vxcan0: j1939_tp_rxtimer: 0x00000000e4898e71: rx timeout, send abort vxcan0: j1939_xtp_rx_abort_one: 0x00000000a976de01: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. ------------[ cut here ]------------ WARNING: CPU: 1 PID: 19 at net/can/j1939/transport.c:1096 j1939_session_deactivate net/can/j1939/transport.c:1096 [inline] WARNING: CPU: 1 PID: 19 at net/can/j1939/transport.c:1096 j1939_session_deactivate_activate_next net/can/j1939/transport.c:1106 [inline] WARNING: CPU: 1 PID: 19 at net/can/j1939/transport.c:1096 j1939_xtp_rx_abort_one+0x2fc/0x334 net/can/j1939/transport.c:1346 Modules linked in: CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 6.0.0-rc4-syzkaller-17255-ga6b443748715 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : j1939_session_deactivate net/can/j1939/transport.c:1096 [inline] pc : j1939_session_deactivate_activate_next net/can/j1939/transport.c:1106 [inline] pc : j1939_xtp_rx_abort_one+0x2fc/0x334 net/can/j1939/transport.c:1346 lr : j1939_session_deactivate net/can/j1939/transport.c:1096 [inline] lr : j1939_session_deactivate_activate_next net/can/j1939/transport.c:1106 [inline] lr : j1939_xtp_rx_abort_one+0x2fc/0x334 net/can/j1939/transport.c:1346 sp : ffff80000f28b9c0 x29: ffff80000f28b9c0 x28: ffff0001fefefed0 x27: ffff0000f17ba200 x26: 0000000000000000 x25: 0000000000000009 x24: 0000000000000009 x23: 0000000000000000 x22: ffff0000fb748000 x21: 0000000000000001 x20: ffff0001199ff070 x19: ffff000113f43400 x18: 000000000000ba7e x17: 000000000000b67e x16: ffff80000db78658 x15: ffff0000c02ecf80 x14: 00000000000001d8 x13: 00000000ffffffff x12: ffff0000c02ecf80 x11: ff8080000b924eec x10: 0000000000000000 x9 : ffff80000b924eec x8 : ffff0000c02ecf80 x7 : ffff80000b924dec x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000002 Call trace: j1939_session_deactivate net/can/j1939/transport.c:1096 [inline] j1939_session_deactivate_activate_next net/can/j1939/transport.c:1106 [inline] j1939_xtp_rx_abort_one+0x2fc/0x334 net/can/j1939/transport.c:1346 j1939_xtp_rx_abort net/can/j1939/transport.c:1357 [inline] j1939_tp_cmd_recv+0x3a0/0xa08 net/can/j1939/transport.c:2106 j1939_tp_recv+0x150/0x304 net/can/j1939/transport.c:2139 j1939_can_recv+0x33c/0x494 net/can/j1939/main.c:108 deliver net/can/af_can.c:574 [inline] can_rcv_filter+0x134/0x30c net/can/af_can.c:608 can_receive+0x194/0x26c net/can/af_can.c:665 can_rcv+0x80/0x138 net/can/af_can.c:696 __netif_receive_skb_one_core net/core/dev.c:5485 [inline] __netif_receive_skb+0x70/0x14c net/core/dev.c:5599 process_backlog+0x23c/0x384 net/core/dev.c:5927 __napi_poll+0x5c/0x24c net/core/dev.c:6511 napi_poll+0x110/0x484 net/core/dev.c:6578 net_rx_action+0x18c/0x40c net/core/dev.c:6689 _stext+0x168/0x37c run_ksoftirqd+0x4c/0x21c kernel/softirq.c:934 smpboot_thread_fn+0x248/0x3e4 kernel/smpboot.c:164 kthread+0x12c/0x158 kernel/kthread.c:376 ret_from_fork+0x10/0x20 irq event stamp: 22809985 hardirqs last enabled at (22809984): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (22809984): [] _raw_spin_unlock_irqrestore+0x48/0x8c kernel/locking/spinlock.c:194 hardirqs last disabled at (22809985): [] el1_dbg+0x24/0x5c arch/arm64/kernel/entry-common.c:395 softirqs last enabled at (22809950): [] _stext+0x2e4/0x37c softirqs last disabled at (22809955): [] run_ksoftirqd+0x4c/0x21c kernel/softirq.c:934 ---[ end trace 0000000000000000 ]--- vxcan0: j1939_xtp_rx_abort_one: 0x00000000f88c8512: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vxcan0: j1939_xtp_rx_abort_one: 0x0000000099d51517: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vxcan0: j1939_tp_rxtimer: 0x00000000e4898e71: abort rx timeout. Force session deactivation vxcan0: j1939_tp_rxtimer: 0x0000000005fa32a6: rx timeout, send abort vxcan0: j1939_tp_rxtimer: 0x0000000005fa32a6: abort rx timeout. Force session deactivation vxcan0: j1939_xtp_rx_dat_one: 0x000000004108bcfc: last 15 vxcan0: j1939_xtp_rx_dat_one: 0x0000000015fb1bb3: last 15 vxcan0: j1939_xtp_rx_abort_one: 0x000000004108bcfc: 0x00000: (5) Maximal retransmit request limit reached vxcan0: j1939_xtp_rx_abort_one: 0x0000000015fb1bb3: 0x00000: (5) Maximal retransmit request limit reached vxcan0: j1939_tp_rxtimer: 0x000000004f5e571f: rx timeout, send abort vxcan0: j1939_tp_rxtimer: 0x000000004f5e571f: abort rx timeout. Force session deactivation