475067][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a9b11aa6: rx timeout, send abort [ 2023.486273][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000ada27039: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2023.500862][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000008aa23070: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2023.500868][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.500913][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.528565][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.535116][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.541619][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.548368][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.555074][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.561656][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.568291][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.574931][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.581434][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.587910][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.594579][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.601135][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.607553][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.614110][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.620663][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.627386][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.633866][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.640657][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.647160][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.653709][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.660612][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.667067][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.673550][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.681249][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.687927][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.694618][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.701098][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.707898][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.714363][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.721210][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.727627][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.734615][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.741199][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.749119][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.755534][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.762190][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.768621][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.775903][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.782397][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.788910][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.795426][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.802046][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.808478][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.815016][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.821762][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.828240][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.834741][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.841355][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.847770][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.854902][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.864438][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.870972][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.877384][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.883904][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.890506][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.896954][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.903411][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.909937][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.919041][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.925496][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.931956][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.939806][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.946232][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.953255][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.962526][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.969132][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.975743][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2023.982345][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2023.983558][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a9b11aa6: abort rx timeout. Force session deactivation [ 2023.990217][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.008009][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.014588][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.021304][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.027808][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.035131][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.041693][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.049869][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.061762][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.068210][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.074675][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.081197][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.087610][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.094128][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.100685][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.107219][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.113879][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.120652][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.127070][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.133952][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.141532][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.148420][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.155070][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.163006][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.169590][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.176256][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.183022][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.189582][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.196133][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.202650][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.209119][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.215560][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.222058][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.228512][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.235019][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.241574][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.248086][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.254625][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.261417][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.267959][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.274444][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.281152][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.287730][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.294672][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.302015][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2024.310936][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2024.317988][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:10:36 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:36 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x700, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:36 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:36 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:36 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 2024.324839][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ada27039: rx timeout, send abort [ 2024.333557][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d3d5095b: rx timeout, send abort 05:10:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:36 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x804, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x30}}}, 0xb8}}, 0x0) 05:10:36 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:36 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x900, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2025.114289][ C1] vcan0: j1939_tp_rxtimer: 0x000000008eb904b7: rx timeout, send abort [ 2025.134759][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000bc7e75c5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2025.149677][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000bf56f2c9: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:10:37 