}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={0x0}}, 0x0) [ 1096.150934][ T2981] device bond165 entered promiscuous mode [ 1096.176659][ T2988] FAULT_INJECTION: forcing a failure. [ 1096.176659][ T2988] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.191933][ T2988] CPU: 0 PID: 2988 Comm: syz-executor.5 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1096.202390][ T2988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1096.212475][ T2988] Call Trace: [ 1096.215779][ T2988] [ 1096.218743][ T2988] dump_stack_lvl+0xcd/0x134 [ 1096.223368][ T2988] should_fail.cold+0x5/0xa [ 1096.227897][ T2988] ? __kernfs_new_node+0xd4/0x8b0 [ 1096.232954][ T2988] should_failslab+0x5/0x10 [ 1096.237484][ T2988] kmem_cache_alloc+0x5e/0x3a0 [ 1096.242378][ T2988] __kernfs_new_node+0xd4/0x8b0 [ 1096.247249][ T2988] ? kernfs_path_from_node+0x60/0x60 [ 1096.252661][ T2988] ? up_write+0x148/0x470 [ 1096.257000][ T2988] ? kernfs_activate+0x1c4/0x240 [ 1096.261967][ T2988] kernfs_new_node+0x93/0x120 [ 1096.266688][ T2988] __kernfs_create_file+0x51/0x350 [ 1096.271835][ T2988] sysfs_add_file_mode_ns+0x20f/0x3f0 [ 1096.277231][ T2988] sysfs_merge_group+0x196/0x310 [ 1096.282274][ T2988] ? sysfs_update_group+0x30/0x30 [ 1096.287328][ T2988] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1096.293606][ T2988] dpm_sysfs_add+0x241/0x290 [ 1096.298223][ T2988] device_add+0xac4/0x1ee0 [ 1096.302660][ T2988] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 1096.309185][ T2988] ? __init_waitqueue_head+0x6b/0xd0 [ 1096.314511][ T2988] netdev_register_kobject+0x181/0x430 [ 1096.320022][ T2988] register_netdevice+0xd31/0x1500 [ 1096.325155][ T2988] ? netdev_change_features+0xb0/0xb0 [ 1096.330545][ T2988] ? br_changelink+0x15e0/0x15e0 [ 1096.335514][ T2988] br_dev_newlink+0x23/0x110 [ 1096.340291][ T2988] ? br_changelink+0x15e0/0x15e0 [ 1096.345241][ T2988] __rtnl_newlink+0x106e/0x1750 [ 1096.350114][ T2988] ? rtnl_setlink+0x3c0/0x3c0 [ 1096.354813][ T2988] ? is_bpf_text_address+0x77/0x170 [ 1096.360036][ T2988] ? lock_downgrade+0x6e0/0x6e0 [ 1096.364900][ T2988] ? unwind_next_frame+0xee1/0x1ce0 [ 1096.370110][ T2988] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1096.376205][ T2988] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1096.381954][ T2988] ? is_bpf_text_address+0x99/0x170 [ 1096.387171][ T2988] ? kernel_text_address+0x39/0x80 [ 1096.392298][ T2988] ? __kernel_text_address+0x9/0x30 [ 1096.397506][ T2988] ? unwind_get_return_address+0x51/0x90 [ 1096.403161][ T2988] ? create_prof_cpu_mask+0x20/0x20 [ 1096.408371][ T2988] ? arch_stack_walk+0x93/0xe0 [ 1096.413203][ T2988] ? kmem_cache_alloc_trace+0x42/0x2c0 [ 1096.418872][ T2988] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1096.424438][ T2988] rtnl_newlink+0x64/0xa0 [ 1096.428778][ T2988] ? __rtnl_newlink+0x1750/0x1750 [ 1096.433834][ T2988] rtnetlink_rcv_msg+0x413/0xb80 [ 1096.438814][ T2988] ? rtnl_newlink+0xa0/0xa0 [ 1096.443357][ T2988] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1096.448682][ T2988] netlink_rcv_skb+0x153/0x420 [ 1096.453469][ T2988] ? rtnl_newlink+0xa0/0xa0 [ 1096.457978][ T2988] ? netlink_ack+0xa60/0xa60 [ 1096.462571][ T2988] ? netlink_deliver_tap+0x1a2/0xc30 [ 1096.467954][ T2988] ? netlink_deliver_tap+0x1b1/0xc30 [ 1096.473253][ T2988] netlink_unicast+0x539/0x7e0 [ 1096.478033][ T2988] ? netlink_attachskb+0x880/0x880 [ 1096.483157][ T2988] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1096.489417][ T2988] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1096.495684][ T2988] ? __phys_addr_symbol+0x2c/0x70 [ 1096.500723][ T2988] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1096.506453][ T2988] ? __check_object_size+0x16e/0x310 [ 1096.511754][ T2988] netlink_sendmsg+0x904/0xe00 [ 1096.516538][ T2988] ? netlink_unicast+0x7e0/0x7e0 [ 1096.521493][ T2988] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1096.527747][ T2988] ? netlink_unicast+0x7e0/0x7e0 [ 1096.532695][ T2988] sock_sendmsg+0xcf/0x120 [ 1096.537125][ T2988] ____sys_sendmsg+0x6e8/0x810 [ 1096.541903][ T2988] ? kernel_sendmsg+0x50/0x50 [ 1096.546584][ T2988] ? do_recvmmsg+0x6d0/0x6d0 [ 1096.551185][ T2988] ? lock_chain_count+0x20/0x20 [ 1096.556048][ T2988] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1096.562053][ T2988] ___sys_sendmsg+0xf3/0x170 [ 1096.566660][ T2988] ? sendmsg_copy_msghdr+0x160/0x160 [ 1096.571961][ T2988] ? lock_downgrade+0x6e0/0x6e0 [ 1096.576834][ T2988] ? __fget_files+0x28c/0x470 [ 1096.581528][ T2988] ? __fget_light+0xea/0x280 [ 1096.586125][ T2988] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1096.592384][ T2988] __sys_sendmsg+0xe5/0x1b0 [ 1096.596900][ T2988] ? __sys_sendmsg_sock+0x30/0x30 [ 1096.601951][ T2988] ? syscall_enter_from_user_mode+0x21/0x70 [ 1096.607949][ T2988] do_syscall_64+0x35/0xb0 [ 1096.612371][ T2988] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1096.618277][ T2988] RIP: 0033:0x7f077c038059 [ 1096.622698][ T2988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1096.642337][ T2988] RSP: 002b:00007f077a98c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1096.650758][ T2988] RAX: ffffffffffffffda RBX: 00007f077c14b030 RCX: 00007f077c038059 [ 1096.658734][ T2988] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1096.666706][ T2988] RBP: 00007f077a98c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.674686][ T2988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1096.683536][ T2988] R13: 00007ffeae88560f R14: 00007f077a98c300 R15: 0000000000022000 [ 1096.691529][ T2988] 11:11:57 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={0x0}}, 0x0) 11:11:57 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)="ab25e6978b83f636a91b76fa49ed31b9316ed854cdd082dd5aa865e1a95ca4b0839b3dd4195db94a2749ce29e7bfce13862a732b2d8fd40ed44916f9e29048602163c85821060af76227e08f6a6321391ad33916f73e57d6a09049ff8de6661a05a688d7259072c46cdc306e8513f74ab33e95ec8c9881bd014304d6d97d7642192ab7f02f9f8d6bd036bc3ef307e987fa16967a90cd90e8b38eb19e93ca61e56f72ea1a45e044671a153069479999cef352bfce26ea751c4d6c74ddbb79feca347f29be647c7445c0ec215588ca87dcd758ab0a98b3675ffdc91b1feb989d0d871705a2011f03f94d7e58c0b6f21b6e9e", 0xf1}, 0x1, 0x0, 0x0, 0x40020}, 0x4008000) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) sendmsg$can_j1939(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)="ab25e6978b83f636a91b76fa49ed31b9316ed854cdd082dd5aa865e1a95ca4b0839b3dd4195db94a2749ce29e7bfce13862a732b2d8fd40ed44916f9e29048602163c85821060af76227e08f6a6321391ad33916f73e57d6a09049ff8de6661a05a688d7259072c46cdc306e8513f74ab33e95ec8c9881bd014304d6d97d7642192ab7f02f9f8d6bd036bc3ef307e987fa16967a90cd90e8b38eb19e93ca61e56f72ea1a45e044671a153069479999cef352bfce26ea751c4d6c74ddbb79feca347f29be647c7445c0ec215588ca87dcd758ab0a98b3675ffdc91b1feb989d0d871705a2011f03f94d7e58c0b6f21b6e9e", 0xf1}, 0x1, 0x0, 0x0, 0x40020}, 0x4008000) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) 11:11:57 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, 0x0}, 0x0) 11:11:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x9effffff00000000}, 0x0) 11:11:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) (fail_nth: 94) [ 1097.177028][ C0] vcan0: j1939_tp_rxtimer: 0xffff888010e1f400: rx timeout, send abort [ 1097.185449][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888010e1f400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:11:57 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={0x0}}, 0x0) 11:11:57 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={0x0}}, 0x0) [ 1097.255195][ T3001] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1097.300001][ C1] vcan0: j1939_tp_rxtimer: 0xffff888070debc00: rx timeout, send abort [ 1097.308482][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888070debc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1097.321755][ T3001] device bond166 entered promiscuous mode [ 1097.339914][ T3010] FAULT_INJECTION: forcing a failure. 11:11:57 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1097.339914][ T3010] name failslab, interval 1, probability 0, space 0, times 0 11:11:57 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)}}, 0x0) [ 1097.372580][ T3010] CPU: 0 PID: 3010 Comm: syz-executor.5 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1097.383044][ T3010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.394099][ T3010] Call Trace: [ 1097.397405][ T3010] [ 1097.400342][ T3010] dump_stack_lvl+0xcd/0x134 [ 1097.404963][ T3010] should_fail.cold+0x5/0xa [ 1097.409494][ T3010] ? __kernfs_new_node+0xd4/0x8b0 [ 1097.414562][ T3010] should_failslab+0x5/0x10 11:11:57 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)}}, 0x0) [ 1097.419119][ T3010] kmem_cache_alloc+0x5e/0x3a0 [ 1097.423918][ T3010] __kernfs_new_node+0xd4/0x8b0 [ 1097.428807][ T3010] ? kernfs_path_from_node+0x60/0x60 [ 1097.434157][ T3010] ? up_write+0x148/0x470 [ 1097.438514][ T3010] ? kernfs_activate+0x1c4/0x240 [ 1097.443495][ T3010] kernfs_new_node+0x93/0x120 [ 1097.448204][ T3010] __kernfs_create_file+0x51/0x350 [ 1097.453362][ T3010] sysfs_add_file_mode_ns+0x20f/0x3f0 [ 1097.458777][ T3010] sysfs_merge_group+0x196/0x310 [ 1097.463752][ T3010] ? sysfs_update_group+0x30/0x30 11:11:58 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)}}, 0x0) [ 1097.468903][ T3010] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1097.475289][ T3010] dpm_sysfs_add+0x241/0x290 [ 1097.479918][ T3010] device_add+0xac4/0x1ee0 [ 1097.484465][ T3010] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 1097.490757][ T3010] ? __init_waitqueue_head+0x6b/0xd0 [ 1097.496090][ T3010] netdev_register_kobject+0x181/0x430 [ 1097.501580][ T3010] register_netdevice+0xd31/0x1500 [ 1097.506804][ T3010] ? netdev_change_features+0xb0/0xb0 [ 1097.512212][ T3010] ? br_changelink+0x15e0/0x15e0 [ 1097.517187][ T3010] br_dev_newlink+0x23/0x110 11:11:58 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd027", 0x5}}, 0x0) [ 1097.521807][ T3010] ? br_changelink+0x15e0/0x15e0 [ 1097.526766][ T3010] __rtnl_newlink+0x106e/0x1750 [ 1097.531666][ T3010] ? rtnl_setlink+0x3c0/0x3c0 [ 1097.536387][ T3010] ? is_bpf_text_address+0x77/0x170 [ 1097.541709][ T3010] ? lock_downgrade+0x6e0/0x6e0 [ 1097.546595][ T3010] ? unwind_next_frame+0xee1/0x1ce0 [ 1097.551831][ T3010] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1097.558019][ T3010] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1097.563780][ T3010] ? is_bpf_text_address+0x99/0x170 11:11:58 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd027", 0x5}}, 0x0) [ 1097.569007][ T3010] ? kernel_text_address+0x39/0x80 [ 1097.574145][ T3010] ? __kernel_text_address+0x9/0x30 [ 1097.579460][ T3010] ? unwind_get_return_address+0x51/0x90 [ 1097.585122][ T3010] ? create_prof_cpu_mask+0x20/0x20 [ 1097.590362][ T3010] ? arch_stack_walk+0x93/0xe0 [ 1097.595201][ T3010] ? kmem_cache_alloc_trace+0x42/0x2c0 [ 1097.600709][ T3010] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1097.606338][ T3010] rtnl_newlink+0x64/0xa0 [ 1097.610703][ T3010] ? __rtnl_newlink+0x1750/0x1750 [ 1097.615754][ T3010] rtnetlink_rcv_msg+0x413/0xb80 [ 1097.620719][ T3010] ? rtnl_newlink+0xa0/0xa0 [ 1097.625243][ T3010] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1097.630573][ T3010] netlink_rcv_skb+0x153/0x420 [ 1097.635376][ T3010] ? rtnl_newlink+0xa0/0xa0 [ 1097.639908][ T3010] ? netlink_ack+0xa60/0xa60 [ 1097.644535][ T3010] ? netlink_deliver_tap+0x1a2/0xc30 [ 1097.649858][ T3010] ? netlink_deliver_tap+0x1b1/0xc30 [ 1097.655241][ T3010] netlink_unicast+0x539/0x7e0 [ 1097.660042][ T3010] ? netlink_attachskb+0x880/0x880 [ 1097.665176][ T3010] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1097.671459][ T3010] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1097.677736][ T3010] ? __phys_addr_symbol+0x2c/0x70 [ 1097.682792][ T3010] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1097.688547][ T3010] ? __check_object_size+0x16e/0x310 [ 1097.693861][ T3010] netlink_sendmsg+0x904/0xe00 [ 1097.698630][ T3010] ? netlink_unicast+0x7e0/0x7e0 [ 1097.703579][ T3010] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1097.709850][ T3010] ? netlink_unicast+0x7e0/0x7e0 [ 1097.714791][ T3010] sock_sendmsg+0xcf/0x120 [ 1097.719232][ T3010] ____sys_sendmsg+0x6e8/0x810 [ 1097.724014][ T3010] ? kernel_sendmsg+0x50/0x50 [ 1097.728719][ T3010] ? do_recvmmsg+0x6d0/0x6d0 [ 1097.733329][ T3010] ? lock_chain_count+0x20/0x20 [ 1097.738194][ T3010] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1097.744230][ T3010] ___sys_sendmsg+0xf3/0x170 [ 1097.748851][ T3010] ? sendmsg_copy_msghdr+0x160/0x160 [ 1097.754147][ T3010] ? lock_downgrade+0x6e0/0x6e0 [ 1097.759007][ T3010] ? __fget_files+0x28c/0x470 [ 1097.763704][ T3010] ? __fget_light+0xea/0x280 [ 1097.768435][ T3010] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1097.774707][ T3010] __sys_sendmsg+0xe5/0x1b0 [ 1097.779221][ T3010] ? __sys_sendmsg_sock+0x30/0x30 [ 1097.784262][ T3010] ? syscall_enter_from_user_mode+0x21/0x70 [ 1097.790183][ T3010] do_syscall_64+0x35/0xb0 [ 1097.794608][ T3010] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1097.800530][ T3010] RIP: 0033:0x7f077c038059 [ 1097.804941][ T3010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1097.824551][ T3010] RSP: 002b:00007f077a98c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1097.832990][ T3010] RAX: ffffffffffffffda RBX: 00007f077c14b030 RCX: 00007f077c038059 [ 1097.840963][ T3010] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1097.848950][ T3010] RBP: 00007f077a98c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1097.856932][ T3010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1097.864914][ T3010] R13: 00007ffeae88560f R14: 00007f077a98c300 R15: 0000000000022000 [ 1097.872909][ T3010] 11:11:59 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) 11:11:59 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd027", 0x5}}, 0x0) 11:11:59 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={0x0}}, 0x0) 11:11:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) (fail_nth: 95) 11:11:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0xabb2ffff00000000}, 0x0) [ 1098.543286][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c8ed000: rx timeout, send abort [ 1098.551771][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c8ed000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1098.566168][ C1] vcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff88807c6b9c00: CMD 0xff with PGN 0x40000 for running session with different PGN 0x00000. 11:11:59 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090", 0x7}}, 0x0) 11:11:59 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:11:59 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={0x0}}, 0x0) [ 1098.640772][ T3033] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1098.667022][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801c406800: rx timeout, send abort [ 1098.676635][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801c406800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:11:59 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090", 0x7}}, 0x0) 11:11:59 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)}}, 0x0) 11:11:59 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)}}, 0x0) [ 1098.760420][ T3033] device bond167 entered promiscuous mode [ 1098.788827][ T3041] FAULT_INJECTION: forcing a failure. [ 1098.788827][ T3041] name failslab, interval 1, probability 0, space 0, times 0 11:11:59 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090", 0x7}}, 0x0) [ 1098.836398][ T3041] CPU: 1 PID: 3041 Comm: syz-executor.5 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1098.846877][ T3041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.856945][ T3041] Call Trace: [ 1098.860248][ T3041] [ 1098.863197][ T3041] dump_stack_lvl+0xcd/0x134 [ 1098.867831][ T3041] should_fail.cold+0x5/0xa [ 1098.872544][ T3041] ? __kernfs_new_node+0xd4/0x8b0 [ 1098.877607][ T3041] should_failslab+0x5/0x10 [ 1098.882149][ T3041] kmem_cache_alloc+0x5e/0x3a0 [ 1098.886953][ T3041] __kernfs_new_node+0xd4/0x8b0 [ 1098.891837][ T3041] ? kernfs_path_from_node+0x60/0x60 [ 1098.897350][ T3041] ? up_write+0x148/0x470 [ 1098.901705][ T3041] ? kernfs_activate+0x1c4/0x240 [ 1098.906647][ T3041] kernfs_new_node+0x93/0x120 [ 1098.911328][ T3041] __kernfs_create_file+0x51/0x350 [ 1098.916447][ T3041] sysfs_add_file_mode_ns+0x20f/0x3f0 [ 1098.921832][ T3041] sysfs_merge_group+0x196/0x310 [ 1098.926784][ T3041] ? sysfs_update_group+0x30/0x30 [ 1098.931841][ T3041] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1098.938122][ T3041] dpm_sysfs_add+0x241/0x290 [ 1098.942750][ T3041] device_add+0xac4/0x1ee0 [ 1098.947188][ T3041] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 1098.953563][ T3041] ? __init_waitqueue_head+0x6b/0xd0 [ 1098.958867][ T3041] netdev_register_kobject+0x181/0x430 [ 1098.964358][ T3041] register_netdevice+0xd31/0x1500 [ 1098.969527][ T3041] ? netdev_change_features+0xb0/0xb0 [ 1098.974899][ T3041] ? br_changelink+0x15e0/0x15e0 [ 1098.979860][ T3041] br_dev_newlink+0x23/0x110 [ 1098.984497][ T3041] ? br_changelink+0x15e0/0x15e0 [ 1098.989441][ T3041] __rtnl_newlink+0x106e/0x1750 [ 1098.994304][ T3041] ? rtnl_setlink+0x3c0/0x3c0 [ 1098.998999][ T3041] ? is_bpf_text_address+0x77/0x170 [ 1099.004224][ T3041] ? lock_downgrade+0x6e0/0x6e0 [ 1099.009081][ T3041] ? unwind_next_frame+0xee1/0x1ce0 [ 1099.014284][ T3041] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1099.020363][ T3041] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1099.026116][ T3041] ? is_bpf_text_address+0x99/0x170 [ 1099.031342][ T3041] ? kernel_text_address+0x39/0x80 [ 1099.036461][ T3041] ? __kernel_text_address+0x9/0x30 [ 1099.041663][ T3041] ? unwind_get_return_address+0x51/0x90 [ 1099.047292][ T3041] ? create_prof_cpu_mask+0x20/0x20 [ 1099.052489][ T3041] ? arch_stack_walk+0x93/0xe0 [ 1099.057286][ T3041] ? kmem_cache_alloc_trace+0x42/0x2c0 [ 1099.062753][ T3041] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1099.068304][ T3041] rtnl_newlink+0x64/0xa0 [ 1099.072642][ T3041] ? __rtnl_newlink+0x1750/0x1750 [ 1099.077676][ T3041] rtnetlink_rcv_msg+0x413/0xb80 [ 1099.082623][ T3041] ? rtnl_newlink+0xa0/0xa0 [ 1099.087129][ T3041] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1099.092450][ T3041] netlink_rcv_skb+0x153/0x420 [ 1099.097223][ T3041] ? rtnl_newlink+0xa0/0xa0 [ 1099.101733][ T3041] ? netlink_ack+0xa60/0xa60 [ 1099.106325][ T3041] ? netlink_deliver_tap+0x1a2/0xc30 [ 1099.111630][ T3041] ? netlink_deliver_tap+0x1b1/0xc30 [ 1099.117005][ T3041] netlink_unicast+0x539/0x7e0 [ 1099.121805][ T3041] ? netlink_attachskb+0x880/0x880 [ 1099.127068][ T3041] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1099.133354][ T3041] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1099.139611][ T3041] ? __phys_addr_symbol+0x2c/0x70 [ 1099.144642][ T3041] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1099.150370][ T3041] ? __check_object_size+0x16e/0x310 [ 1099.155831][ T3041] netlink_sendmsg+0x904/0xe00 [ 1099.160598][ T3041] ? netlink_unicast+0x7e0/0x7e0 [ 1099.165549][ T3041] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1099.171879][ T3041] ? netlink_unicast+0x7e0/0x7e0 [ 1099.176824][ T3041] sock_sendmsg+0xcf/0x120 [ 1099.181244][ T3041] ____sys_sendmsg+0x6e8/0x810 [ 1099.186065][ T3041] ? kernel_sendmsg+0x50/0x50 [ 1099.191010][ T3041] ? do_recvmmsg+0x6d0/0x6d0 [ 1099.195614][ T3041] ? lock_chain_count+0x20/0x20 [ 1099.200483][ T3041] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1099.206523][ T3041] ___sys_sendmsg+0xf3/0x170 [ 1099.211122][ T3041] ? sendmsg_copy_msghdr+0x160/0x160 [ 1099.216435][ T3041] ? lock_downgrade+0x6e0/0x6e0 [ 1099.221296][ T3041] ? __fget_files+0x28c/0x470 [ 1099.225989][ T3041] ? __fget_light+0xea/0x280 [ 1099.230607][ T3041] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1099.236877][ T3041] __sys_sendmsg+0xe5/0x1b0 [ 1099.241397][ T3041] ? __sys_sendmsg_sock+0x30/0x30 [ 1099.246436][ T3041] ? syscall_enter_from_user_mode+0x21/0x70 [ 1099.252347][ T3041] do_syscall_64+0x35/0xb0 [ 1099.256777][ T3041] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1099.262751][ T3041] RIP: 0033:0x7f077c038059 [ 1099.267265][ T3041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1099.286888][ T3041] RSP: 002b:00007f077a98c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.295309][ T3041] RAX: ffffffffffffffda RBX: 00007f077c14b030 RCX: 00007f077c038059 [ 1099.303283][ T3041] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1099.311259][ T3041] RBP: 00007f077a98c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1099.319228][ T3041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1099.327196][ T3041] R13: 00007ffeae88560f R14: 00007f077a98c300 R15: 0000000000022000 [ 1099.335266][ T3041] 11:12:00 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) 11:12:00 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd027509034", 0x8}}, 0x0) 11:12:00 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)}}, 0x0) 11:12:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) (fail_nth: 96) 11:12:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0xc00e000000000000}, 0x0) [ 1099.956810][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e95b800: rx timeout, send abort [ 1099.965484][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e95b800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1099.982182][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021ed9800: rx timeout, send abort [ 1099.990589][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021ed9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:00 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) (fail_nth: 1) 11:12:00 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd027509034", 0x8}}, 0x0) [ 1100.032709][ T3061] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:12:00 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd027", 0x5}}, 0x0) 11:12:00 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) [ 1100.095887][ T3061] device bond168 entered promiscuous mode [ 1100.106735][ T3069] FAULT_INJECTION: forcing a failure. [ 1100.106735][ T3069] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.125750][ T3069] CPU: 1 PID: 3069 Comm: syz-executor.5 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1100.136218][ T3069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.146282][ T3069] Call Trace: [ 1100.149565][ T3069] [ 1100.152500][ T3069] dump_stack_lvl+0xcd/0x134 [ 1100.157112][ T3069] should_fail.cold+0x5/0xa [ 1100.161627][ T3069] ? kset_create_and_add+0x4b/0x1a0 [ 1100.166831][ T3069] should_failslab+0x5/0x10 [ 1100.171343][ T3069] kmem_cache_alloc_trace+0x55/0x2c0 [ 1100.176645][ T3069] kset_create_and_add+0x4b/0x1a0 [ 1100.181677][ T3069] netdev_register_kobject+0x1c6/0x430 [ 1100.187146][ T3069] register_netdevice+0xd31/0x1500 [ 1100.192271][ T3069] ? netdev_change_features+0xb0/0xb0 [ 1100.197660][ T3069] ? br_changelink+0x15e0/0x15e0 [ 1100.202607][ T3069] br_dev_newlink+0x23/0x110 [ 1100.207204][ T3069] ? br_changelink+0x15e0/0x15e0 [ 1100.212160][ T3069] __rtnl_newlink+0x106e/0x1750 [ 1100.217049][ T3069] ? rtnl_setlink+0x3c0/0x3c0 [ 1100.221759][ T3069] ? is_bpf_text_address+0x77/0x170 [ 1100.226981][ T3069] ? lock_downgrade+0x6e0/0x6e0 [ 1100.231850][ T3069] ? unwind_next_frame+0xee1/0x1ce0 [ 1100.237068][ T3069] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1100.243154][ T3069] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1100.248895][ T3069] ? is_bpf_text_address+0x99/0x170 [ 1100.254105][ T3069] ? kernel_text_address+0x39/0x80 [ 1100.259231][ T3069] ? __kernel_text_address+0x9/0x30 [ 1100.264456][ T3069] ? unwind_get_return_address+0x51/0x90 [ 1100.270099][ T3069] ? create_prof_cpu_mask+0x20/0x20 [ 1100.275317][ T3069] ? arch_stack_walk+0x93/0xe0 [ 1100.280187][ T3069] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1100.285765][ T3069] rtnl_newlink+0x64/0xa0 [ 1100.290124][ T3069] ? __rtnl_newlink+0x1750/0x1750 [ 1100.295168][ T3069] rtnetlink_rcv_msg+0x413/0xb80 [ 1100.300121][ T3069] ? rtnl_newlink+0xa0/0xa0 [ 1100.304639][ T3069] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1100.309975][ T3069] netlink_rcv_skb+0x153/0x420 [ 1100.314782][ T3069] ? rtnl_newlink+0xa0/0xa0 [ 1100.319299][ T3069] ? netlink_ack+0xa60/0xa60 [ 1100.323900][ T3069] ? netlink_deliver_tap+0x1a2/0xc30 [ 1100.329208][ T3069] ? netlink_deliver_tap+0x1b1/0xc30 [ 1100.334509][ T3069] netlink_unicast+0x539/0x7e0 [ 1100.339284][ T3069] ? netlink_attachskb+0x880/0x880 [ 1100.344403][ T3069] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1100.350657][ T3069] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1100.356909][ T3069] ? __phys_addr_symbol+0x2c/0x70 [ 1100.361943][ T3069] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1100.367679][ T3069] ? __check_object_size+0x16e/0x310 [ 1100.373068][ T3069] netlink_sendmsg+0x904/0xe00 [ 1100.377851][ T3069] ? netlink_unicast+0x7e0/0x7e0 [ 1100.382811][ T3069] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1100.389067][ T3069] ? netlink_unicast+0x7e0/0x7e0 [ 1100.394045][ T3069] sock_sendmsg+0xcf/0x120 [ 1100.398472][ T3069] ____sys_sendmsg+0x6e8/0x810 [ 1100.403272][ T3069] ? kernel_sendmsg+0x50/0x50 [ 1100.408015][ T3069] ? do_recvmmsg+0x6d0/0x6d0 [ 1100.412639][ T3069] ? lock_chain_count+0x20/0x20 [ 1100.417526][ T3069] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1100.423885][ T3069] ___sys_sendmsg+0xf3/0x170 [ 1100.428494][ T3069] ? sendmsg_copy_msghdr+0x160/0x160 [ 1100.433798][ T3069] ? lock_downgrade+0x6e0/0x6e0 [ 1100.438669][ T3069] ? __fget_files+0x28c/0x470 [ 1100.443380][ T3069] ? __fget_light+0xea/0x280 [ 1100.447977][ T3069] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1100.454252][ T3069] __sys_sendmsg+0xe5/0x1b0 [ 1100.458793][ T3069] ? __sys_sendmsg_sock+0x30/0x30 [ 1100.463871][ T3069] ? syscall_enter_from_user_mode+0x21/0x70 [ 1100.469801][ T3069] do_syscall_64+0x35/0xb0 [ 1100.474246][ T3069] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1100.480173][ T3069] RIP: 0033:0x7f077c038059 [ 1100.484605][ T3069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1100.504221][ T3069] RSP: 002b:00007f077a98c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.512643][ T3069] RAX: ffffffffffffffda RBX: 00007f077c14b030 RCX: 00007f077c038059 [ 1100.520617][ T3069] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1100.528586][ T3069] RBP: 00007f077a98c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1100.536555][ T3069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1100.544525][ T3069] R13: 00007ffeae88560f R14: 00007f077a98c300 R15: 0000000000022000 [ 1100.552514][ T3069] [ 1100.592302][ T3073] FAULT_INJECTION: forcing a failure. [ 1100.592302][ T3073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.605906][ T3073] CPU: 0 PID: 3073 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1100.616376][ T3073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.626459][ T3073] Call Trace: [ 1100.629739][ T3073] [ 1100.632927][ T3073] dump_stack_lvl+0xcd/0x134 [ 1100.637525][ T3073] should_fail.cold+0x5/0xa [ 1100.642032][ T3073] _copy_from_user+0x2c/0x180 [ 1100.646713][ T3073] __copy_msghdr_from_user+0x91/0x4b0 [ 1100.652094][ T3073] ? __ia32_sys_shutdown+0x70/0x70 [ 1100.657214][ T3073] ? __lock_acquire+0xbbf/0x5470 [ 1100.662162][ T3073] sendmsg_copy_msghdr+0xa1/0x160 [ 1100.667197][ T3073] ? do_recvmmsg+0x6d0/0x6d0 [ 1100.671789][ T3073] ? lock_chain_count+0x20/0x20 [ 1100.676647][ T3073] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1100.682634][ T3073] ___sys_sendmsg+0xc6/0x170 [ 1100.687228][ T3073] ? sendmsg_copy_msghdr+0x160/0x160 [ 1100.692517][ T3073] ? __fget_files+0x26a/0x470 [ 1100.697195][ T3073] ? lock_downgrade+0x6e0/0x6e0 [ 1100.702056][ T3073] ? __fget_files+0x28c/0x470 [ 1100.706743][ T3073] ? __fget_light+0xea/0x280 [ 1100.711335][ T3073] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1100.717583][ T3073] __sys_sendmsg+0xe5/0x1b0 [ 1100.722094][ T3073] ? __sys_sendmsg_sock+0x30/0x30 [ 1100.727130][ T3073] ? syscall_enter_from_user_mode+0x21/0x70 [ 1100.733035][ T3073] do_syscall_64+0x35/0xb0 [ 1100.737456][ T3073] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1100.743358][ T3073] RIP: 0033:0x7f000e751059 [ 1100.747774][ T3073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1100.767384][ T3073] RSP: 002b:00007f000d0c6168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.775815][ T3073] RAX: ffffffffffffffda RBX: 00007f000e863f60 RCX: 00007f000e751059 [ 1100.783817][ T3073] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 11:12:01 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd027", 0x5}}, 0x0) 11:12:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd027509034", 0x8}}, 0x0) [ 1100.791783][ T3073] RBP: 00007f000d0c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1100.799759][ T3073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.807732][ T3073] R13: 00007ffd2a3112ff R14: 00007f000d0c6300 R15: 0000000000022000 [ 1100.815714][ T3073] 11:12:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0xe80a000000000000}, 0x0) 11:12:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) (fail_nth: 97) 11:12:01 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd027", 0x5}}, 0x0) 11:12:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 1) 11:12:01 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090", 0x7}}, 0x0) [ 1100.987279][ T3086] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1101.005125][ T3091] FAULT_INJECTION: forcing a failure. [ 1101.005125][ T3091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1101.028079][ T3086] device bond169 entered promiscuous mode 11:12:01 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090", 0x7}}, 0x0) [ 1101.042126][ T3091] CPU: 1 PID: 3091 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1101.044265][ T3094] FAULT_INJECTION: forcing a failure. [ 1101.044265][ T3094] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.052583][ T3091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.052604][ T3091] Call Trace: [ 1101.052613][ T3091] [ 1101.052624][ T3091] dump_stack_lvl+0xcd/0x134 [ 1101.052661][ T3091] should_fail.cold+0x5/0xa [ 1101.090650][ T3091] _copy_from_user+0x2c/0x180 [ 1101.095365][ T3091] __copy_msghdr_from_user+0x91/0x4b0 [ 1101.101048][ T3091] ? __ia32_sys_shutdown+0x70/0x70 [ 1101.106212][ T3091] ? __lock_acquire+0xbbf/0x5470 [ 1101.111182][ T3091] sendmsg_copy_msghdr+0xa1/0x160 [ 1101.116237][ T3091] ? do_recvmmsg+0x6d0/0x6d0 [ 1101.120860][ T3091] ? lock_chain_count+0x20/0x20 [ 1101.125737][ T3091] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1101.131760][ T3091] ___sys_sendmsg+0xc6/0x170 [ 1101.136376][ T3091] ? sendmsg_copy_msghdr+0x160/0x160 [ 1101.141693][ T3091] ? __fget_files+0x26a/0x470 [ 1101.146397][ T3091] ? lock_downgrade+0x6e0/0x6e0 [ 1101.151289][ T3091] ? __fget_files+0x28c/0x470 [ 1101.156063][ T3091] ? __fget_light+0xea/0x280 [ 1101.160661][ T3091] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1101.166928][ T3091] __sys_sendmsg+0xe5/0x1b0 [ 1101.171461][ T3091] ? __sys_sendmsg_sock+0x30/0x30 [ 1101.176513][ T3091] ? syscall_enter_from_user_mode+0x21/0x70 [ 1101.182439][ T3091] do_syscall_64+0x35/0xb0 [ 1101.186871][ T3091] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1101.192784][ T3091] RIP: 0033:0x7fc42e292059 [ 1101.197204][ T3091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1101.216910][ T3091] RSP: 002b:00007fc42cc07168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1101.225342][ T3091] RAX: ffffffffffffffda RBX: 00007fc42e3a4f60 RCX: 00007fc42e292059 [ 1101.233331][ T3091] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1101.241314][ T3091] RBP: 00007fc42cc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.249399][ T3091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.257384][ T3091] R13: 00007ffd3dae6c1f R14: 00007fc42cc07300 R15: 0000000000022000 [ 1101.265393][ T3091] [ 1101.268428][ T3094] CPU: 0 PID: 3094 Comm: syz-executor.5 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1101.278868][ T3094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.288935][ T3094] Call Trace: [ 1101.292222][ T3094] [ 1101.295162][ T3094] dump_stack_lvl+0xcd/0x134 [ 1101.299772][ T3094] should_fail.cold+0x5/0xa [ 1101.304289][ T3094] ? __kernfs_new_node+0xd4/0x8b0 [ 1101.309326][ T3094] should_failslab+0x5/0x10 [ 1101.313845][ T3094] kmem_cache_alloc+0x5e/0x3a0 [ 1101.318628][ T3094] __kernfs_new_node+0xd4/0x8b0 [ 1101.323495][ T3094] ? kernfs_path_from_node+0x60/0x60 [ 1101.328806][ T3094] ? projid_m_show+0x220/0x220 [ 1101.333578][ T3094] ? kasan_save_stack+0x2e/0x40 [ 1101.338438][ T3094] ? kasan_save_stack+0x1e/0x40 [ 1101.343292][ T3094] ? __kasan_kmalloc+0xa9/0xd0 [ 1101.348057][ T3094] ? kset_create_and_add+0x4b/0x1a0 [ 1101.353264][ T3094] ? netdev_register_kobject+0x1c6/0x430 [ 1101.358915][ T3094] ? make_kgid+0x1c/0x20 [ 1101.363175][ T3094] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1101.369443][ T3094] ? net_ns_get_ownership+0xf4/0x1b0 [ 1101.374868][ T3094] ? of_dev_node_match+0xa0/0xa0 [ 1101.379838][ T3094] kernfs_create_dir_ns+0x9c/0x220 [ 1101.384970][ T3094] sysfs_create_dir_ns+0x127/0x290 [ 1101.390092][ T3094] ? sysfs_create_mount_point+0xb0/0xb0 [ 1101.395644][ T3094] ? kfree_const+0x51/0x60 [ 1101.400069][ T3094] ? kobject_set_name_vargs+0xfc/0x150 [ 1101.405537][ T3094] ? kobject_set_name+0xbb/0xf0 [ 1101.410406][ T3094] ? kobject_set_name_vargs+0x150/0x150 [ 1101.415961][ T3094] kobject_add_internal+0x2d2/0xa60 [ 1101.421174][ T3094] kset_register+0x165/0x1e0 [ 1101.425794][ T3094] kset_create_and_add+0x12e/0x1a0 [ 1101.430934][ T3094] netdev_register_kobject+0x1c6/0x430 [ 1101.437021][ T3094] register_netdevice+0xd31/0x1500 [ 1101.442155][ T3094] ? netdev_change_features+0xb0/0xb0 [ 1101.447547][ T3094] ? br_changelink+0x15e0/0x15e0 [ 1101.452497][ T3094] br_dev_newlink+0x23/0x110 [ 1101.457097][ T3094] ? br_changelink+0x15e0/0x15e0 [ 1101.462041][ T3094] __rtnl_newlink+0x106e/0x1750 [ 1101.466912][ T3094] ? rtnl_setlink+0x3c0/0x3c0 [ 1101.471607][ T3094] ? is_bpf_text_address+0x77/0x170 [ 1101.476829][ T3094] ? lock_downgrade+0x6e0/0x6e0 [ 1101.481693][ T3094] ? unwind_next_frame+0xee1/0x1ce0 [ 1101.486909][ T3094] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1101.492988][ T3094] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1101.498726][ T3094] ? is_bpf_text_address+0x99/0x170 [ 1101.503937][ T3094] ? kernel_text_address+0x39/0x80 [ 1101.509060][ T3094] ? __kernel_text_address+0x9/0x30 [ 1101.514268][ T3094] ? unwind_get_return_address+0x51/0x90 [ 1101.519910][ T3094] ? create_prof_cpu_mask+0x20/0x20 [ 1101.525121][ T3094] ? arch_stack_walk+0x93/0xe0 [ 1101.529956][ T3094] ? kmem_cache_alloc_trace+0x42/0x2c0 [ 1101.535444][ T3094] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1101.541011][ T3094] rtnl_newlink+0x64/0xa0 [ 1101.545522][ T3094] ? __rtnl_newlink+0x1750/0x1750 [ 1101.550559][ T3094] rtnetlink_rcv_msg+0x413/0xb80 [ 1101.555512][ T3094] ? rtnl_newlink+0xa0/0xa0 [ 1101.560023][ T3094] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1101.565340][ T3094] netlink_rcv_skb+0x153/0x420 [ 1101.570115][ T3094] ? rtnl_newlink+0xa0/0xa0 [ 1101.574626][ T3094] ? netlink_ack+0xa60/0xa60 [ 1101.579226][ T3094] ? netlink_deliver_tap+0x1a2/0xc30 [ 1101.584524][ T3094] ? netlink_deliver_tap+0x1b1/0xc30 [ 1101.589828][ T3094] netlink_unicast+0x539/0x7e0 [ 1101.594604][ T3094] ? netlink_attachskb+0x880/0x880 [ 1101.599722][ T3094] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1101.605983][ T3094] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1101.612238][ T3094] ? __phys_addr_symbol+0x2c/0x70 [ 1101.617274][ T3094] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1101.623006][ T3094] ? __check_object_size+0x16e/0x310 [ 1101.628304][ T3094] netlink_sendmsg+0x904/0xe00 [ 1101.633086][ T3094] ? netlink_unicast+0x7e0/0x7e0 [ 1101.638560][ T3094] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1101.644825][ T3094] ? netlink_unicast+0x7e0/0x7e0 [ 1101.649781][ T3094] sock_sendmsg+0xcf/0x120 [ 1101.654304][ T3094] ____sys_sendmsg+0x6e8/0x810 [ 1101.659077][ T3094] ? kernel_sendmsg+0x50/0x50 [ 1101.663761][ T3094] ? do_recvmmsg+0x6d0/0x6d0 [ 1101.668364][ T3094] ? lock_chain_count+0x20/0x20 [ 1101.673233][ T3094] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1101.679240][ T3094] ___sys_sendmsg+0xf3/0x170 [ 1101.683844][ T3094] ? sendmsg_copy_msghdr+0x160/0x160 [ 1101.689191][ T3094] ? lock_downgrade+0x6e0/0x6e0 [ 1101.694068][ T3094] ? __fget_files+0x28c/0x470 [ 1101.698768][ T3094] ? __fget_light+0xea/0x280 [ 1101.703372][ T3094] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1101.709893][ T3094] __sys_sendmsg+0xe5/0x1b0 [ 1101.714408][ T3094] ? __sys_sendmsg_sock+0x30/0x30 [ 1101.719456][ T3094] ? syscall_enter_from_user_mode+0x21/0x70 [ 1101.725370][ T3094] do_syscall_64+0x35/0xb0 [ 1101.729815][ T3094] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1101.735723][ T3094] RIP: 