vcan0: j1939_xtp_rx_abort_one: 0xffff88807d167800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
vcan0: j1939_xtp_rx_abort_one: 0xffff88802a38ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
------------[ cut here ]------------
WARNING: CPU: 0 PID: 11 at net/can/j1939/transport.c:1098 j1939_session_deactivate net/can/j1939/transport.c:1098 [inline]
WARNING: CPU: 0 PID: 11 at net/can/j1939/transport.c:1098 j1939_session_deactivate_activate_next+0x95/0xd3 net/can/j1939/transport.c:1108
Modules linked in:
CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.0-syzkaller-12648-g6feb57c2fd7c #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Workqueue: bat_events batadv_nc_worker
RIP: 0010:j1939_session_deactivate net/can/j1939/transport.c:1098 [inline]
RIP: 0010:j1939_session_deactivate_activate_next+0x95/0xd3 net/can/j1939/transport.c:1108
Code: 03 38 d0 7c 0c 84 d2 74 08 4c 89 ef e8 d1 e1 cc f7 8b 5d 28 bf 01 00 00 00 89 de e8 12 de 7e f7 83 fb 01 77 07 e8 58 e1 7e f7 <0f> 0b e8 51 e1 7e f7 48 89 ef e8 69 0d c8 fe 4c 89 e7 89 c3 e8 7f
RSP: 0018:ffffc90000007a88 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000100
RDX: ffff88813fe1ba80 RSI: ffffffff8a027068 RDI: 0000000000000005
RBP: ffff88802a38ec00 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802225d070
R13: ffff88802a38ec28 R14: ffffffff8b700ac0 R15: 0000000000000003
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000052bf04 CR3: 0000000028553000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 j1939_xtp_rx_abort_one.cold+0x301/0x403 net/can/j1939/transport.c:1348
 j1939_xtp_rx_abort net/can/j1939/transport.c:1359 [inline]
 j1939_tp_cmd_recv net/can/j1939/transport.c:2111 [inline]
 j1939_tp_recv+0x658/0xcd0 net/can/j1939/transport.c:2141
 j1939_can_recv net/can/j1939/main.c:112 [inline]
 j1939_can_recv+0x78e/0xa30 net/can/j1939/main.c:38
 deliver net/can/af_can.c:572 [inline]
 can_rcv_filter+0x5d4/0x8d0 net/can/af_can.c:606
 can_receive+0x31d/0x580 net/can/af_can.c:663
 can_rcv+0x1e1/0x230 net/can/af_can.c:687
 __netif_receive_skb_one_core+0x114/0x180 net/core/dev.c:5482
 __netif_receive_skb+0x1f/0x1c0 net/core/dev.c:5596
 process_backlog+0x3e4/0x810 net/core/dev.c:5924
 __napi_poll+0xb8/0x770 net/core/dev.c:6485
 napi_poll net/core/dev.c:6552 [inline]
 net_rx_action+0xa00/0xde0 net/core/dev.c:6663
 __do_softirq+0x1fb/0xadc kernel/softirq.c:571
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650
 irq_exit_rcu+0x9/0x20 kernel/softirq.c:662
 sysvec_apic_timer_interrupt+0x97/0xc0 arch/x86/kernel/apic/apic.c:1107
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:rcu_is_watching+0x80/0xb0 kernel/rcu/tree.c:716
Code: ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1c 8b 03 c1 e8 02 83 e0 01 65 ff 0d 2c 9b 98 7e 74 03 5b 5d <c3> e8 fa 6f 95 ff 5b 5d c3 48 89 df e8 2f 41 64 00 eb da e8 48 41
RSP: 0018:ffffc90000107b78 EFLAGS: 00000282
RAX: 0000000000000001 RBX: 1ffff92000020f75 RCX: ffffffff8163f840
RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffffff8c12f900
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8e72dad7
R10: fffffbfff1ce5b5a R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000000 R14: ffffffff8c7917c0 R15: 0000000000000000
 rcu_read_lock_held_common kernel/rcu/update.c:108 [inline]
 rcu_read_lock_sched_held+0x20/0x70 kernel/rcu/update.c:123
 trace_lock_acquire include/trace/events/lock.h:24 [inline]
 lock_acquire+0x500/0x630 kernel/locking/lockdep.c:5639
 rcu_lock_acquire include/linux/rcupdate.h:325 [inline]
 rcu_read_lock include/linux/rcupdate.h:764 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline]
 batadv_nc_worker+0x131/0xfa0 net/batman-adv/network-coding.c:719
 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289
 worker_thread+0x669/0x1090 kernel/workqueue.c:2436
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	03 0f                	add    (%rdi),%ecx
   2:	b6 14                	mov    $0x14,%dh
   4:	02 48 89             	add    -0x77(%rax),%cl
   7:	d8 83 e0 07 83 c0    	fadds  -0x3f7cf820(%rbx)
   d:	03 38                	add    (%rax),%edi
   f:	d0 7c 04 84          	sarb   -0x7c(%rsp,%rax,1)
  13:	d2 75 1c             	shlb   %cl,0x1c(%rbp)
  16:	8b 03                	mov    (%rbx),%eax
  18:	c1 e8 02             	shr    $0x2,%eax
  1b:	83 e0 01             	and    $0x1,%eax
  1e:	65 ff 0d 2c 9b 98 7e 	decl   %gs:0x7e989b2c(%rip)        # 0x7e989b51
  25:	74 03                	je     0x2a
  27:	5b                   	pop    %rbx
  28:	5d                   	pop    %rbp
* 29:	c3                   	retq <-- trapping instruction
  2a:	e8 fa 6f 95 ff       	callq  0xff957029
  2f:	5b                   	pop    %rbx
  30:	5d                   	pop    %rbp
  31:	c3                   	retq
  32:	48 89 df             	mov    %rbx,%rdi
  35:	e8 2f 41 64 00       	callq  0x644169
  3a:	eb da                	jmp    0x16
  3c:	e8                   	.byte 0xe8
  3d:	48                   	rex.W
  3e:	41                   	rex.B