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x11}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:37 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x30}}}, 0xb8}}, 0x0) 05:10:37 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xa00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x30}}}, 0xb8}}, 0x0) 05:10:37 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:37 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:37 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xb00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, 0x30}}}, 0xb8}}, 0x0) [ 2025.622496][ C1] vcan0: j1939_tp_rxtimer: 0x000000008eb904b7: abort rx timeout. Force session deactivation 05:10:37 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:37 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xc00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, 0x30}}}, 0xb8}}, 0x0) [ 2026.721622][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e1b6600f: rx timeout, send abort 05:10:38 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0xe, 0x30}}}, 0xb8}}, 0x0) 05:10:38 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xd00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:38 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:38 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x401f0000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:38 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0xf, 0x30}}}, 0xb8}}, 0x0) 05:10:39 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xe00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2027.309971][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000a12c96d5: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 05:10:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x2f, 0x30}}}, 0xb8}}, 0x0) 05:10:39 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d01000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:39 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30}}}, 0xb8}}, 0x0) 05:10:40 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:40 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xf00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0xff, 0x30}}}, 0xb8}}, 0x0) 05:10:40 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4d010000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:40 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:40 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2028.246196][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found 05:10:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2f}}}, 0xb8}}, 0x0) 05:10:40 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1100, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2028.507270][ C0] vcan0: j1939_tp_rxtimer: 0x000000008965ec41: rx timeout, send abort [ 2028.553611][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000f25930a0: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2028.568567][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000138def5f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:10:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 05:10:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x2}}}, 0xb8}}, 0x0) 05:10:40 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1200, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x3}}}, 0xb8}}, 0x0) [ 2029.015761][ C0] vcan0: j1939_tp_rxtimer: 0x000000008965ec41: abort rx timeout. Force session deactivation 05:10:41 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x8}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x4}}}, 0xb8}}, 0x0) 05:10:41 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f04000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:41 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:41 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1300, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:41 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7c150000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 2029.641907][ C0] vcan0: j1939_tp_rxtimer: 0x0000000002fb284b: rx timeout, send abort 05:10:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x8}}}, 0xb8}}, 0x0) 05:10:41 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1400, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x9}}}, 0xb8}}, 0x0) 05:10:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0xe}}}, 0xb8}}, 0x0) 05:10:42 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1500, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0xf}}}, 0xb8}}, 0x0) [ 2031.080710][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b6a3c5dd: rx timeout, send abort 05:10:43 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x11}, 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x2f}}}, 0xb8}}, 0x0) 05:10:43 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1600, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:43 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c15000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:43 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9a020000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:43 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x60}}}, 0xb8}}, 0x0) 05:10:43 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1700, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0xff}}}, 0xb8}}, 0x0) 05:10:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x2}}}, 0xb8}}, 0x0) 05:10:43 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1800, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:43 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d010000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:44 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x17, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:44 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x3}}}, 0xb8}}, 0x0) 05:10:44 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1900, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:44 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:44 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa00f0000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x4}}}, 0xb8}}, 0x0) [ 2032.746590][ C0] vcan0: j1939_tp_rxtimer: 0x000000008ce1e6ff: rx timeout, send abort [ 2032.756384][ C0] vcan0: j1939_tp_rxtimer: 0x000000007b1d2167: rx timeout, send abort [ 2032.765154][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000001e5f00b1: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2032.780266][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found 05:10:44 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1a00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2032.780434][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000007f79a78a: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2032.786771][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2032.807457][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2032.833485][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2032.840895][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2032.847459][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2032.855193][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2032.861807][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2032.869140][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2032.875704][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2032.885300][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2032.893211][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2032.900453][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2032.906956][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2032.914201][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2032.920713][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2032.927914][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2032.934426][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2032.942280][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2032.948953][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2032.956153][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2032.962692][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2032.969964][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2032.976432][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2032.983688][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found 05:10:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x8}}}, 0xb8}}, 0x0) [ 