0033:0x7f077c038059 [ 1101.740146][ T3094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1101.759781][ T3094] RSP: 002b:00007f077a98c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1101.768202][ T3094] RAX: ffffffffffffffda RBX: 00007f077c14b030 RCX: 00007f077c038059 [ 1101.776181][ T3094] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1101.784152][ T3094] RBP: 00007f077a98c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.792127][ T3094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1101.800101][ T3094] R13: 00007ffeae88560f R14: 00007f077a98c300 R15: 0000000000022000 [ 1101.808094][ T3094] [ 1101.819820][ T3094] kobject_add_internal failed for queues (error: -12 parent: bridge93) [ 1101.840842][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d432c00: rx timeout, send abort [ 1101.851100][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d432c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) (fail_nth: 2) 11:12:02 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090", 0x7}}, 0x0) 11:12:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 1101.968645][ T3103] FAULT_INJECTION: forcing a failure. [ 1101.968645][ T3103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1101.983024][ T3103] CPU: 1 PID: 3103 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1101.993492][ T3103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.003559][ T3103] Call Trace: [ 1102.006849][ T3103] [ 1102.009791][ T3103] dump_stack_lvl+0xcd/0x134 [ 1102.014403][ T3103] should_fail.cold+0x5/0xa [ 1102.018996][ T3103] _copy_from_user+0x2c/0x180 [ 1102.023709][ T3103] move_addr_to_kernel.part.0+0x31/0x110 [ 1102.029385][ T3103] __copy_msghdr_from_user+0x3da/0x4b0 [ 1102.034869][ T3103] ? __ia32_sys_shutdown+0x70/0x70 [ 1102.040004][ T3103] ? __lock_acquire+0xbbf/0x5470 [ 1102.044965][ T3103] sendmsg_copy_msghdr+0xa1/0x160 [ 1102.050005][ T3103] ? do_recvmmsg+0x6d0/0x6d0 [ 1102.054610][ T3103] ? lock_chain_count+0x20/0x20 [ 1102.059478][ T3103] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1102.065482][ T3103] ___sys_sendmsg+0xc6/0x170 [ 1102.070088][ T3103] ? sendmsg_copy_msghdr+0x160/0x160 [ 1102.075385][ T3103] ? __fget_files+0x26a/0x470 [ 1102.080079][ T3103] ? lock_downgrade+0x6e0/0x6e0 [ 1102.085128][ T3103] ? __fget_files+0x28c/0x470 [ 1102.089839][ T3103] ? __fget_light+0xea/0x280 [ 1102.094450][ T3103] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1102.100724][ T3103] __sys_sendmsg+0xe5/0x1b0 [ 1102.105704][ T3103] ? __sys_sendmsg_sock+0x30/0x30 [ 1102.110777][ T3103] ? syscall_enter_from_user_mode+0x21/0x70 [ 1102.116719][ T3103] do_syscall_64+0x35/0xb0 [ 1102.121146][ T3103] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1102.127064][ T3103] RIP: 0033:0x7f000e751059 [ 1102.131486][ T3103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1102.151101][ T3103] RSP: 002b:00007f000d0c6168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1102.159524][ T3103] RAX: ffffffffffffffda RBX: 00007f000e863f60 RCX: 00007f000e751059 [ 1102.167589][ T3103] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1102.175654][ T3103] RBP: 00007f000d0c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.183647][ T3103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.191625][ T3103] R13: 00007ffd2a3112ff R14: 00007f000d0c6300 R15: 0000000000022000 [ 1102.199716][ T3103] [ 1102.203982][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079b00400: rx timeout, send abort 11:12:02 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000140)="7bddefd0275090340f33bd09f6a9308c1560f582beba7a0d82e652157b4c918536a0a26a3789a317151dfbf60c65acb47027cf417264faf821f5f11ee78a49b307512aef2c37b0e0299936eeedcc461c885a38217ca5d453b485192c764de9a35da6a150e28aeff6a58cd793ee1dfa4d9a3c2c22a3d75a6c58b65172", 0x7c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:02 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 2) 11:12:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:02 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd027509034", 0x8}}, 0x0) [ 1102.212397][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079b00400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1102.266606][ T3107] FAULT_INJECTION: forcing a failure. [ 1102.266606][ T3107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.295222][ T3107] CPU: 1 PID: 3107 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1102.304541][ T3112] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1102.306038][ T3107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.306059][ T3107] Call Trace: [ 1102.306068][ T3107] [ 1102.306080][ T3107] dump_stack_lvl+0xcd/0x134 [ 1102.306115][ T3107] should_fail.cold+0x5/0xa [ 1102.336945][ T3112] device bond170 entered promiscuous mode [ 1102.339581][ T3107] _copy_from_user+0x2c/0x180 [ 1102.339623][ T3107] move_addr_to_kernel.part.0+0x31/0x110 [ 1102.339659][ T3107] __copy_msghdr_from_user+0x3da/0x4b0 [ 1102.361232][ T3107] ? __ia32_sys_shutdown+0x70/0x70 [ 1102.366389][ T3107] ? __lock_acquire+0xbbf/0x5470 [ 1102.370590][ T3112] bond170: (slave bridge93): making interface the new active one [ 1102.371360][ T3107] sendmsg_copy_msghdr+0xa1/0x160 [ 1102.371400][ T3107] ? do_recvmmsg+0x6d0/0x6d0 [ 1102.371430][ T3107] ? lock_chain_count+0x20/0x20 [ 1102.379430][ T3112] device bridge93 entered promiscuous mode [ 1102.384170][ T3107] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1102.384216][ T3107] ___sys_sendmsg+0xc6/0x170 [ 1102.384249][ T3107] ? sendmsg_copy_msghdr+0x160/0x160 11:12:02 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd027509034", 0x8}}, 0x0) 11:12:02 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd027509034", 0x8}}, 0x0) [ 1102.384280][ T3107] ? __fget_files+0x26a/0x470 [ 1102.391062][ T3112] bond170: (slave bridge93): Enslaving as an active interface with an up link [ 1102.393791][ T3107] ? lock_downgrade+0x6e0/0x6e0 [ 1102.393840][ T3107] ? __fget_files+0x28c/0x470 [ 1102.393878][ T3107] ? __fget_light+0xea/0x280 [ 1102.393905][ T3107] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1102.449766][ T3107] __sys_sendmsg+0xe5/0x1b0 [ 1102.454316][ T3107] ? __sys_sendmsg_sock+0x30/0x30 [ 1102.459386][ T3107] ? syscall_enter_from_user_mode+0x21/0x70 11:12:03 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 1) [ 1102.465321][ T3107] do_syscall_64+0x35/0xb0 [ 1102.469779][ T3107] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1102.475713][ T3107] RIP: 0033:0x7fc42e292059 [ 1102.480151][ T3107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1102.499784][ T3107] RSP: 002b:00007fc42cc07168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1102.508215][ T3107] RAX: ffffffffffffffda RBX: 00007fc42e3a4f60 RCX: 00007fc42e292059 11:12:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:03 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 3) [ 1102.516238][ T3107] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1102.524231][ T3107] RBP: 00007fc42cc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.532316][ T3107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.539464][ T3119] FAULT_INJECTION: forcing a failure. [ 1102.539464][ T3119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.540304][ T3107] R13: 00007ffd3dae6c1f R14: 00007fc42cc07300 R15: 0000000000022000 [ 1102.540344][ T3107] [ 1102.590507][ T3119] CPU: 0 PID: 3119 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1102.600976][ T3119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.611059][ T3119] Call Trace: [ 1102.614443][ T3119] [ 1102.617392][ T3119] dump_stack_lvl+0xcd/0x134 [ 1102.617575][ T3123] FAULT_INJECTION: forcing a failure. [ 1102.617575][ T3123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.622010][ T3119] should_fail.cold+0x5/0xa [ 1102.622049][ T3119] _copy_from_user+0x2c/0x180 [ 1102.622086][ T3119] __copy_msghdr_from_user+0x91/0x4b0 [ 1102.622119][ T3119] ? __ia32_sys_shutdown+0x70/0x70 [ 1102.638428][ T3121] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1102.639629][ T3119] ? __lock_acquire+0xbbf/0x5470 [ 1102.639673][ T3119] sendmsg_copy_msghdr+0xa1/0x160 [ 1102.639707][ T3119] ? do_recvmmsg+0x6d0/0x6d0 [ 1102.677392][ T3119] ? lock_chain_count+0x20/0x20 [ 1102.682262][ T3119] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1102.688275][ T3119] ___sys_sendmsg+0xc6/0x170 [ 1102.692896][ T3119] ? sendmsg_copy_msghdr+0x160/0x160 [ 1102.698206][ T3119] ? __fget_files+0x26a/0x470 [ 1102.702901][ T3119] ? lock_downgrade+0x6e0/0x6e0 [ 1102.707784][ T3119] ? __fget_files+0x28c/0x470 [ 1102.712478][ T3119] ? __fget_light+0xea/0x280 [ 1102.717084][ T3119] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1102.723345][ T3119] __sys_sendmsg+0xe5/0x1b0 [ 1102.727868][ T3119] ? __sys_sendmsg_sock+0x30/0x30 [ 1102.732930][ T3119] ? syscall_enter_from_user_mode+0x21/0x70 [ 1102.738842][ T3119] do_syscall_64+0x35/0xb0 [ 1102.743277][ T3119] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1102.749193][ T3119] RIP: 0033:0x7f9000110059 [ 1102.753633][ T3119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1102.773342][ T3119] RSP: 002b:00007f8ffea85168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1102.781778][ T3119] RAX: ffffffffffffffda RBX: 00007f9000222f60 RCX: 00007f9000110059 [ 1102.789761][ T3119] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1102.797740][ T3119] RBP: 00007f8ffea851d0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.805723][ T3119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.813704][ T3119] R13: 00007fff709e577f R14: 00007f8ffea85300 R15: 0000000000022000 [ 1102.821798][ T3119] [ 1102.824858][ T3123] CPU: 1 PID: 3123 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1102.835298][ T3123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.845368][ T3123] Call Trace: [ 1102.848652][ T3123] [ 1102.851619][ T3123] dump_stack_lvl+0xcd/0x134 [ 1102.856230][ T3123] should_fail.cold+0x5/0xa [ 1102.860756][ T3123] _copy_from_user+0x2c/0x180 [ 1102.865449][ T3123] iovec_from_user+0x23e/0x3c0 [ 1102.870231][ T3123] __import_iovec+0x65/0x590 [ 1102.874839][ T3123] import_iovec+0x10c/0x150 [ 1102.879354][ T3123] sendmsg_copy_msghdr+0x12d/0x160 [ 1102.884478][ T3123] ? do_recvmmsg+0x6d0/0x6d0 [ 1102.889085][ T3123] ? lock_chain_count+0x20/0x20 [ 1102.893946][ T3123] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1102.899946][ T3123] ___sys_sendmsg+0xc6/0x170 [ 1102.904547][ T3123] ? sendmsg_copy_msghdr+0x160/0x160 [ 1102.909841][ T3123] ? __fget_files+0x26a/0x470 [ 1102.914527][ T3123] ? lock_downgrade+0x6e0/0x6e0 [ 1102.919397][ T3123] ? __fget_files+0x28c/0x470 [ 1102.924086][ T3123] ? __fget_light+0xea/0x280 [ 1102.928683][ T3123] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1102.934946][ T3123] __sys_sendmsg+0xe5/0x1b0 [ 1102.939459][ T3123] ? __sys_sendmsg_sock+0x30/0x30 [ 1102.944502][ T3123] ? syscall_enter_from_user_mode+0x21/0x70 [ 1102.950410][ T3123] do_syscall_64+0x35/0xb0 [ 1102.954835][ T3123] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1102.960828][ T3123] RIP: 0033:0x7fc42e292059 [ 1102.965244][ T3123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1102.984855][ T3123] RSP: 002b:00007fc42cc07168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1102.993272][ T3123] RAX: ffffffffffffffda RBX: 00007fc42e3a4f60 RCX: 00007fc42e292059 [ 1103.001247][ T3123] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1103.009216][ T3123] RBP: 00007fc42cc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 1103.017186][ T3123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.025161][ T3123] R13: 00007ffd3dae6c1f R14: 00007fc42cc07300 R15: 0000000000022000 [ 1103.033157][ T3123] [ 1103.086037][ T3121] device bond171 entered promiscuous mode [ 1103.113247][ T3124] bond171: (slave bridge94): making interface the new active one [ 1103.121211][ T3124] device bridge94 entered promiscuous mode [ 1103.128276][ T3124] bond171: (slave bridge94): Enslaving as an active interface with an up link 11:12:03 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) (fail_nth: 3) 11:12:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0xfeffffff00000000}, 0x0) 11:12:03 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 2) [ 1103.217337][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806cb99800: rx timeout, send abort [ 