vcan0: j1939_tp_rxtimer: 0xffff88807e414c00: rx timeout, send abort vcan0: j1939_tp_rxtimer: 0xffff88807e415000: rx timeout, send abort vcan0: j1939_xtp_rx_abort_one: 0xffff88806eb95800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vcan0: j1939_xtp_rx_abort_one: 0xffff88806eb95c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. ------------[ cut here ]------------ WARNING: CPU: 1 PID: 21 at net/can/j1939/transport.c:1098 j1939_session_deactivate_activate_next net/can/j1939/transport.c:1108 [inline] WARNING: CPU: 1 PID: 21 at net/can/j1939/transport.c:1098 j1939_xtp_rx_abort_one+0x609/0x720 net/can/j1939/transport.c:1348 Modules linked in: CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.2.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 RIP: 0010:j1939_session_deactivate net/can/j1939/transport.c:1098 [inline] RIP: 0010:j1939_session_deactivate_activate_next net/can/j1939/transport.c:1108 [inline] RIP: 0010:j1939_xtp_rx_abort_one+0x609/0x720 net/can/j1939/transport.c:1348 Code: e9 e7 fa ff ff e8 37 1d c9 f7 4c 89 f7 be 03 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c 99 7e fa e8 17 1d c9 f7 <0f> 0b e9 ac fd ff ff e8 0b 1d c9 f7 0f 0b e9 26 fe ff ff 89 e9 80 RSP: 0018:ffffc900001b75f8 EFLAGS: 00010246 RAX: ffffffff89c4aad9 RBX: 0000000000000001 RCX: ffff888012a41d40 RDX: 0000000000000301 RSI: 0000000000000001 RDI: 0000000000000002 RBP: 1ffff1100dd72b80 R08: ffffffff89c4a87e R09: ffffed100dd72b86 R10: ffffed100dd72b86 R11: 1ffff1100dd72b85 R12: 0000000000000009 R13: ffff88806eb95c00 R14: dffffc0000000000 R15: ffff888021129070 FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9198b17160 CR3: 000000002b734000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: j1939_xtp_rx_abort net/can/j1939/transport.c:1360 [inline] j1939_tp_cmd_recv net/can/j1939/transport.c:2108 [inline] j1939_tp_recv+0x933/0x14f0 net/can/j1939/transport.c:2141 j1939_can_recv+0x700/0xb50 net/can/j1939/main.c:112 deliver net/can/af_can.c:572 [inline] can_rcv_filter+0x35e/0x800 net/can/af_can.c:606 can_receive+0x2e8/0x410 net/can/af_can.c:663 can_rcv+0x13c/0x250 net/can/af_can.c:687 __netif_receive_skb_one_core net/core/dev.c:5482 [inline] __netif_receive_skb+0x1c5/0x500 net/core/dev.c:5596 process_backlog+0x568/0x920 net/core/dev.c:5924 __napi_poll+0xbe/0x4b0 net/core/dev.c:6485 napi_poll net/core/dev.c:6552 [inline] net_rx_action+0x76c/0x1100 net/core/dev.c:6663 __do_softirq+0x277/0x75b kernel/softirq.c:571 run_ksoftirqd+0xc1/0x120 kernel/softirq.c:934 smpboot_thread_fn+0x533/0xa10 kernel/smpboot.c:164 kthread+0x266/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308