2032.990927][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2032.998387][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.004902][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.012168][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.018717][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.025921][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.032470][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.039822][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.046293][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.053570][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.060099][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.067308][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.073840][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.081119][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.087943][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.095215][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.101746][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.109007][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.115476][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.122731][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.129781][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.137068][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found 05:10:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x9}}}, 0xb8}}, 0x0) [ 2033.144055][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.151551][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.158034][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.165314][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.171855][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.179127][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.185691][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.192954][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.199496][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.206691][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.213221][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.220483][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.226955][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.234316][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.240863][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.248191][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.254663][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.261936][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.264692][ C0] vcan0: j1939_tp_rxtimer: 0x000000007b1d2167: abort rx timeout. Force session deactivation [ 2033.268506][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.286150][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.292877][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.300170][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.306838][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.314164][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.320737][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.327965][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.334520][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.341803][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.349065][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.356276][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.362943][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.370344][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.376861][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.384194][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.390778][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.402105][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.410304][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.417513][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.424068][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.431338][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.437835][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.445117][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.451668][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.459119][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.465597][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.472868][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.479442][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.486646][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.493272][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.501059][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.507550][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.514829][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.521371][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.528671][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.535335][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.542615][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.549159][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.556366][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.563244][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.570517][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.576993][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.584251][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.590863][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.598153][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.604625][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.611892][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.619046][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.626248][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.632815][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.640079][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.646564][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.654006][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.660755][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.668275][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.674801][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.682085][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.688826][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 05:10:45 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a02000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xe}}}, 0xb8}}, 0x0) [ 2033.696051][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.702808][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.711152][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.717780][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.725136][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2033.731730][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000001585d517: last 00 [ 2033.739116][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found 05:10:45 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x20000058, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}}, 0x0) 05:10:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xf}}}, 0xb8}}, 0x0) 05:10:45 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c150000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:45 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 2033.750646][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000001585d517: 0x00000: (5) Maximal retransmit request limit reached 05:10:45 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:45 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1b00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x2f}}}, 0xb8}}, 0x0) [ 2033.948198][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000006c15e1fa: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 05:10:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x60}}}, 0xb8}}, 0x0) 05:10:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xf0}}}, 0xb8}}, 0x0) 05:10:46 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1c00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x300}}}, 0xb8}}, 0x0) 05:10:46 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1d00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:47 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x8}}, 0x0) 05:10:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x900}}}, 0xb8}}, 0x0) 05:10:47 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88040000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:47 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:47 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1e00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:47 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7073a08010000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xe00}}}, 0xb8}}, 0x0) [ 2035.511650][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d25fa6d0: rx timeout, send abort 05:10:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xf00}}}, 0xb8}}, 0x0) [ 2035.551339][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000d85b1e85: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2035.566766][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000f9e6736f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:10:47 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a020000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:47 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xf8d}}}, 0xb8}}, 0x0) 05:10:47 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1f00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:47 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6f9}}, 0x0) 05:10:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x2f00}}}, 0xb8}}, 