ci starts bisection 2023-01-31 16:00:20.810569592 +0000 UTC m=+766134.756631655
bisecting fixing commit since 1d41d2e82623b40ee27811fe9ea38bafe2e722e9
building syzkaller on 8b9ca619df135211a89cc19719f2705d0016045d
ensuring issue is reproducible on original commit 1d41d2e82623b40ee27811fe9ea38bafe2e722e9

testing commit 1d41d2e82623b40ee27811fe9ea38bafe2e722e9 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: c2a8037c9641587ada3a6d849b9769f3536aaa0734ad494c836f5c6b772d33b9
all runs: crashed: WARNING in j1939_session_deactivate
testing current HEAD 9f266ccaa2f5228bfe67ad58a94ca4e0109b954a
testing commit 9f266ccaa2f5228bfe67ad58a94ca4e0109b954a gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 973522dce65d933e0629e572f3e97376b81318edc39648d6f7ad88ed3fbe9b72
all runs: crashed: WARNING in j1939_session_deactivate_activate_next
revisions tested: 2, total time: 22m24.667598567s (build: 15m1.682670063s, test: 6m32.720345911s)
the crash still happens on HEAD
commit msg: Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
crash: WARNING in j1939_session_deactivate_activate_next
vcan0: j1939_xtp_rx_abort_one: 0xffff88806cc05c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
vcan0: j1939_tp_rxtimer: 0xffff88801dcb6800: rx timeout, send abort
vcan0: j1939_tp_rxtimer: 0xffff888072420c00: rx timeout, send abort
vcan0: j1939_xtp_rx_abort_one: 0xffff88807cf26000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
------------[ cut here ]------------
WARNING: CPU: 0 PID: 15 at net/can/j1939/transport.c:1098 j1939_session_deactivate net/can/j1939/transport.c:1098 [inline]
WARNING: CPU: 0 PID: 15 at net/can/j1939/transport.c:1098 j1939_session_deactivate_activate_next+0x7b/0xa8 net/can/j1939/transport.c:1108
Modules linked in:
CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.2.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
RIP: 0010:j1939_session_deactivate net/can/j1939/transport.c:1098 [inline]
RIP: 0010:j1939_session_deactivate_activate_next+0x7b/0xa8 net/can/j1939/transport.c:1108
Code: e0 2a 48 c1 ea 03 8a 14 02 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 0c 84 d2 74 08 4c 89 ef e8 44 e9 e7 f8 8b 45 28 83 f8 01 77 02 <0f> 0b 48 89 ef e8 c2 a5 e4 fe 4c 89 e7 41 89 c5 e8 37 dd 05 00 45
RSP: 0018:ffffc900001479b8 EFLAGS: 00010246
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff88cd99f0
RDX: 1ffff1100f9e4c00 RSI: 0000000000000004 RDI: ffff88807cf26028
RBP: ffff88807cf26000 R08: 0000000000000000 R09: ffff88807cf2602b
R10: ffffed100f9e4c05 R11: 0000000000000001 R12: ffff888078d9d070
R13: ffff88807cf26028 R14: ffffffff8a11f4e0 R15: 0000000000000003
FS:  0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0e8d1a0000 CR3: 0000000023aed000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 j1939_xtp_rx_abort_one.cold+0x2c3/0x3ba net/can/j1939/transport.c:1348
 j1939_xtp_rx_abort net/can/j1939/transport.c:1359 [inline]
 j1939_tp_cmd_recv net/can/j1939/transport.c:2108 [inline]
 j1939_tp_recv+0x873/0xa00 net/can/j1939/transport.c:2141
 j1939_can_recv net/can/j1939/main.c:112 [inline]
 j1939_can_recv+0x60f/0x850 net/can/j1939/main.c:38
 deliver net/can/af_can.c:572 [inline]
 can_rcv_filter+0x4ce/0x7b0 net/can/af_can.c:606
 can_receive+0x2ae/0x4a0 net/can/af_can.c:663
 can_rcv+0x15e/0x1e0 net/can/af_can.c:687
 __netif_receive_skb_one_core+0x104/0x180 net/core/dev.c:5482
 process_backlog+0x326/0x730 net/core/dev.c:5924
 __napi_poll+0x9e/0x5c0 net/core/dev.c:6485
 napi_poll net/core/dev.c:6552 [inline]
 net_rx_action+0x8c8/0xcc0 net/core/dev.c:6663
 __do_softirq+0x1fb/0xadc kernel/softirq.c:571
 run_ksoftirqd kernel/softirq.c:934 [inline]
 run_ksoftirqd+0x31/0x60 kernel/softirq.c:926
 smpboot_thread_fn+0x55c/0x910 kernel/smpboot.c:164
 kthread+0x298/0x340 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>