bisecting fixing commit since 1d41d2e82623b40ee27811fe9ea38bafe2e722e9
building syzkaller on 8b9ca619df135211a89cc19719f2705d0016045d
testing commit 1d41d2e82623b40ee27811fe9ea38bafe2e722e9
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 4e0e497aef6aa1e65be4fa79ce5da54b4f841d38ec646bc8519f652646c9aca8
all runs: crashed: WARNING in j1939_session_deactivate
testing current HEAD b13baccc3850ca8b8cccbf8ed9912dbaa0fdf7f3
testing commit b13baccc3850ca8b8cccbf8ed9912dbaa0fdf7f3
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 1f68577a5dde27e8d0f8c909ec6b5a0266bdbf3035313ca122b4e125c9e8de6e
run #0: crashed: INFO: rcu detected stall in corrupted
run #1: crashed: INFO: rcu detected stall in corrupted
run #2: crashed: INFO: rcu detected stall in corrupted
run #3: crashed: INFO: rcu detected stall in corrupted
run #4: crashed: INFO: rcu detected stall in corrupted
run #5: crashed: INFO: rcu detected stall in corrupted
run #6: crashed: WARNING in j1939_session_deactivate_activate_next
run #7: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor470620399" "root@10.128.1.117:./syz-executor470620399"]: exit status 1
ssh: connect to host 10.128.1.117 port 22: Connection timed out
lost connection

run #8: OK
run #9: OK
revisions tested: 2, total time: 27m47.511182864s (build: 12m17.064144689s, test: 14m58.095027045s)
the crash still happens on HEAD
commit msg: Linux 5.19-rc2
crash: WARNING in j1939_session_deactivate_activate_next
vcan0: j1939_xtp_rx_abort_one: 0xffff888020141c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
vcan0: j1939_tp_txtimer: 0xffff88807619ac00: tx retry count reached
------------[ cut here ]------------
WARNING: CPU: 0 PID: 15 at net/can/j1939/transport.c:1090 j1939_session_deactivate net/can/j1939/transport.c:1090 [inline]
WARNING: CPU: 0 PID: 15 at net/can/j1939/transport.c:1090 j1939_session_deactivate_activate_next+0x7b/0xa8 net/can/j1939/transport.c:1100
Modules linked in:
CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 5.19.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:j1939_session_deactivate net/can/j1939/transport.c:1090 [inline]
RIP: 0010:j1939_session_deactivate_activate_next+0x7b/0xa8 net/can/j1939/transport.c:1100
Code: e0 2a 48 c1 ea 03 8a 14 02 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 0c 84 d2 74 08 4c 89 ef e8 79 ba 1b f9 8b 45 28 83 f8 01 77 02 <0f> 0b 48 89 ef e8 67 88 f5 fe 4c 89 e7 41 89 c5 e8 9c 88 05 00 45
RSP: 0018:ffffc90000147bd8 EFLAGS: 00010246
RAX: 0000000000000001 RBX: 00000000000001fe RCX: ffffffff8893f37b
RDX: 1ffff1100ec33500 RSI: 0000000000000004 RDI: ffff88807619ac28
RBP: ffff88807619ac00 R08: 0000000000000000 R09: ffff88807619ac2b
R10: ffffed100ec33585 R11: 0000000000000000 R12: ffff888062a89070
R13: ffff88807619ac28 R14: ffff88807619ac00 R15: ffff88807619acf8
FS:  0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbf03108900 CR3: 000000001e36d000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 j1939_tp_txtimer.cold+0x1d2/0x350 net/can/j1939/transport.c:1169
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x4d7/0xb00 kernel/time/hrtimer.c:1749
 hrtimer_run_softirq+0x176/0x340 kernel/time/hrtimer.c:1766
 __do_softirq+0x29b/0x9c2 kernel/softirq.c:571
 run_ksoftirqd kernel/softirq.c:934 [inline]
 run_ksoftirqd+0x2d/0x60 kernel/softirq.c:926
 smpboot_thread_fn+0x548/0x8c0 kernel/smpboot.c:164
 kthread+0x299/0x340 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302
 </TASK>