0x0) [ 2035.956016][ C1] vcan0: j1939_tp_rxtimer: 0x0000000004927b4f: rx timeout, send abort [ 2035.964693][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000ddc44bd3: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2035.979725][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000f17217e6: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:10:47 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x6000}}}, 0xb8}}, 0x0) [ 2036.020034][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d25fa6d0: abort rx timeout. Force session deactivation 05:10:48 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x8d0f}}}, 0xb8}}, 0x0) 05:10:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xf000}}}, 0xb8}}, 0x0) 05:10:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xf0ffff}}}, 0xb8}}, 0x0) [ 2036.464334][ C1] vcan0: j1939_tp_rxtimer: 0x0000000004927b4f: abort rx timeout. Force session deactivation 05:10:48 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:48 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2100, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x1000000}}}, 0xb8}}, 0x0) 05:10:48 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2037.178826][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a0363bfe: rx timeout, send abort [ 2037.194890][ C0] vcan0: j1939_tp_rxtimer: 0x0000000082359bf9: rx timeout, send abort 05:10:49 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x26fffff9}}, 0x0) 05:10:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x2000000}}}, 0xb8}}, 0x0) 05:10:49 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2200, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:49 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x13cd9a4c360}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:49 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:49 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2037.687086][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a0363bfe: abort rx timeout. Force session deactivation [ 2037.703081][ C0] vcan0: j1939_tp_rxtimer: 0x0000000082359bf9: abort rx timeout. Force session deactivation 05:10:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x3000000}}}, 0xb8}}, 0x0) 05:10:49 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2300, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x4000000}}}, 0xb8}}, 0x0) 05:10:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x8000000}}}, 0xb8}}, 0x0) 05:10:50 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2400, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x9000000}}}, 0xb8}}, 0x0) [ 2038.484206][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d0cf9cc1: rx timeout, send abort [ 2038.505946][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000049ec041: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2038.520754][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000001715f452: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2038.993938][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d0cf9cc1: abort rx timeout. Force session deactivation 05:10:51 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2500, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xe000000}}}, 0xb8}}, 0x0) 05:10:51 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x7ffff000}}, 0x0) 05:10:51 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:51 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:51 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xf000000}}}, 0xb8}}, 0x0) 05:10:51 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2600, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x2f000000}}}, 0xb8}}, 0x0) 05:10:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x60000000}}}, 0xb8}}, 0x0) 05:10:51 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:51 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2700, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:51 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x80ffffff}}}, 0xb8}}, 0x0) 05:10:52 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2800, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x8d0f0000}}}, 0xb8}}, 0x0) 05:10:52 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}, 0x2}, 0x0) 05:10:52 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:52 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:52 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x9effffff}}}, 0xb8}}, 0x0) [ 2041.242839][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000223cc5f0: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 05:10:53 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:53 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2900, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xf0ffffff}}}, 0xb8}}, 0x0) 05:10:53 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xfcffffff}}}, 0xb8}}, 0x0) 05:10:53 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2a00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xfffff000}}}, 0xb8}}, 0x0) 05:10:54 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}, 0x8}, 0x0) 05:10:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xffffff7f}}}, 0xb8}}, 0x0) 05:10:54 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2b00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:54 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:54 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:54 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10dff8bcb0e}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xffffff80}}}, 0xb8}}, 0x0) [ 2042.447328][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000048f5099c: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 05:10:54 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2c00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xffffff9e}}}, 0xb8}}, 0x0) 05:10:54 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2d00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xfffffff0}}}, 0xb8}}, 0x0) 05:10:54 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:55 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}, 0xf}, 0x0) 05:10:55 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xfffffffc}}}, 0xb8}}, 0x0) 05:10:55 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2e00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:55 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 2043.497259][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a350858a: rx timeout, send abort [ 2043.524585][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found 05:10:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xf0ffffffffffff}}}, 0xb8}}, 0x0) [ 2043.785526][ C0] vcan0: j1939_tp_rxtimer: 0x0000000069568b56: rx timeout, send abort 05:10:55 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2f00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x100000000000000}}}, 0xb8}}, 0x0) [ 2043.832712][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000df08604f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2043.847702][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000092ab10e5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:10:55 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x200000000000000}}}, 0xb8}}, 0x0) [ 2044.008619][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a350858a: abort rx timeout. Force session deactivation 05:10:56 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:56 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2044.296224][ C0] vcan0: j1939_tp_rxtimer: 0x0000000069568b56: abort rx timeout. Force session deactivation 05:10:56 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}, 0xffffff1f}, 0x0) 05:10:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x300000000000000}}}, 0xb8}}, 0x0) 05:10:56 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:56 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3100, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:56 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:56 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x400000000000000}}}, 0xb8}}, 0x0) 05:10:56 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3200, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x800000000000000}}}, 0xb8}}, 0x0) 05:10:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x900000000000000}}}, 0xb8}}, 0x0) 05:10:57 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3300, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xe00000000000000}}}, 0xb8}}, 0x0) 05:10:57 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}, 0x1, 0x2}, 0x0) 05:10:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xf00000000000000}}}, 0xb8}}, 0x0) 05:10:57 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3400, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:10:57 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:57 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:10:57 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2045.927854][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2046.044816][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000018e61d03: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 