vxcan0: j1939_xtp_rx_abort_one: 0xffff888034cc9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vxcan0: j1939_xtp_rx_abort_one: 0xffff888034ccb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. ------------[ cut here ]------------ WARNING: CPU: 1 PID: 12064 at net/can/j1939/transport.c:1098 j1939_session_deactivate net/can/j1939/transport.c:1098 [inline] WARNING: CPU: 1 PID: 12064 at net/can/j1939/transport.c:1098 j1939_session_deactivate_activate_next+0x95/0xd3 net/can/j1939/transport.c:1108 Modules linked in: CPU: 1 PID: 12064 Comm: syz-executor.1 Not tainted 6.1.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 RIP: 0010:j1939_session_deactivate net/can/j1939/transport.c:1098 [inline] RIP: 0010:j1939_session_deactivate_activate_next+0x95/0xd3 net/can/j1939/transport.c:1108 Code: 03 38 d0 7c 0c 84 d2 74 08 4c 89 ef e8 2d bf de f7 8b 5d 28 bf 01 00 00 00 89 de e8 6e f1 91 f7 83 fb 01 77 07 e8 b4 f4 91 f7 <0f> 0b e8 ad f4 91 f7 48 89 ef e8 f5 dd c9 fe 4c 89 e7 89 c3 e8 6b RSP: 0000:ffffc900001e0aa8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000100 RDX: ffff8880353fba80 RSI: ffffffff89ee255c RDI: 0000000000000005 RBP: ffff888034ccb400 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801bc2d070 R13: ffff888034ccb428 R14: ffffffff8b700ca0 R15: 0000000000000003 FS: 00007fea3ede9700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000001c848000 CR4: 0000000000350ee0 Call Trace: j1939_xtp_rx_abort_one.cold+0x301/0x403 net/can/j1939/transport.c:1348 j1939_xtp_rx_abort net/can/j1939/transport.c:1359 [inline] j1939_tp_cmd_recv net/can/j1939/transport.c:2111 [inline] j1939_tp_recv+0x658/0xcd0 net/can/j1939/transport.c:2141 j1939_can_recv net/can/j1939/main.c:112 [inline] j1939_can_recv+0x78e/0xa30 net/can/j1939/main.c:38 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0x5d4/0x8d0 net/can/af_can.c:607 can_receive+0x31d/0x580 net/can/af_can.c:664 can_rcv+0x166/0x1a0 net/can/af_can.c:688 __netif_receive_skb_one_core+0x114/0x180 net/core/dev.c:5489 __netif_receive_skb+0x1f/0x1c0 net/core/dev.c:5603 process_backlog+0x3e4/0x810 net/core/dev.c:5931 __napi_poll+0xb8/0x770 net/core/dev.c:6498 napi_poll net/core/dev.c:6565 [inline] net_rx_action+0xa00/0xde0 net/core/dev.c:6676 __do_softirq+0x1fb/0xadc kernel/softirq.c:571 do_softirq.part.0+0xde/0x130 kernel/softirq.c:472 do_softirq kernel/softirq.c:464 [inline] __local_bh_enable_ip+0x106/0x130 kernel/softirq.c:396 local_bh_enable include/linux/bottom_half.h:33 [inline] fpregs_unlock arch/x86/include/asm/fpu/api.h:80 [inline] copy_fpstate_to_sigframe+0x322/0xbf0 arch/x86/kernel/fpu/signal.c:233 get_sigframe.constprop.0.isra.0+0x433/0x5e0 arch/x86/kernel/signal.c:297 __setup_rt_frame arch/x86/kernel/signal.c:472 [inline] setup_rt_frame arch/x86/kernel/signal.c:782 [inline] handle_signal arch/x86/kernel/signal.c:826 [inline] arch_do_signal_or_restart+0xc80/0x2300 arch/x86/kernel/signal.c:871 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203 irqentry_exit_to_user_mode+0x9/0x40 kernel/entry/common.c:309 exc_page_fault+0xc0/0x170 arch/x86/mm/fault.c:1578 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570 RIP: 0033:0x7fea3e07b566 Code: 00 00 00 00 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 6a 0f 6f 20 66 0f 74 e0 66 0f d7 d4 85 d2 74 04 0f bc c2 c3 48 83 RSP: 002b:00007fea3ede8f88 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 00000000000001ff RSI: 0000000020000040 RDI: 0000000000000000 RBP: 00007fea3ede9020 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000000 R11: 0000000000000246 R12: 0000000020000000 R13: 0000000020000040 R14: 00007fea3ede8fe0 R15: 0000000000000000