vcan0: j1939_tp_rxtimer: 0xffff8880720e6000: rx timeout, send abort vcan0: j1939_xtp_rx_abort_one: 0xffff8880720e6000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. ------------[ cut here ]------------ WARNING: CPU: 1 PID: 3596 at net/can/j1939/socket.c:181 j1939_sk_queue_activate_next_locked net/can/j1939/socket.c:181 [inline] WARNING: CPU: 1 PID: 3596 at net/can/j1939/socket.c:181 j1939_sk_queue_activate_next+0x34d/0x460 net/can/j1939/socket.c:205 Modules linked in: CPU: 1 PID: 3596 Comm: syz-fuzzer Not tainted 5.18.0-syzkaller-10212-g263efe85a4b6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:j1939_sk_queue_activate_next_locked net/can/j1939/socket.c:181 [inline] RIP: 0010:j1939_sk_queue_activate_next+0x34d/0x460 net/can/j1939/socket.c:205 Code: 1c 83 c0 0a 89 44 24 04 eb 9d 48 c7 c7 4c df bb 8d e8 27 5d 78 f9 e9 73 fd ff ff e8 1d 5d 78 f9 e9 19 fe ff ff e8 f3 9c 2b f9 <0f> 0b 49 8d bf b8 00 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 RSP: 0000:ffffc90002fdf998 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff88801d01e000 RCX: 0000000000000100 RDX: ffff8880273e9d80 RSI: ffffffff884ee75d RDI: 0000000000000005 RBP: ffff88801d01e5b0 R08: 0000000000000005 R09: 0000000000000000 R10: 00000000fffffff5 R11: 1ffffffff1fe345a R12: ffff88801bdf1400 R13: ffff88801d01e5f0 R14: dffffc0000000000 R15: ffff88801bdf1418 FS: 000000c000032890(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5a16612ce8 CR3: 0000000072967000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: j1939_session_deactivate_activate_next+0xc8/0xd3 net/can/j1939/transport.c:1101 j1939_xtp_rx_abort_one.cold+0x20b/0x33c net/can/j1939/transport.c:1340 j1939_xtp_rx_abort net/can/j1939/transport.c:1351 [inline] j1939_tp_cmd_recv net/can/j1939/transport.c:2100 [inline] j1939_tp_recv+0xb28/0xcb0 net/can/j1939/transport.c:2133 j1939_can_recv+0x6ff/0x9a0 net/can/j1939/main.c:108 deliver net/can/af_can.c:574 [inline] can_rcv_filter+0x5d4/0x8d0 net/can/af_can.c:608 can_receive+0x31d/0x580 net/can/af_can.c:665 can_rcv+0x120/0x1c0 net/can/af_can.c:696 __netif_receive_skb_one_core+0x114/0x180 net/core/dev.c:5478 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5592 process_backlog+0x3a0/0x7c0 net/core/dev.c:5920 __napi_poll+0xb3/0x6e0 net/core/dev.c:6486 napi_poll net/core/dev.c:6553 [inline] net_rx_action+0x9c1/0xd90 net/core/dev.c:6664 __do_softirq+0x29b/0x9c2 kernel/softirq.c:571 invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650 irq_exit_rcu+0x5/0x20 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x45/0xc0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0033:0x40c4bf Code: 4c 8b 05 34 29 45 01 0f 1f 40 00 4d 85 c0 0f 84 e9 06 00 00 48 85 db 74 0b 48 83 7b 08 00 41 0f 94 c1 eb 06 41 b9 01 00 00 00 <48> 89 74 24 50 4c 89 44 24 40 44 88 4c 24 26 48 89 54 24 60 48 3d RSP: 002b:000000c004bf6f10 EFLAGS: 00000246 RAX: 0000000000000010 RBX: 0000000000687380 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 000000c000032800 RDI: 000000c006adbed0 RBP: 000000c004bf6f80 R08: 00007f5a3d2c45b8 R09: 000000c006adbe01 R10: 00007f5a0d8923f8 R11: 0000000000000000 R12: 000000c004bf7038 R13: 0000000000000001 R14: 000000c0002501a0 R15: ffffffffffffffff