05:10:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x2f00000000000000}}}, 0xb8}}, 0x0) 05:10:58 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:10:58 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2046.184328][ C1] vcan0: j1939_tp_rxtimer: 0x0000000008128d8b: rx timeout, send abort [ 2046.192704][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000007e5d4fc0: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2046.208652][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000000875158c: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2046.226643][ C0] vcan0: j1939_xtp_rx_dpo: no connection found [ 2046.232949][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.239495][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.245968][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.252518][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.259062][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.265536][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.272088][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.278645][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.285132][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.291691][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.298251][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.304924][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.311600][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.318166][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.324657][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:10:58 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3500, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2046.331265][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.337844][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.344347][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.351002][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.357552][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.364053][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.370606][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.377145][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.383622][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.390177][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.396913][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.403463][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.410181][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.416740][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.423285][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.429828][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.436506][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.443077][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.449899][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.456384][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.462960][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.469614][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.476093][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:10:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x6000000000000000}}}, 0xb8}}, 0x0) [ 2046.482643][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.489189][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.496098][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.502650][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.509204][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.515689][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.522248][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.528810][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.535357][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.541909][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.548468][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.554971][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.561523][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.568854][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.575500][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.582243][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.588795][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.595274][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.601824][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.608571][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.615154][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.621701][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.628258][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 05:10:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x80ffffff00000000}}}, 0xb8}}, 0x0) [ 2046.634745][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.641301][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.650897][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.657486][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.663974][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.670542][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.677118][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.683697][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.690344][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.692521][ C1] vcan0: j1939_tp_rxtimer: 0x0000000008128d8b: abort rx timeout. Force session deactivation [ 2046.696838][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.696881][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.720810][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.727392][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.733883][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.740441][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.746926][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.753496][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.760949][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.767512][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.774264][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.780833][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.787372][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.793855][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.800412][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.806898][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.813705][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.820346][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.827340][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.834178][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.840817][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.847348][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.853937][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.860472][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.866948][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.873514][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.880059][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.886533][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.893178][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.899737][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.906244][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.913239][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.920138][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.926610][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.933224][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.939753][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.950366][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.957075][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.963583][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.970365][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.977663][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.984718][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.991293][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2046.997878][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.004318][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.010877][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.018259][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.024849][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.031417][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.037977][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.044453][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.051268][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.057942][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.064462][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.071033][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.077623][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.084064][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.096458][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