vcan0: j1939_xtp_rx_dat_one: 0xffff8880775fcc00: last 15
vcan0: j1939_xtp_rx_abort_one: 0xffff8880234fb000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
------------[ cut here ]------------
WARNING: CPU: 1 PID: 15697 at net/can/j1939/transport.c:1090 j1939_session_deactivate+0xaf/0xd0 net/can/j1939/transport.c:1090
Modules linked in:
CPU: 1 PID: 15697 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:j1939_session_deactivate+0xaf/0xd0 net/can/j1939/transport.c:1090
Code: fd 01 76 21 e8 62 eb 4e f9 48 89 ef e8 2a fc ff ff 4c 89 e7 41 89 c5 e8 af 42 27 01 44 89 e8 5d 41 5c 41 5d c3 e8 41 eb 4e f9 <0f> 0b eb d6 4c 89 ef e8 d5 9d 95 f9 eb b5 48 89 ef e8 db 9d 95 f9
RSP: 0018:ffffc90000fd8ab0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000100
RDX: ffff88803ad0c0c0 RSI: ffffffff8828a52f RDI: 0000000000000003
RBP: ffff8880234fb000 R08: 0000000000000001 R09: ffff8880234fb02b
R10: ffffffff8828a503 R11: 0000000000000001 R12: ffff88802e5e5070
R13: 0000000000000001 R14: ffff88807c26bc18 R15: ffffffff8ac359c0
FS: 00005555565a9400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005555565b2848 CR3: 0000000024b26000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
j1939_session_deactivate_activate_next+0x12/0x35 net/can/j1939/transport.c:1100
j1939_xtp_rx_abort_one.cold+0x20b/0x33c net/can/j1939/transport.c:1340
j1939_xtp_rx_abort net/can/j1939/transport.c:1351 [inline]
j1939_tp_cmd_recv net/can/j1939/transport.c:2100 [inline]
j1939_tp_recv+0xb28/0xcb0 net/can/j1939/transport.c:2133
j1939_can_recv+0x6ff/0x9a0 net/can/j1939/main.c:108
deliver net/can/af_can.c:574 [inline]
can_rcv_filter+0x5d4/0x8d0 net/can/af_can.c:608
can_receive+0x31d/0x580 net/can/af_can.c:665
can_rcv+0x120/0x1c0 net/can/af_can.c:696
__netif_receive_skb_one_core+0x114/0x180 net/core/dev.c:5351
__netif_receive_skb+0x24/0x1b0 net/core/dev.c:5465
process_backlog+0x2a5/0x6c0 net/core/dev.c:5797
__napi_poll+0xaf/0x440 net/core/dev.c:6365
napi_poll net/core/dev.c:6432 [inline]
net_rx_action+0x801/0xb40 net/core/dev.c:6519
__do_softirq+0x29b/0x9c2 kernel/softirq.c:558
invoke_softirq kernel/softirq.c:432 [inline]
__irq_exit_rcu+0x123/0x180 kernel/softirq.c:637
irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:27 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:166 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 kernel/kcov.c:200
Code: 48 89 ef 5d e9 a1 3f 46 00 5d be 03 00 00 00 e9 06 f8 65 02 66 0f 1f 44 00 00 48 8b be b0 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 <65> 8b 05 49 df 8a 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b
RSP: 0018:ffffc900069378e0 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000000
RDX: ffff88803ad0c0c0 RSI: ffffffff81d8ee3e RDI: 0000000000000003
RBP: ffffc900069379f0 R08: 0000000000000000 R09: ffffffff8ffd29ef
R10: ffffffff81d8ee34 R11: 0000000000000001 R12: 0000000000000000
R13: ffffc90006937db8 R14: dffffc0000000000 R15: dffffc0000000000
__seqprop_spinlock_sequence include/linux/seqlock.h:277 [inline]
read_seqbegin include/linux/seqlock.h:840 [inline]
read_seqbegin_or_lock include/linux/seqlock.h:1144 [inline]
prepend_path+0x3b4/0xea0 fs/d_path.c:170
d_absolute_path+0xef/0x1a0 fs/d_path.c:233
tomoyo_get_absolute_path security/tomoyo/realpath.c:101 [inline]
tomoyo_realpath_from_path+0x288/0x620 security/tomoyo/realpath.c:276
tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
tomoyo_path_number_perm+0x1d5/0x590 security/tomoyo/file.c:723
tomoyo_path_mkdir+0x98/0xe0 security/tomoyo/tomoyo.c:166
security_path_mkdir+0xe8/0x160 security/security.c:1133
do_mkdirat+0x143/0x300 fs/namei.c:3955
__do_sys_mkdir fs/namei.c:3979 [inline]
__se_sys_mkdir fs/namei.c:3977 [inline]
__x64_sys_mkdir+0xf2/0x140 fs/namei.c:3977
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f10b4030167
Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc7bd82098 EFLAGS: 00000202 ORIG_RAX: 0000000000000053
RAX: ffffffffffffffda RBX: 00007ffc7bd82120 RCX: 00007f10b4030167
RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffc7bd82120
RBP: 00007ffc7bd820fc R08: 0000000000000000 R09: 0000000000000005
R10: 00007ffc7bd81e35 R11: 0000000000000202 R12: 0000000000000032
R13: 00000000000bb8d9 R14: 0000000000000004 R15: 00007ffc7bd82160
----------------
Code disassembly (best guess):
0: 48 89 ef mov %rbp,%rdi
3: 5d pop %rbp
4: e9 a1 3f 46 00 jmpq 0x463faa
9: 5d pop %rbp
a: be 03 00 00 00 mov $0x3,%esi
f: e9 06 f8 65 02 jmpq 0x265f81a
14: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1)
1a: 48 8b be b0 01 00 00 mov 0x1b0(%rsi),%rdi
21: e8 b4 ff ff ff callq 0xffffffda
26: 31 c0 xor %eax,%eax
28: c3 retq
29: 90 nop
* 2a: 65 8b 05 49 df 8a 7e mov %gs:0x7e8adf49(%rip),%eax # 0x7e8adf7a <-- trapping instruction
31: 89 c1 mov %eax,%ecx
33: 48 8b 34 24 mov (%rsp),%rsi
37: 81 e1 00 01 00 00 and $0x100,%ecx
3d: 65 gs
3e: 48 rex.W
3f: 8b .byte 0x8b