.103191][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.109779][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.116462][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.123163][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.129701][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.136487][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.143032][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.149591][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.156052][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.162583][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.169146][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.175581][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.182259][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.190201][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.196662][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.203212][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.209928][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.216485][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.223009][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.229617][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.236049][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.242581][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.249729][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.256193][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.262712][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.269230][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.275711][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.282223][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.288760][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.295569][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.302091][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.308626][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.315072][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.321681][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.328200][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.334639][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.341149][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.347687][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.354134][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.360664][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.367189][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.373663][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.380208][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.386742][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.393301][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.399860][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.406317][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.412821][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.419359][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.425816][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.432339][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.438889][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.445435][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.455954][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.462508][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.469152][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.475620][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.482159][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.488682][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.495113][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.501719][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.508238][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.514758][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.523275][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.529825][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.536274][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.542829][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.549466][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.555911][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.562444][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.568991][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.575433][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.581992][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.589756][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.597013][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.603512][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.610303][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.617497][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.624062][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.631941][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.638726][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.647897][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.655321][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.662409][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.669480][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.675985][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.682551][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.689145][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.695841][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.702373][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.708924][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.715369][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.721879][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.728756][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.735254][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.741977][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.748523][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.754994][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.763364][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.769908][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.776463][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.783000][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.789580][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.796050][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.802680][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.809226][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.815820][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.822447][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.829012][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.835485][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.842028][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.848661][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.855310][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.861838][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.868379][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.874845][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.881385][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.887926][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.894395][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.901007][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.907807][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.914275][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.921159][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.927812][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.934294][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.941374][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2047.948552][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2048.007643][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000024e985ab: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 05:11:00 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}, 0x1, 0x8}, 0x0) 05:11:00 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2048.198554][ C0] vcan0: j1939_tp_rxtimer: 0x000000002981564c: rx timeout, send abort [ 2048.207072][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000002981564c: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 05:11:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x8d0f000000000000}}}, 0xb8}}, 0x0) 05:11:00 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:11:00 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:11:00 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3600, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:11:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x9effffff00000000}}}, 0xb8}}, 0x0) 05:11:00 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3700, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2048.509596][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000004ab63459: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 05:11:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xf0ffffff00000000}}}, 0xb8}}, 0x0) 05:11:00 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:11:00 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3800, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:11:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xfcffffff00000000}}}, 0xb8}}, 0x0) 05:11:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x6fffff9}, 0x1, 0x11}, 0x0) 05:11:01 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:11:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xffffff7f00000000}}}, 0xb8}}, 0x0) 05:11:01 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3900, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:11:01 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:11:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xfffffffffffff000}}}, 0xb8}}, 0x0) 05:11:01 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 05:11:01 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3a00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2049.798558][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000cd2b5600: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 05:11:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0xffffffffffffffff}}}, 0xb8}}, 0x0) 05:11:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x0, 0x2}}}, 0xb8}}, 0x0) 05:11:02 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3b00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:11:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x0, 0x3}}}, 0xb8}}, 0x0) [ 2050.316468][ C0] vcan0: j1939_tp_rxtimer: 0x0000000024262694: rx timeout, send abort [ 2050.344570][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000004d7785c5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2050.359501][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000233320b8: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2050.376076][ C1] ================================================================== [ 2050.384475][ C1] BUG: KASAN: use-after-free in j1939_tp_txtimer+0x787/0x1e10 [ 2050.391929][ C1] Read of size 7 at addr ffff88804617fe72 by task ksoftirqd/1/16 [ 2050.399021][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000bb880bd9: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2050.399722][ C1] [ 2050.399758][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.8.0-rc4-syzkaller #0 [ 2050.399765][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.399775][ C1] Call Trace: [ 2050.441507][ C1] dump_stack+0x18f/0x20d [ 2050.445838][ C1] ? j1939_tp_txtimer+0x787/0x1e10 [ 2050.450936][ C1] ? j1939_tp_txtimer+0x787/0x1e10 [ 2050.456065][ C1] print_address_description.constprop.0.cold+0xae/0x436 [ 2050.463184][ C1] ? lockdep_hardirqs_off+0x66/0xa0 [ 2050.468375][ C1] ? vprintk_func+0x97/0x1a6 [ 2050.472954][ C1] ? j1939_tp_txtimer+0x787/0x1e10 [ 2050.478087][ C1] kasan_report.cold+0x1f/0x37 [ 2050.482874][ C1] ? exc_page_fault+0x170/0x170 [ 2050.487806][ C1] ? j1939_tp_txtimer+0x787/0x1e10 [ 2050.492913][ C1] check_memory_region+0x13d/0x180 [ 2050.498018][ C1] memcpy+0x20/0x60 [ 2050.501826][ C1] j1939_tp_txtimer+0x787/0x1e10 [ 2050.506774][ C1] ? j1939_tp_schedule_txtimer+0xb0/0xb0 [ 2050.512400][ C1] ? _raw_spin_unlock_irqrestore+0x4f/0xe0 [ 2050.518365][ C1] ? lock_is_held_type+0xb0/0xe0 [ 2050.523287][ C1] __hrtimer_run_queues+0x6a9/0xfc0 [ 2050.528564][ C1] ? j1939_tp_schedule_txtimer+0xb0/0xb0 [ 2050.534183][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 2050.540246][ C1] ? ktime_get_update_offsets_now+0x1c4/0x250 [ 2050.546431][ C1] hrtimer_run_softirq+0x172/0x340 [ 2050.551546][ C1] __do_softirq+0x34c/0xa60 [ 2050.556136][ C1] ? __local_bh_disable_ip+0x190/0x190 [ 2050.561598][ C1] run_ksoftirqd+0x89/0x100 [ 2050.566109][ C1] smpboot_thread_fn+0x655/0x9e0 [ 2050.571314][ C1] ? __smpboot_create_thread.part.0+0x340/0x340 [ 2050.577549][ C1] ? __kthread_parkme+0x13f/0x1e0 [ 2050.582585][ C1] ? __smpboot_create_thread.part.0+0x340/0x340 [ 2050.588824][ C1] kthread+0x3b5/0x4a0 [ 2050.592888][ C1] ? __kthread_bind_mask+0xc0/0xc0 [ 2050.597989][ C1] ? __kthread_bind_mask+0xc0/0xc0 [ 2050.603284][ C1] ret_from_fork+0x1f/0x30 [ 2050.607707][ C1] [ 2050.610080][ C1] Allocated by task 9: [ 2050.614187][ C1] save_stack+0x1b/0x40 [ 2050.618330][ C1] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 2050.624392][ C1] kmem_cache_alloc_node+0x130/0x3c0 [ 2050.629698][ C1] __alloc_skb+0x71/0x550 [ 2050.634031][ C1] j1939_tp_tx_dat_new+0x30/0x500 [ 2050.639046][ C1] j1939_tp_txtimer+0x7b3/0x1e10 [ 2050.644059][ C1] __hrtimer_run_queues+0x6a9/0xfc0 [ 2050.649237][ C1] hrtimer_run_softirq+0x172/0x340 [ 2050.654341][ C1] __do_softirq+0x34c/0xa60 [ 2050.658924][ C1] [ 2050.661237][ C1] Freed by task 9: [ 2050.665041][ C1] save_stack+0x1b/0x40 [ 2050.669179][ C1] __kasan_slab_free+0xf5/0x140 [ 2050.674012][ C1] kmem_cache_free+0x7f/0x310 [ 2050.678681][ C1] kfree_skbmem+0xef/0x1b0 [ 2050.683074][ C1] consume_skb+0xcf/0x160 [ 2050.687386][ C1] vcan_tx+0x4f0/0xaa0 [ 2050.692067][ C1] dev_hard_start_xmit+0x193/0x950 [ 2050.697963][ C1] __dev_queue_xmit+0x2091/0x2d60 [ 2050.702985][ C1] can_send+0x41c/0x860 [ 2050.707218][ C1] j1939_send_one+0x288/0x340 [ 2050.712236][ C1] j1939_tp_txtimer+0x5d6/0x1e10 [ 2050.717343][ C1] __hrtimer_run_queues+0x6a9/0xfc0 [ 2050.722719][ C1] hrtimer_run_softirq+0x172/0x340 [ 2050.727979][ C1] __do_softirq+0x34c/0xa60 [ 2050.732462][ C1] [ 2050.734895][ C1] The buggy address belongs to the object at ffff88804617fe40 [ 2050.734895][ C1] which belongs to the cache skbuff_head_cache of size 224 [ 2050.749520][ C1] The buggy address is located 50 bytes inside of [ 2050.749520][ C1] 224-byte region [ffff88804617fe40, ffff88804617ff20) [ 2050.762701][ C1] The buggy address belongs to the page: [ 2050.768347][ C1] page:ffffea0001185fc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88804617fe40 [ 2050.782129][ C1] flags: 0xfffe0000000200(slab) [ 2050.786964][ C1] raw: 00fffe0000000200 ffffea0002429cc8 ffffea00022e1cc8 ffff88821b77e8c0 [ 2050.795549][ C1] raw: ffff88804617fe40 ffff88804617f080 0000000100000009 0000000000000000 [ 2050.804140][ C1] page dumped because: kasan: bad access detected [ 2050.810754][ C1] [ 2050.813071][ C1] Memory state around the buggy address: [ 2050.818777][ C1] ffff88804617fd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2050.824700][ C0] vcan0: j1939_tp_rxtimer: 0x0000000024262694: abort rx timeout. Force session deactivation [ 2050.826829][ C1] ffff88804617fd80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 2050.826840][ C1] >ffff88804617fe00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 2050.826846][ C1] ^ [ 2050.826855][ C1] ffff88804617fe80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2050.826864][ C1] ffff88804617ff00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 2050.826868][ C1] ================================================================== [ 2050.826873][ C1] Disabling lock debugging due to kernel taint [ 2050.826955][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 2050.898203][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.8.0-rc4-syzkaller #0 [ 2050.907733][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.917862][ C1] Call Trace: [ 2050.921146][ C1] dump_stack+0x18f/0x20d [ 2050.925599][ C1] ? j1939_tp_txtimer+0x730/0x1e10 [ 2050.930704][ C1] panic+0x2e3/0x75c [ 2050.934590][ C1] ? __warn_printk+0xf3/0xf3 [ 2050.939254][ C1] ? asm_common_interrupt+0x1e/0x40 [ 2050.945031][ C1] ? trace_hardirqs_on+0x55/0x220 [ 2050.950077][ C1] ? j1939_tp_txtimer+0x787/0x1e10 [ 2050.955182][ C1] ? j1939_tp_txtimer+0x787/0x1e10 [ 2050.960317][ C1] end_report+0x4d/0x53 [ 2050.964458][ C1] kasan_report.cold+0xd/0x37 [ 2050.969152][ C1] ? exc_page_fault+0x170/0x170 [ 2050.974004][ C1] ? j1939_tp_txtimer+0x787/0x1e10 [ 2050.979118][ C1] check_memory_region+0x13d/0x180 [ 2050.984684][ C1] memcpy+0x20/0x60 [ 2050.988500][ C1] j1939_tp_txtimer+0x787/0x1e10 [ 2050.993448][ C1] ? j1939_tp_schedule_txtimer+0xb0/0xb0 [ 2050.999166][ C1] ? _raw_spin_unlock_irqrestore+0x4f/0xe0 [ 2051.004973][ C1] ? lock_is_held_type+0xb0/0xe0 [ 2051.009915][ C1] __hrtimer_run_queues+0x6a9/0xfc0 [ 2051.015113][ C1] ? j1939_tp_schedule_txtimer+0xb0/0xb0 [ 2051.020737][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 2051.026696][ C1] ? ktime_get_update_offsets_now+0x1c4/0x250 [ 2051.032848][ C1] hrtimer_run_softirq+0x172/0x340 [ 2051.037953][ C1] __do_softirq+0x34c/0xa60 [ 2051.042436][ C1] ? __local_bh_disable_ip+0x190/0x190 [ 2051.048144][ C1] run_ksoftirqd+0x89/0x100 [ 2051.052641][ C1] smpboot_thread_fn+0x655/0x9e0 [ 2051.057587][ C1] ? __smpboot_create_thread.part.0+0x340/0x340 [ 2051.063805][ C1] ? __kthread_parkme+0x13f/0x1e0 [ 2051.068816][ C1] ? __smpboot_create_thread.part.0+0x340/0x340 [ 2051.075040][ C1] kthread+0x3b5/0x4a0 [ 2051.079107][ C1] ? __kthread_bind_mask+0xc0/0xc0 [ 2051.084196][ C1] ? __kthread_bind_mask+0xc0/0xc0 [ 2051.089285][ C1] ret_from_fork+0x1f/0x30 [ 2051.095032][ C1] Kernel Offset: disabled [ 2051.099443][ C1] Rebooting in 86400 seconds..