1103.225731][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806cb99800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1103.276446][ T3128] FAULT_INJECTION: forcing a failure. [ 1103.276446][ T3128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.291710][ T3131] FAULT_INJECTION: forcing a failure. [ 1103.291710][ T3131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.298672][ T3128] CPU: 1 PID: 3128 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1103.315180][ T3128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.325267][ T3128] Call Trace: [ 1103.328553][ T3128] [ 1103.331490][ T3128] dump_stack_lvl+0xcd/0x134 [ 1103.336100][ T3128] should_fail.cold+0x5/0xa [ 1103.340709][ T3128] _copy_from_user+0x2c/0x180 [ 1103.345408][ T3128] move_addr_to_kernel.part.0+0x31/0x110 [ 1103.351071][ T3128] __copy_msghdr_from_user+0x3da/0x4b0 [ 1103.356552][ T3128] ? __ia32_sys_shutdown+0x70/0x70 [ 1103.361688][ T3128] ? __lock_acquire+0xbbf/0x5470 [ 1103.366658][ T3128] sendmsg_copy_msghdr+0xa1/0x160 [ 1103.371712][ T3128] ? do_recvmmsg+0x6d0/0x6d0 [ 1103.376326][ T3128] ? lock_chain_count+0x20/0x20 [ 1103.381194][ T3128] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1103.387208][ T3128] ___sys_sendmsg+0xc6/0x170 [ 1103.391835][ T3128] ? sendmsg_copy_msghdr+0x160/0x160 [ 1103.397138][ T3128] ? __fget_files+0x26a/0x470 [ 1103.401841][ T3128] ? lock_downgrade+0x6e0/0x6e0 [ 1103.406726][ T3128] ? __fget_files+0x28c/0x470 [ 1103.411439][ T3128] ? __fget_light+0xea/0x280 [ 1103.416067][ T3128] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1103.422337][ T3128] __sys_sendmsg+0xe5/0x1b0 [ 1103.426866][ T3128] ? __sys_sendmsg_sock+0x30/0x30 [ 1103.431938][ T3128] ? syscall_enter_from_user_mode+0x21/0x70 [ 1103.437861][ T3128] do_syscall_64+0x35/0xb0 [ 1103.442300][ T3128] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.448223][ T3128] RIP: 0033:0x7f9000110059 [ 1103.452648][ T3128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1103.472276][ T3128] RSP: 002b:00007f8ffea85168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1103.481661][ T3128] RAX: ffffffffffffffda RBX: 00007f9000222f60 RCX: 00007f9000110059 [ 1103.489660][ T3128] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1103.497650][ T3128] RBP: 00007f8ffea851d0 R08: 0000000000000000 R09: 0000000000000000 [ 1103.505638][ T3128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.513636][ T3128] R13: 00007fff709e577f R14: 00007f8ffea85300 R15: 0000000000022000 [ 1103.521644][ T3128] [ 1103.524673][ T3131] CPU: 0 PID: 3131 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1103.535109][ T3131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.545177][ T3131] Call Trace: [ 1103.548459][ T3131] [ 1103.551484][ T3131] dump_stack_lvl+0xcd/0x134 [ 1103.556097][ T3131] should_fail.cold+0x5/0xa [ 1103.560613][ T3131] _copy_from_user+0x2c/0x180 [ 1103.565309][ T3131] iovec_from_user+0x23e/0x3c0 [ 1103.570089][ T3131] __import_iovec+0x65/0x590 [ 1103.574697][ T3131] import_iovec+0x10c/0x150 [ 1103.579217][ T3131] sendmsg_copy_msghdr+0x12d/0x160 [ 1103.584349][ T3131] ? do_recvmmsg+0x6d0/0x6d0 [ 1103.588946][ T3131] ? lock_chain_count+0x20/0x20 [ 1103.593807][ T3131] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1103.599815][ T3131] ___sys_sendmsg+0xc6/0x170 [ 1103.604507][ T3131] ? sendmsg_copy_msghdr+0x160/0x160 [ 1103.609809][ T3131] ? __fget_files+0x26a/0x470 [ 1103.614499][ T3131] ? lock_downgrade+0x6e0/0x6e0 [ 1103.619381][ T3131] ? __fget_files+0x28c/0x470 [ 1103.624076][ T3131] ? __fget_light+0xea/0x280 [ 1103.628694][ T3131] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1103.634955][ T3131] __sys_sendmsg+0xe5/0x1b0 [ 1103.639494][ T3131] ? __sys_sendmsg_sock+0x30/0x30 [ 1103.644556][ T3131] ? syscall_enter_from_user_mode+0x21/0x70 [ 1103.650473][ T3131] do_syscall_64+0x35/0xb0 [ 1103.654941][ T3131] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.660849][ T3131] RIP: 0033:0x7f000e751059 [ 1103.665283][ T3131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1103.684906][ T3131] RSP: 002b:00007f000d0c6168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1103.693418][ T3131] RAX: ffffffffffffffda RBX: 00007f000e863f60 RCX: 00007f000e751059 [ 1103.701396][ T3131] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1103.709373][ T3131] RBP: 00007f000d0c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1103.717351][ T3131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 11:12:04 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000140)="7bddefd0275090340f33bd09f6a9308c1560f582beba7a0d82e652157b4c918536a0a26a3789a317151dfbf60c65acb47027cf417264faf821f5f11ee78a49b307512aef2c37b0e0299936eeedcc461c885a38217ca5d453b485192c764de9a35da6a150e28aeff6a58cd793ee1dfa4d9a3c2c22a3d75a6c58b65172", 0x7c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:04 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 4) 11:12:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1103.725369][ T3131] R13: 00007ffd2a3112ff R14: 00007f000d0c6300 R15: 0000000000022000 [ 1103.733366][ T3131] [ 1103.737177][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f0b5800: rx timeout, send abort [ 1103.746134][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f0b5800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:04 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 3) [ 1103.809538][ T3136] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1103.830540][ T3135] FAULT_INJECTION: forcing a failure. [ 1103.830540][ T3135] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.846859][ T3142] FAULT_INJECTION: forcing a failure. [ 1103.846859][ T3142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.861468][ T3142] CPU: 0 PID: 3142 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1103.871940][ T3142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.882034][ T3142] Call Trace: [ 1103.885322][ T3142] [ 1103.888261][ T3142] dump_stack_lvl+0xcd/0x134 [ 1103.892869][ T3142] should_fail.cold+0x5/0xa [ 1103.897388][ T3142] _copy_from_user+0x2c/0x180 [ 1103.902089][ T3142] iovec_from_user+0x23e/0x3c0 [ 1103.906871][ T3142] __import_iovec+0x65/0x590 [ 1103.911483][ T3142] import_iovec+0x10c/0x150 [ 1103.916010][ T3142] sendmsg_copy_msghdr+0x12d/0x160 [ 1103.921229][ T3142] ? do_recvmmsg+0x6d0/0x6d0 [ 1103.925831][ T3142] ? lock_chain_count+0x20/0x20 [ 1103.930694][ T3142] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1103.936695][ T3142] ___sys_sendmsg+0xc6/0x170 [ 1103.941304][ T3142] ? sendmsg_copy_msghdr+0x160/0x160 [ 1103.946620][ T3142] ? __fget_files+0x26a/0x470 [ 1103.951308][ T3142] ? lock_downgrade+0x6e0/0x6e0 [ 1103.956180][ T3142] ? __fget_files+0x28c/0x470 [ 1103.960873][ T3142] ? __fget_light+0xea/0x280 [ 1103.965470][ T3142] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1103.971733][ T3142] __sys_sendmsg+0xe5/0x1b0 [ 1103.976249][ T3142] ? __sys_sendmsg_sock+0x30/0x30 [ 1103.981330][ T3142] ? syscall_enter_from_user_mode+0x21/0x70 [ 1103.987243][ T3142] do_syscall_64+0x35/0xb0 [ 1103.991667][ T3142] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.997575][ T3142] RIP: 0033:0x7f9000110059 [ 1104.001998][ T3142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1104.021610][ T3142] RSP: 002b:00007f8ffea85168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.030032][ T3142] RAX: ffffffffffffffda RBX: 00007f9000222f60 RCX: 00007f9000110059 [ 1104.038008][ T3142] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1104.045982][ T3142] RBP: 00007f8ffea851d0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.054049][ T3142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.062020][ T3142] R13: 00007fff709e577f R14: 00007f8ffea85300 R15: 0000000000022000 [ 1104.070011][ T3142] [ 1104.080630][ T3135] CPU: 0 PID: 3135 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1104.091092][ T3135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.101158][ T3135] Call Trace: [ 1104.104455][ T3135] [ 1104.107388][ T3135] dump_stack_lvl+0xcd/0x134 [ 1104.111995][ T3135] should_fail.cold+0x5/0xa [ 1104.116606][ T3135] should_failslab+0x5/0x10 [ 1104.121121][ T3135] kmem_cache_alloc_node+0x65/0x3f0 [ 1104.126347][ T3135] ? __alloc_skb+0x215/0x340 [ 1104.130952][ T3135] __alloc_skb+0x215/0x340 [ 1104.135379][ T3135] alloc_skb_with_frags+0x93/0x620 [ 1104.140507][ T3135] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1104.146513][ T3135] ? lock_chain_count+0x20/0x20 [ 1104.151376][ T3135] sock_alloc_send_pskb+0x793/0x920 [ 1104.156590][ T3135] ? sk_reset_timer+0xc0/0xc0 [ 1104.161281][ T3135] ? mark_held_locks+0x9f/0xe0 [ 1104.166065][ T3135] ? __local_bh_enable_ip+0xa0/0x120 [ 1104.171370][ T3135] j1939_sk_sendmsg+0x6eb/0x13e0 [ 1104.176416][ T3135] ? j1939_sk_bind+0xeb0/0xeb0 [ 1104.181188][ T3135] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1104.187448][ T3135] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1104.193705][ T3135] ? j1939_sk_bind+0xeb0/0xeb0 [ 1104.198478][ T3135] sock_sendmsg+0xcf/0x120 [ 1104.202913][ T3135] ____sys_sendmsg+0x6e8/0x810 [ 1104.207687][ T3135] ? kernel_sendmsg+0x50/0x50 [ 1104.212378][ T3135] ? do_recvmmsg+0x6d0/0x6d0 [ 1104.216976][ T3135] ? lock_chain_count+0x20/0x20 [ 1104.222456][ T3135] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1104.228486][ T3135] ___sys_sendmsg+0xf3/0x170 [ 1104.233093][ T3135] ? sendmsg_copy_msghdr+0x160/0x160 [ 1104.238396][ T3135] ? lock_downgrade+0x6e0/0x6e0 [ 1104.243280][ T3135] ? __fget_files+0x28c/0x470 [ 1104.247990][ T3135] ? __fget_light+0xea/0x280 [ 1104.252605][ T3135] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1104.258877][ T3135] __sys_sendmsg+0xe5/0x1b0 [ 1104.267134][ T3135] ? __sys_sendmsg_sock+0x30/0x30 [ 1104.272190][ T3135] ? syscall_enter_from_user_mode+0x21/0x70 [ 1104.278104][ T3135] do_syscall_64+0x35/0xb0 [ 1104.282546][ T3135] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1104.288452][ T3135] RIP: 0033:0x7fc42e292059 [ 1104.292871][ T3135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1104.312485][ T3135] RSP: 002b:00007fc42cc07168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.320908][ T3135] RAX: ffffffffffffffda RBX: 00007fc42e3a4f60 RCX: 00007fc42e292059 [ 1104.328882][ T3135] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1104.336859][ T3135] RBP: 00007fc42cc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.344917][ T3135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.352891][ T3135] R13: 00007ffd3dae6c1f R14: 00007fc42cc07300 R15: 0000000000022000 [ 1104.360884][ T3135] 11:12:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0xffff000000000000}, 0x0) 11:12:04 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 4) 11:12:04 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 5) [ 1104.417050][ T3136] device bond172 entered promiscuous mode [ 1104.480486][ T3146] FAULT_INJECTION: forcing a failure. [ 1104.480486][ T3146] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.487812][ T3143] bond172: (slave bridge95): making interface the new active one [ 1104.508284][ T3146] CPU: 1 PID: 3146 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1104.509152][ T3143] device bridge95 entered promiscuous mode [ 1104.518734][ T3146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.518751][ T3146] Call Trace: [ 1104.518760][ T3146] [ 1104.518771][ T3146] dump_stack_lvl+0xcd/0x134 [ 1104.518806][ T3146] should_fail.cold+0x5/0xa [ 1104.518834][ T3146] should_failslab+0x5/0x10 [ 1104.518863][ T3146] kmem_cache_alloc_node+0x65/0x3f0 [ 1104.518892][ T3146] ? __alloc_skb+0x215/0x340 [ 1104.518923][ T3146] __alloc_skb+0x215/0x340 [ 1104.518951][ T3146] alloc_skb_with_frags+0x93/0x620 [ 1104.518979][ T3146] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1104.519010][ T3146] ? lock_chain_count+0x20/0x20 [ 1104.519040][ T3146] sock_alloc_send_pskb+0x793/0x920 [ 1104.519076][ T3146] ? sk_reset_timer+0xc0/0xc0 [ 1104.519103][ T3146] ? mark_held_locks+0x9f/0xe0 [ 1104.519132][ T3146] ? __local_bh_enable_ip+0xa0/0x120 [ 1104.519167][ T3146] j1939_sk_sendmsg+0x6eb/0x13e0 [ 1104.519210][ T3146] ? j1939_sk_bind+0xeb0/0xeb0 [ 1104.519235][ T3146] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1104.519271][ T3146] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1104.519305][ T3146] ? j1939_sk_bind+0xeb0/0xeb0 [ 1104.519332][ T3146] sock_sendmsg+0xcf/0x120 [ 1104.519359][ T3146] ____sys_sendmsg+0x6e8/0x810 [ 1104.519383][ T3146] ? kernel_sendmsg+0x50/0x50 [ 1104.519402][ T3146] ? do_recvmmsg+0x6d0/0x6d0 [ 1104.519430][ T3146] ? lock_chain_count+0x20/0x20 [ 1104.519458][ T3146] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1104.519500][ T3146] ___sys_sendmsg+0xf3/0x170 [ 1104.519532][ T3146] ? sendmsg_copy_msghdr+0x160/0x160 [ 1104.519567][ T3146] ? lock_downgrade+0x6e0/0x6e0 [ 1104.519616][ T3146] ? __fget_files+0x28c/0x470 [ 1104.519655][ T3146] ? __fget_light+0xea/0x280 [ 1104.527373][ T3143] bond172: (slave bridge95): Enslaving as an active interface with an up link [ 1104.535535][ T3146] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1104.535582][ T3146] __sys_sendmsg+0xe5/0x1b0 [ 1104.535618][ T3146] ? __sys_sendmsg_sock+0x30/0x30 [ 1104.535658][ T3146] ? syscall_enter_from_user_mode+0x21/0x70 [ 1104.539551][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f263800: rx timeout, send abort [ 1104.541846][ T3146] do_syscall_64+0x35/0xb0 [ 1104.546701][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f263800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1104.550910][ T3146] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1104.550947][ T3146] RIP: 0033:0x7f9000110059 [ 1104.550970][ T3146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1104.567937][ T3150] FAULT_INJECTION: forcing a failure. [ 1104.567937][ T3150] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.569623][ T3146] RSP: 002b:00007f8ffea85168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.569654][ T3146] RAX: ffffffffffffffda RBX: 00007f9000222f60 RCX: 00007f9000110059 [ 1104.569672][ T3146] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1104.809789][ T3146] RBP: 00007f8ffea851d0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.817772][ T3146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.825846][ T3146] R13: 00007fff709e577f R14: 00007f8ffea85300 R15: 0000000000022000 [ 1104.833855][ T3146] [ 1104.839530][ T3150] CPU: 0 PID: 3150 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1104.849995][ T3150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.860073][ T3150] Call Trace: [ 1104.863384][ T3150] [ 1104.866334][ T3150] dump_stack_lvl+0xcd/0x134 [ 1104.870963][ T3150] should_fail.cold+0x5/0xa [ 1104.875585][ T3150] should_failslab+0x5/0x10 [ 1104.880125][ T3150] __kmalloc_node_track_caller+0x7d/0x360 [ 1104.885873][ T3150] ? alloc_skb_with_frags+0x93/0x620 [ 1104.891193][ T3150] __alloc_skb+0xde/0x340 [ 1104.895555][ T3150] alloc_skb_with_frags+0x93/0x620 [ 1104.900712][ T3150] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1104.906902][ T3150] ? lock_chain_count+0x20/0x20 [ 1104.911801][ T3150] sock_alloc_send_pskb+0x793/0x920 [ 1104.917041][ T3150] ? sk_reset_timer+0xc0/0xc0 [ 1104.918407][ T3152] FAULT_INJECTION: forcing a failure. 11:12:05 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) (fail_nth: 4) [ 1104.918407][ T3152] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.921747][ T3150] ? mark_held_locks+0x9f/0xe0 [ 1104.921785][ T3150] ? __local_bh_enable_ip+0xa0/0x120 [ 1104.921821][ T3150] j1939_sk_sendmsg+0x6eb/0x13e0 [ 1104.921863][ T3150] ? j1939_sk_bind+0xeb0/0xeb0 [ 1104.921888][ T3150] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1104.921927][ T3150] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1104.921961][ T3150] ? j1939_sk_bind+0xeb0/0xeb0 [ 1104.921989][ T3150] sock_sendmsg+0xcf/0x120 [ 1104.922019][ T3150] ____sys_sendmsg+0x6e8/0x810 [ 1104.922051][ T3150] ? kernel_sendmsg+0x50/0x50 [ 1104.922076][ T3150] ? do_recvmmsg+0x6d0/0x6d0 [ 1104.922113][ T3150] ? lock_chain_count+0x20/0x20 [ 1104.922143][ T3150] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1104.922187][ T3150] ___sys_sendmsg+0xf3/0x170 [ 1104.922219][ T3150] ? sendmsg_copy_msghdr+0x160/0x160 [ 1104.922256][ T3150] ? lock_downgrade+0x6e0/0x6e0 [ 1104.922299][ T3150] ? __fget_files+0x28c/0x470 [ 1105.020997][ T3150] ? __fget_light+0xea/0x280 [ 1105.025619][ T3150] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1105.031900][ T3150] __sys_sendmsg+0xe5/0x1b0 [ 1105.036438][ T3150] ? __sys_sendmsg_sock+0x30/0x30 [ 1105.041508][ T3150] ? syscall_enter_from_user_mode+0x21/0x70 [ 1105.047443][ T3150] do_syscall_64+0x35/0xb0 [ 1105.051971][ T3150] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1105.057893][ T3150] RIP: 0033:0x7fc42e292059 [ 1105.062326][ T3150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1105.079151][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880229bf000: rx timeout, send abort [ 1105.081970][ T3150] RSP: 002b:00007fc42cc07168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1105.082000][ T3150] RAX: ffffffffffffffda RBX: 00007fc42e3a4f60 RCX: 00007fc42e292059 [ 1105.082018][ T3150] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1105.090615][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880229bf000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1105.098725][ T3150] RBP: 00007fc42cc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.098744][ T3150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.098759][ T3150] R13: 00007ffd3dae6c1f R14: 00007fc42cc07300 R15: 0000000000022000 [ 1105.098795][ T3150] [ 1105.158248][ T3152] CPU: 1 PID: 3152 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1105.168702][ T3152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.178776][ T3152] Call Trace: [ 1105.182071][ T3152] [ 1105.185017][ T3152] dump_stack_lvl+0xcd/0x134 [ 1105.189637][ T3152] should_fail.cold+0x5/0xa [ 1105.194171][ T3152] should_failslab+0x5/0x10 [ 1105.198712][ T3152] kmem_cache_alloc_node+0x65/0x3f0 [ 1105.204287][ T3152] ? __alloc_skb+0x215/0x340 [ 1105.208914][ T3152] __alloc_skb+0x215/0x340 [ 1105.213363][ T3152] alloc_skb_with_frags+0x93/0x620 [ 1105.218505][ T3152] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1105.224520][ T3152] ? lock_chain_count+0x20/0x20 [ 1105.229417][ T3152] sock_alloc_send_pskb+0x793/0x920 [ 1105.234654][ T3152] ? sk_reset_timer+0xc0/0xc0 [ 1105.239350][ T3152] ? mark_held_locks+0x9f/0xe0 [ 1105.244138][ T3152] ? __local_bh_enable_ip+0xa0/0x120 [ 1105.249460][ T3152] j1939_sk_sendmsg+0x6eb/0x13e0 [ 1105.254434][ T3152] ? j1939_sk_bind+0xeb0/0xeb0 [ 1105.259221][ T3152] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1105.265492][ T3152] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1105.271775][ T3152] ? j1939_sk_bind+0xeb0/0xeb0 [ 1105.276576][ T3152] sock_sendmsg+0xcf/0x120 [ 1105.281021][ T3152] ____sys_sendmsg+0x6e8/0x810 [ 1105.285818][ T3152] ? kernel_sendmsg+0x50/0x50 [ 1105.290531][ T3152] ? do_recvmmsg+0x6d0/0x6d0 [ 1105.295150][ T3152] ? lock_chain_count+0x20/0x20 [ 1105.300024][ T3152] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1105.306041][ T3152] ___sys_sendmsg+0xf3/0x170 [ 1105.310660][ T3152] ? sendmsg_copy_msghdr+0x160/0x160 [ 1105.316152][ T3152] ? lock_downgrade+0x6e0/0x6e0 [ 1105.321215][ T3152] ? __fget_files+0x28c/0x470 [ 1105.325927][ T3152] ? __fget_light+0xea/0x280 [ 1105.330536][ T3152] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1105.336905][ T3152] __sys_sendmsg+0xe5/0x1b0 [ 1105.341433][ T3152] ? __sys_sendmsg_sock+0x30/0x30 [ 1105.346496][ T3152] ? syscall_enter_from_user_mode+0x21/0x70 [ 1105.352520][ T3152] do_syscall_64+0x35/0xb0 [ 1105.357053][ T3152] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1105.362976][ T3152] RIP: 0033:0x7f000e751059 [ 1105.367418][ T3152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1105.387048][ T3152] RSP: 002b:00007f000d0c6168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1105.395669][ T3152] RAX: ffffffffffffffda RBX: 00007f000e863f60 RCX: 00007f000e751059 [ 1105.403659][ T3152] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1105.411660][ T3152] RBP: 00007f000d0c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.419654][ T3152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 11:12:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0xffffff7f00000000}, 0x0) 11:12:05 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 6) 11:12:05 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000140)="7bddefd0275090340f33bd09f6a9308c1560f582beba7a0d82e652157b4c918536a0a26a3789a317151dfbf60c65acb47027cf417264faf821f5f11ee78a49b307512aef2c37b0e0299936eeedcc461c885a38217ca5d453b485192c764de9a35da6a150e28aeff6a58cd793ee1dfa4d9a3c2c22a3d75a6c58b65172", 0x7c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1105.427645][ T3152] R13: 00007ffd2a3112ff R14: 00007f000d0c6300 R15: 0000000000022000 [ 1105.435656][ T3152] 11:12:05 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 5) [ 1105.479211][ T3156] FAULT_INJECTION: forcing a failure. [ 1105.479211][ T3156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.499545][ T3156] CPU: 1 PID: 3156 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1105.510030][ T3156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.520109][ T3156] Call Trace: [ 1105.523414][ T3156] [ 1105.526361][ T3156] dump_stack_lvl+0xcd/0x134 [ 1105.530990][ T3156] should_fail.cold+0x5/0xa [ 1105.535532][ T3156] _copy_from_iter+0x389/0x1410 [ 1105.540433][ T3156] ? hash_and_copy_to_iter+0x200/0x200 [ 1105.545928][ T3156] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1105.552209][ T3156] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1105.558485][ T3156] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1105.562708][ T3166] FAULT_INJECTION: forcing a failure. [ 1105.562708][ T3166] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.564764][ T3156] ? __phys_addr+0xc4/0x140 [ 1105.564803][ T3156] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1105.588139][ T3156] ? __phys_addr_symbol+0x2c/0x70 [ 1105.593196][ T3156] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1105.598948][ T3156] ? __check_object_size+0x16e/0x310 [ 1105.604265][ T3156] j1939_sk_sendmsg+0x81d/0x13e0 [ 1105.609248][ T3156] ? j1939_sk_bind+0xeb0/0xeb0 [ 1105.614042][ T3156] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1105.620310][ T3156] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1105.626574][ T3156] ? j1939_sk_bind+0xeb0/0xeb0 [ 1105.631354][ T3156] sock_sendmsg+0xcf/0x120 [ 1105.635784][ T3156] ____sys_sendmsg+0x6e8/0x810 [ 1105.640566][ T3156] ? kernel_sendmsg+0x50/0x50 [ 1105.645254][ T3156] ? do_recvmmsg+0x6d0/0x6d0 [ 1105.649855][ T3156] ? lock_chain_count+0x20/0x20 [ 1105.654725][ T3156] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1105.660746][ T3156] ___sys_sendmsg+0xf3/0x170 [ 1105.665351][ T3156] ? sendmsg_copy_msghdr+0x160/0x160 [ 1105.670654][ T3156] ? lock_downgrade+0x6e0/0x6e0 [ 1105.675525][ T3156] ? __fget_files+0x28c/0x470 [ 1105.680222][ T3156] ? __fget_light+0xea/0x280 [ 1105.684832][ T3156] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1105.691092][ T3156] __sys_sendmsg+0xe5/0x1b0 [ 1105.695609][ T3156] ? __sys_sendmsg_sock+0x30/0x30 [ 1105.700660][ T3156] ? syscall_enter_from_user_mode+0x21/0x70 [ 1105.706571][ T3156] do_syscall_64+0x35/0xb0 [ 1105.711000][ T3156] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1105.716993][ T3156] RIP: 0033:0x7fc42e292059 [ 1105.721425][ T3156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1105.741049][ T3156] RSP: 002b:00007fc42cc07168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1105.749475][ T3156] RAX: ffffffffffffffda RBX: 00007fc42e3a4f60 RCX: 00007fc42e292059 [ 1105.757467][ T3156] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1105.767622][ T3156] RBP: 00007fc42cc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.775612][ T3156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.783593][ T3156] R13: 00007ffd3dae6c1f R14: 00007fc42cc07300 R15: 0000000000022000 [ 1105.791595][ T3156] [ 1105.794624][ T3166] CPU: 0 PID: 3166 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1105.805064][ T3166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.815138][ T3166] Call Trace: [ 1105.818445][ T3166] [ 1105.821378][ T3166] dump_stack_lvl+0xcd/0x134 [ 1105.825985][ T3166] should_fail.cold+0x5/0xa [ 1105.830498][ T3166] should_failslab+0x5/0x10 [ 1105.835010][ T3166] __kmalloc_node_track_caller+0x7d/0x360 [ 1105.840739][ T3166] ? alloc_skb_with_frags+0x93/0x620 [ 1105.846040][ T3166] __alloc_skb+0xde/0x340 [ 1105.850382][ T3166] alloc_skb_with_frags+0x93/0x620 [ 1105.855503][ T3166] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1105.861506][ T3166] ? lock_chain_count+0x20/0x20 [ 1105.866371][ T3166] sock_alloc_send_pskb+0x793/0x920 [ 1105.871595][ T3166] ? sk_reset_timer+0xc0/0xc0 [ 1105.876279][ T3166] ? mark_held_locks+0x9f/0xe0 [ 1105.881056][ T3166] ? __local_bh_enable_ip+0xa0/0x120 [ 1105.886354][ T3166] j1939_sk_sendmsg+0x6eb/0x13e0 [ 1105.891315][ T3166] ? j1939_sk_bind+0xeb0/0xeb0 [ 1105.896082][ T3166] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1105.902514][ T3166] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1105.908766][ T3166] ? j1939_sk_bind+0xeb0/0xeb0 [ 1105.913539][ T3166] sock_sendmsg+0xcf/0x120 [ 1105.917969][ T3166] ____sys_sendmsg+0x6e8/0x810 [ 1105.922743][ T3166] ? kernel_sendmsg+0x50/0x50 [ 1105.927423][ T3166] ? do_recvmmsg+0x6d0/0x6d0 [ 1105.932021][ T3166] ? lock_chain_count+0x20/0x20 [ 1105.936885][ T3166] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1105.942899][ T3166] ___sys_sendmsg+0xf3/0x170 [ 1105.947610][ T3166] ? sendmsg_copy_msghdr+0x160/0x160 [ 1105.952913][ T3166] ? lock_downgrade+0x6e0/0x6e0 [ 1105.957793][ T3166] ? __fget_files+0x28c/0x470 [ 1105.962505][ T3166] ? __fget_light+0xea/0x280 [ 1105.967102][ T3166] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1105.973446][ T3166] __sys_sendmsg+0xe5/0x1b0 [ 1105.977964][ T3166] ? __sys_sendmsg_sock+0x30/0x30 [ 1105.983018][ T3166] ? syscall_enter_from_user_mode+0x21/0x70 [ 1105.988928][ T3166] do_syscall_64+0x35/0xb0 [ 1105.993349][ T3166] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1105.999257][ T3166] RIP: 0033:0x7f9000110059 [ 1106.003676][ T3166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1106.023288][ T3166] RSP: 002b:00007f8ffea64168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 11:12:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1106.031711][ T3166] RAX: ffffffffffffffda RBX: 00007f9000223030 RCX: 00007f9000110059 [ 1106.039695][ T3166] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1106.047675][ T3166] RBP: 00007f8ffea641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.055733][ T3166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.063704][ T3166] R13: 00007fff709e577f R14: 00007f8ffea64300 R15: 0000000000022000 [ 1106.071786][ T3166] 11:12:06 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 6) 11:12:06 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000001180)={r0, 0xa5, 0x1000, "047ada3fb0955f8c263f5ad4d34d6ea5d19c08ec297a07c950e7e9011884eb68b315e777486b40563e83e1f71a47"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003680)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="851cd8f8ca133fdc50518cf8919f38ace71c805094174da2f0490cac139e58e197c964", 0x23}, {&(0x7f0000000140)="307f9f648946732b7099c10f2d8cbb9f813a7b4e3cfbb58679039c56cfe721192ea31d2c67f949bf20b167a35c6d33d48e1d1d73c77485f987538015379b6f0448284ca8a619008144592800bf", 0x4d}, {&(0x7f0000000280)="edef017146537d17ab96cff515fd8ab7fe5e653d76117063960d271362303dd6f37d3038d174f5b2638a7a15e82717b69f0daba9c054a7f272fca2d40a58ef1350d38ffe6eeb01b9c3d9a700a0f1cff9696518f1485917a7322d671e59f1470b48dbb46452df27e220c4ba0faa3abb239b6d864f64d495e9f6a6aae31d72205c39917e8afe05", 0x86}, {&(0x7f0000000340)="f874aeaf674c361156957aca556697b5cd8283e6f317b5acddead768929a92bf3ba6359bd8114a0969108ee7cdac0ccf711b600bf95c5b06c650cff3fc979123efddd67def753a1e93d8b5ec4aa03c0fccb81c47833a40adb86cc11a3fd94b54297e7b996fe3c03ccf7981ca6f750794f525ac1757ce2d0dc235cf8ef92e7bcdd5df5ea161ce1a109106178f41498a7d584a401ce53ffc1bf857873368609feddfc12e648d62b643e2a968e9b19e8ee85277475b05af72efc089517d13092c0c9e72f0bdadb596b5a0b61a2365918d9156c7c4faed8c0c258c08f04bb4b2cdf8a5", 0xe1}, {&(0x7f0000000440)="a2fd5e227c06a082dfb33f98cad0b0b8dbc6d18490ef450acaae10cec96dfdfd57457daa1ed5b29b882a395e1061a93fb4c9c8c708885917e0ba02162098c22b5e719283a0bddfe405d31ae6b3d0b08777dae402657b2555aadade9a", 0x5c}], 0x5, 0x0, 0x0, 0x8001}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="c011b224cd2b3644f3c1048311eb4c066094e891141296791dfd09", 0x1b}, {&(0x7f0000000540)="df11f73c46ffcb2e8631622c18862edd0ecee92cbf8a1f60a5feacac27bf1501259e148fe50deb5d0050558bdf431344c7c28e1aae1a273efe6da03924be807c27815154831d9b9761f0d4615570dc6eab25e26967afe2cb09f79a3b682f6a7d954d86349f3253a133a385b711fc6da17c3d24604cdcc285a58a6b8ac97e01bb1848db1fb8607f9979f0db53b4d815779117c913dfb9d7d09165de2f3aaf9ab2bc210d719d7756ec6b955039", 0xac}], 0x2, &(0x7f00000010c0)=[@assoc={0x18, 0x117, 0x4, 0xffffffe1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7fff}, @assoc={0x18, 0x117, 0x4, 0xdc7}, @iv={0x28, 0x117, 0x2, 0xf, "bf0be8f3dfa0c27bea439a755189b5"}, @op={0x18, 0x117, 0x3, 0x1}], 0xa0, 0x40}, {0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="6696523af63b3ab327132921986d03ede8401751f88445e44e2687623ea41bf6944f706f1f31ec614379f324cf855ff299629f5593095770ee4f84ab41bf404667f79a8ad3655ae996cb636b575af23cbd730f76edc4d41fab8f3a0de07381946218e41cc6702af9866bf0bf386127f9bcff3f48419f6aff28f0f5ac", 0x7c}], 0x1, &(0x7f0000000700)=[@op={0x18}], 0x18, 0x4000889}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000740)="386b03377f5fe41e58c234c541ec42c69ee4d2f5f6c52e53d40260ba40b369db4dc55c4aa9aa66ac08266f77711dfa3c628d0833", 0x34}, {&(0x7f0000000780)="7403660fd2c851a0be875654f40cb7de128ec280a57585bcb762d8cad0233ab7669ca56eb39bbffc259a8303dbbbe999b57cbf8d09d1fa020e2bedcf9b228c5be7ed74ddf9d84123c87eabdca75eb81fdb58bc1125aa4eed0c0e66f5607574698250d7d3689cb28a8419580a59b62448bcbb907f54f95f7f4d0f715c11c019c0c4a05612c50075c2", 0x88}, {&(0x7f0000000840)="5b9c97945bcddeeb4e98cbdc0233424f420b39e704fcc23f60ac56b98d3477dfaf94b5b781d19ed3467f935d98c9403b96e9dc2edca51b589c4495f445d9bfb4f17923", 0x43}, {&(0x7f00000008c0)="e5f5f34ab720bb6ce60da4aaf54151ae4af7f47416edc80c2a08c2456e291613c11ff607f92e3526d9c7f3838b292d4ae6cc61b9ef510fbb274646426d58b6184a4d79ae06ec2588e8c145233c65d52dd0657bbd522ee64ac56260efccb87af4ab03459f319e26e7a530f73a55ae0bdbf53aeb72c85e2d8add3a95d65a9059e36b8efab5aaa9e03c47af0eadb957fe9a378c8610b505017c46ade58f00fe00a37c4916b8089e1db60ca59226777182b149add5d43dbad9d2585cbe958e27af12ff97914c7927", 0xc6}], 0x4, &(0x7f0000000a00)=[@iv={0x78, 0x117, 0x2, 0x5f, "8a80d4721ed670937c1902899681f45e01ce36746be1714d0d9933815947640e864f19202731dd9eef81ad1c7581fad7304425772fefbdf62e2cbfa844170ee4b5e1d3063dd3b9c76962aff679c680263e585935ca10671f6d9d58b8cc626a"}, @op={0x18, 0x117, 0x3, 0x1}], 0x90, 0x20000804}, {0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000ac0)="821ecd3b31a348828ddc527b41db9f3153762a373c205ef4ecf9c48321842ef0042bbcaa94f4842e985856b5fb0b4ff60bbe85539b7a73ac017ba0e4bc5a140164b15c90c39b9017e66e23f8e2055c497a60c2074b6768929ca31a6598698c5db832fc9671bd6455117e08cab8659c48eafcb17705c3b83a0f804d101027fe70d7b7a6cf3fc904bf27f8e021ea0f9d87dc916a8e9def0896a97c0f17a95b2c2f30fc1be1692611ef8be169d26b51874b3f4a0d00981e4cda63a01b33cf0bd5b1a686d6fd6fcfbc8dd292bbf1f008c6cd42b5be6cf0d7fbeba0b4a67811afb1f28b6b84a36b96f246bcd2ba0e42541b752bbcbed9fbd2d097", 0xf8}, {&(0x7f0000000bc0)="a1c0fdc629a28152be9feb5f6669edd9e6b8f4791d95c6b3c1800a63fc7406", 0x1f}, {&(0x7f0000000c00)="08c194249d2e4bf3a8076c9996ee05d4cfce26e57941a972a11e8df0ddc780cc0fcc6eed12b7b389c1543ba08507c9120741e0621ea1ad9f7ec2d75e28db7caefb4fa9c22966ae2dd45029d8c0e0803ac53af1d875842a7cbb82c6b5014ac144ac109f8d8a2e509eec68e9314ad6fb1beb1d39", 0x73}], 0x3, &(0x7f0000000cc0)=[@iv={0xe0, 0x117, 0x2, 0xc9, "a73e55fe52717bcd7a2b82913b136fd937b7a5573667154493b9b540b120e3e66dbed41be268d30ecdd162f852ab1d4f2af26c8a178db5815482867bc391d74127194b6721e2a102085e5f8e2ee5f5dca4cf9dff3e264d83cd88621ee89ea6f42c733a1ad48945b7c0fde778ca580c7c2c17fc8a7d6ebae024f8064071d36cbb60e160411d1d0c302368db8bf5e081284f7a0b58bce2857a45944eeb0791fbe922ceedc0d5475f0a9ade8e04e6df022a6d81f8da1df2a8216bcf2d4e1ad9d3b495583758615627d700"}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x1d, "584d2ca220ed61a3cf8bc83c239c43010469b53f1c951f181f01e91b1f"}], 0x148}, {0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e40)="5e12ddc9ca12996965d22e92562fed82eab8d943a18de18dac79f6", 0x1b}, {&(0x7f0000000e80)="17f48b4599877bd76cd35ac0bcced0a1a14becb2d722de473b7e3cdde59acd6f56b8cd1370586ed68a3a72b99a27b5b4f22b392c4b035bdb004e112c890bf13e89e4efc91dcbd5fe734d4cac16e8827ab3fe857d0052c5b7e3b855a4ed3fdacc02ff47f4796276595690b818bd4c7a9091cb7fdd3ee1a2284932741b320e26d2fd651d99f8e5b77c14ef2fb1d1cd91366cd100d28f7227ed2fdea0a8ce189b7b7fc59b4cdde1b2d2c2e977187bddef6f4b0d507f0db9c5331afe45113f1a4aa0f4958ab2f2d9dcb4e47556b462172519e251404e38544bd6", 0xd8}], 0x2, 0x0, 0x0, 0x4040041}, {0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000fc0)="82559901902e16c6668b1e4d39ee6c9c419a971050a08c6679c264643fb688f5a431c682da1ef2f3c65bcb0144943b41f7940b937ac070dc53dd610ef07f879e2947dd0fe442fc640e45d7bfbb8449b5b513d3ed4e75b93248cd031a564d639e05d96b690b762add8ca40cb518a482142b2d1534693f369ee3383276b8d4380cc04ea79d64f89aa096b2a04b", 0x8c}, {&(0x7f0000002180)}, {&(0x7f00000021c0)="cf121747436e1522ca41959a95fed3102e315df44b7feec15b4cb1ee6dd81e515fbfcff0e871356754616af9743113cf5b79663e66a4ea5edeeabe73f48735be1468524ec252797525147b40632f4b4a6e09d0217f9273022b2fefce1396e7916aae303d47df333e6ea5e522a75802226ab21d9f9f3e42bc27bf86b416d934a4c1682edf48ef9a1a2077859250c2c3189a5a0f80fa5eb761c3b418ef5aa64ef25d69a2c87f95c352230724e1d83c46604a4bb010df89fb54c77c2dfc35cd6bbdeaf96df720c62f21de40248eb3", 0xcd}, {&(0x7f00000022c0)="0055d8064ffcd3d6ae91c7cf439915ddf160f55010b2586410e00fd96151e4cdce61201b16597c2b74b0b296b9d2da30a4606b7868f30f6d3cdbbd7cb5f75b28bffb4c449246caf1231853c224a0f0129a132026121754ec34a9985e04565b99045d444df03a36ed4b0db60ee6b40be0d15bc05bb7c91b43b56ea2d7314101c64fdfe72f8da3f5a2be5888967271551e48d4276919644af0171b5ea19fe0271efe3bae03ccba07216d4c458df0bff47da2304d6a7d81f0157e10369f30f3c8a4f0cfb9adec01b4cd351fbc97d16a0d640d2fe4c273d33b6c45380bcc5271cb67d4afaaf101", 0xe5}], 0x4, &(0x7f0000002400)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}, @assoc={0x18}, @iv={0x110, 0x117, 0x2, 0xfb, "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"}, @iv={0x90, 0x117, 0x2, 0x7b, "c84e08c638bad8741fb816a0da28a3659e633018d13953c9556b34b0c8aa18d856333787129cf6760628618ed6bf0d2e83638e1986ab429818a2830566331ac25d53b57b5ca9a421dd23451575450e9d37500651f713b7101df04044c8ef332e00f8dc49c410c2370210e04ff82ae8811f51b5c7aa68b2ec9651f1"}, @iv={0x48, 0x117, 0x2, 0x31, "063bd90bbfb380e75b95ff8f44c46c85130d66e07001cf7db1da50e3f686411c509271ac1b6bb0b2134910fb1fadeb01a1"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1248, 0x30004040}], 0x7, 0x90) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1106.100152][ T3168] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:12:06 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 7) 11:12:06 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) (fail_nth: 5) [ 1106.155173][ T3168] device bond173 entered promiscuous mode [ 1106.167290][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c804400: rx timeout, send abort [ 1106.176011][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c804400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1106.216144][ T3179] FAULT_INJECTION: forcing a failure. [ 1106.216144][ T3179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.243741][ T3170] bond173: (slave bridge96): making interface the new active one [ 1106.253587][ T3179] CPU: 1 PID: 3179 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1106.264041][ T3179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.274135][ T3179] Call Trace: [ 1106.277430][ T3179] [ 1106.280380][ T3179] dump_stack_lvl+0xcd/0x134 [ 1106.285008][ T3179] should_fail.cold+0x5/0xa [ 1106.289374][ T3182] FAULT_INJECTION: forcing a failure. [ 1106.289374][ T3182] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.289536][ T3179] _copy_from_iter+0x389/0x1410 [ 1106.303010][ T3183] FAULT_INJECTION: forcing a failure. [ 1106.303010][ T3183] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.306971][ T3179] ? hash_and_copy_to_iter+0x200/0x200 [ 1106.307011][ T3179] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1106.307045][ T3179] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1106.337525][ T3179] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1106.343796][ T3179] ? __phys_addr+0xc4/0x140 [ 1106.348321][ T3179] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1106.354583][ T3179] ? __phys_addr_symbol+0x2c/0x70 [ 1106.359632][ T3179] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1106.365364][ T3179] ? __check_object_size+0x16e/0x310 [ 1106.370671][ T3179] j1939_sk_sendmsg+0x81d/0x13e0 [ 1106.375633][ T3179] ? j1939_sk_bind+0xeb0/0xeb0 [ 1106.380407][ T3179] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1106.386675][ T3179] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1106.392932][ T3179] ? j1939_sk_bind+0xeb0/0xeb0 [ 1106.397708][ T3179] sock_sendmsg+0xcf/0x120 [ 1106.402140][ T3179] ____sys_sendmsg+0x6e8/0x810 [ 1106.406916][ T3179] ? kernel_sendmsg+0x50/0x50 [ 1106.411597][ T3179] ? do_recvmmsg+0x6d0/0x6d0 [ 1106.416203][ T3179] ? lock_chain_count+0x20/0x20 [ 1106.421087][ T3179] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1106.427097][ T3179] ___sys_sendmsg+0xf3/0x170 [ 1106.431711][ T3179] ? sendmsg_copy_msghdr+0x160/0x160 [ 1106.437026][ T3179] ? lock_downgrade+0x6e0/0x6e0 [ 1106.441901][ T3179] ? __fget_files+0x28c/0x470 [ 1106.446608][ T3179] ? __fget_light+0xea/0x280 [ 1106.451220][ T3179] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1106.457485][ T3179] __sys_sendmsg+0xe5/0x1b0 [ 1106.462179][ T3179] ? __sys_sendmsg_sock+0x30/0x30 [ 1106.467248][ T3179] ? syscall_enter_from_user_mode+0x21/0x70 [ 1106.473174][ T3179] do_syscall_64+0x35/0xb0 [ 1106.477603][ T3179] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1106.483517][ T3179] RIP: 0033:0x7f9000110059 [ 1106.487936][ T3179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1106.507554][ T3179] RSP: 002b:00007f8ffea85168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1106.515991][ T3179] RAX: ffffffffffffffda RBX: 00007f9000222f60 RCX: 00007f9000110059 [ 1106.523976][ T3179] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1106.531955][ T3179] RBP: 00007f8ffea851d0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.539942][ T3179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.547924][ T3179] R13: 00007fff709e577f R14: 00007f8ffea85300 R15: 0000000000022000 [ 1106.555936][ T3179] [ 1106.559615][ T3183] CPU: 0 PID: 3183 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1106.570144][ T3183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.575965][ T3170] device bridge96 entered promiscuous mode [ 1106.580212][ T3183] Call Trace: [ 1106.580225][ T3183] [ 1106.580235][ T3183] dump_stack_lvl+0xcd/0x134 [ 1106.580270][ T3183] should_fail.cold+0x5/0xa [ 1106.588330][ T3170] bond173: (slave bridge96): Enslaving as an active interface with an up link [ 1106.589443][ T3183] ? j1939_session_new+0x80/0x4d0 11:12:07 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 7) [ 1106.589475][ T3183] should_failslab+0x5/0x10 [ 1106.620295][ T3183] kmem_cache_alloc_trace+0x55/0x2c0 [ 1106.625624][ T3183] ? hash_and_copy_to_iter+0x200/0x200 [ 1106.631128][ T3183] j1939_session_new+0x80/0x4d0 [ 1106.636010][ T3183] j1939_tp_send+0x22f/0x800 [ 1106.640637][ T3183] j1939_sk_sendmsg+0xb17/0x13e0 [ 1106.645618][ T3183] ? j1939_sk_bind+0xeb0/0xeb0 [ 1106.650402][ T3183] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1106.656698][ T3183] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1106.662976][ T3183] ? j1939_sk_bind+0xeb0/0xeb0 11:12:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 1106.667052][ T3185] FAULT_INJECTION: forcing a failure. [ 1106.667052][ T3185] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.667763][ T3183] sock_sendmsg+0xcf/0x120 [ 1106.667798][ T3183] ____sys_sendmsg+0x6e8/0x810 [ 1106.689564][ T3183] ? kernel_sendmsg+0x50/0x50 [ 1106.694260][ T3183] ? do_recvmmsg+0x6d0/0x6d0 [ 1106.698896][ T3183] ? lock_chain_count+0x20/0x20 [ 1106.703777][ T3183] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1106.709798][ T3183] ___sys_sendmsg+0xf3/0x170 [ 1106.714425][ T3183] ? sendmsg_copy_msghdr+0x160/0x160 [ 1106.719747][ T3183] ? lock_downgrade+0x6e0/0x6e0 [ 1106.724638][ T3183] ? __fget_files+0x28c/0x470 [ 1106.729351][ T3183] ? __fget_light+0xea/0x280 [ 1106.733959][ T3183] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1106.740232][ T3183] __sys_sendmsg+0xe5/0x1b0 [ 1106.744764][ T3183] ? __sys_sendmsg_sock+0x30/0x30 [ 1106.749824][ T3183] ? syscall_enter_from_user_mode+0x21/0x70 [ 1106.755744][ T3183] do_syscall_64+0x35/0xb0 [ 1106.760218][ T3183] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1106.766140][ T3183] RIP: 0033:0x7fc42e292059 [ 1106.770571][ T3183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1106.790202][ T3183] RSP: 002b:00007fc42cc07168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1106.798632][ T3183] RAX: ffffffffffffffda RBX: 00007fc42e3a4f60 RCX: 00007fc42e292059 [ 1106.806657][ T3183] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1106.814644][ T3183] RBP: 00007fc42cc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.822640][ T3183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.830633][ T3183] R13: 00007ffd3dae6c1f R14: 00007fc42cc07300 R15: 0000000000022000 [ 1106.838659][ T3183] [ 1106.841687][ T3185] CPU: 1 PID: 3185 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1106.852142][ T3185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.862244][ T3185] Call Trace: [ 1106.865539][ T3185] [ 1106.868483][ T3185] dump_stack_lvl+0xcd/0x134 [ 1106.873097][ T3185] should_fail.cold+0x5/0xa [ 1106.877636][ T3185] ? j1939_session_new+0x80/0x4d0 [ 1106.882691][ T3185] should_failslab+0x5/0x10 [ 1106.887222][ T3185] kmem_cache_alloc_trace+0x55/0x2c0 [ 1106.892536][ T3185] ? hash_and_copy_to_iter+0x200/0x200 [ 1106.898030][ T3185] j1939_session_new+0x80/0x4d0 [ 1106.902911][ T3185] j1939_tp_send+0x22f/0x800 [ 1106.907528][ T3185] j1939_sk_sendmsg+0xb17/0x13e0 [ 1106.912515][ T3185] ? j1939_sk_bind+0xeb0/0xeb0 [ 1106.917312][ T3185] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1106.923578][ T3185] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1106.929847][ T3185] ? j1939_sk_bind+0xeb0/0xeb0 [ 1106.934628][ T3185] sock_sendmsg+0xcf/0x120 [ 1106.939061][ T3185] ____sys_sendmsg+0x6e8/0x810 [ 1106.943841][ T3185] ? kernel_sendmsg+0x50/0x50 [ 1106.948528][ T3185] ? do_recvmmsg+0x6d0/0x6d0 [ 1106.953139][ T3185] ? lock_chain_count+0x20/0x20 [ 1106.958006][ T3185] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1106.964013][ T3185] ___sys_sendmsg+0xf3/0x170 [ 1106.968621][ T3185] ? sendmsg_copy_msghdr+0x160/0x160 [ 1106.973925][ T3185] ? lock_downgrade+0x6e0/0x6e0 [ 1106.978806][ T3185] ? __fget_files+0x28c/0x470 [ 1106.983506][ T3185] ? __fget_light+0xea/0x280 [ 1106.988106][ T3185] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1106.994366][ T3185] __sys_sendmsg+0xe5/0x1b0 [ 1106.998890][ T3185] ? __sys_sendmsg_sock+0x30/0x30 [ 1107.003939][ T3185] ? syscall_enter_from_user_mode+0x21/0x70 [ 1107.009866][ T3185] do_syscall_64+0x35/0xb0 [ 1107.014296][ T3185] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1107.020205][ T3185] RIP: 0033:0x7f9000110059 [ 1107.024628][ T3185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1107.044247][ T3185] RSP: 002b:00007f8ffea85168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1107.052678][ T3185] RAX: ffffffffffffffda RBX: 00007f9000222f60 RCX: 00007f9000110059 [ 1107.060655][ T3185] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1107.068722][ T3185] RBP: 00007f8ffea851d0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.076713][ T3185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.084708][ T3185] R13: 00007fff709e577f R14: 00007f8ffea85300 R15: 0000000000022000 [ 1107.092874][ T3185] [ 1107.095895][ T3182] CPU: 0 PID: 3182 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1107.106330][ T3182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.116397][ T3182] Call Trace: [ 1107.119691][ T3182] [ 1107.122637][ T3182] dump_stack_lvl+0xcd/0x134 [ 1107.127283][ T3182] should_fail.cold+0x5/0xa [ 1107.131807][ T3182] should_failslab+0x5/0x10 [ 1107.136327][ T3182] __kmalloc_node_track_caller+0x7d/0x360 [ 1107.142059][ T3182] ? alloc_skb_with_frags+0x93/0x620 [ 1107.147361][ T3182] __alloc_skb+0xde/0x340 [ 1107.151707][ T3182] alloc_skb_with_frags+0x93/0x620 [ 1107.156828][ T3182] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1107.162823][ T3182] ? lock_chain_count+0x20/0x20 [ 1107.167690][ T3182] sock_alloc_send_pskb+0x793/0x920 [ 1107.172906][ T3182] ? sk_reset_timer+0xc0/0xc0 [ 1107.177588][ T3182] ? mark_held_locks+0x9f/0xe0 [ 1107.182363][ T3182] ? __local_bh_enable_ip+0xa0/0x120 [ 1107.187699][ T3182] j1939_sk_sendmsg+0x6eb/0x13e0 [ 1107.192688][ T3182] ? j1939_sk_bind+0xeb0/0xeb0 [ 1107.197478][ T3182] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1107.203749][ T3182] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1107.210091][ T3182] ? j1939_sk_bind+0xeb0/0xeb0 [ 1107.214859][ T3182] sock_sendmsg+0xcf/0x120 [ 1107.219281][ T3182] ____sys_sendmsg+0x6e8/0x810 [ 1107.224057][ T3182] ? kernel_sendmsg+0x50/0x50 [ 1107.228740][ T3182] ? do_recvmmsg+0x6d0/0x6d0 [ 1107.233335][ T3182] ? lock_chain_count+0x20/0x20 [ 1107.238279][ T3182] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1107.244285][ T3182] ___sys_sendmsg+0xf3/0x170 [ 1107.248906][ T3182] ? sendmsg_copy_msghdr+0x160/0x160 [ 1107.254229][ T3182] ? lock_downgrade+0x6e0/0x6e0 [ 1107.259128][ T3182] ? __fget_files+0x28c/0x470 [ 1107.263836][ T3182] ? __fget_light+0xea/0x280 [ 1107.268442][ T3182] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1107.274712][ T3182] __sys_sendmsg+0xe5/0x1b0 [ 1107.279241][ T3182] ? __sys_sendmsg_sock+0x30/0x30 [ 1107.284304][ T3182] ? syscall_enter_from_user_mode+0x21/0x70 [ 1107.290216][ T3182] do_syscall_64+0x35/0xb0 [ 1107.294650][ T3182] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1107.300644][ T3182] RIP: 0033:0x7f000e751059 [ 1107.305063][ T3182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1107.325024][ T3182] RSP: 002b:00007f000d0c6168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1107.333448][ T3182] RAX: ffffffffffffffda RBX: 00007f000e863f60 RCX: 00007f000e751059 [ 1107.341426][ T3182] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1107.349403][ T3182] RBP: 00007f000d0c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.357463][ T3182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 11:12:07 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 8) [ 1107.365436][ T3182] R13: 00007ffd2a3112ff R14: 00007f000d0c6300 R15: 0000000000022000 [ 1107.373431][ T3182] 11:12:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0xfffffffffffff000}, 0x0) 11:12:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1107.408604][ T3190] FAULT_INJECTION: forcing a failure. [ 1107.408604][ T3190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.439648][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880798ad400: rx timeout, send abort [ 1107.442698][ T3190] CPU: 1 PID: 3190 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1107.448439][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880798ad400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1107.458349][ T3190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.458369][ T3190] Call Trace: [ 1107.458377][ T3190] [ 1107.458389][ T3190] dump_stack_lvl+0xcd/0x134 [ 1107.458426][ T3190] should_fail.cold+0x5/0xa [ 1107.458456][ T3190] _copy_to_user+0x2c/0x150 [ 1107.502607][ T3190] simple_read_from_buffer+0xcc/0x160 [ 1107.508023][ T3190] proc_fail_nth_read+0x187/0x220 [ 1107.511084][ T3193] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1107.513078][ T3190] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1107.513118][ T3190] ? security_file_permission+0xab/0xd0 [ 1107.513155][ T3190] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1107.513185][ T3190] vfs_read+0x1b5/0x600 [ 1107.535559][ C0] vcan0: j1939_tp_rxtimer: 0xffff888076d73c00: rx timeout, send abort [ 1107.538198][ T3190] ksys_read+0x12d/0x250 [ 1107.554699][ T3190] ? vfs_write+0xae0/0xae0 [ 1107.559130][ T3190] ? syscall_enter_from_user_mode+0x21/0x70 [ 1107.565039][ T3190] do_syscall_64+0x35/0xb0 [ 1107.569467][ T3190] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1107.575375][ T3190] RIP: 0033:0x7fc42e244c0c [ 1107.579797][ T3190] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1107.599624][ T3190] RSP: 002b:00007fc42cc07160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1107.608047][ T3190] RAX: ffffffffffffffda RBX: 00007fc42e3a4f60 RCX: 00007fc42e244c0c [ 1107.616025][ T3190] RDX: 000000000000000f RSI: 00007fc42cc071e0 RDI: 0000000000000005 [ 1107.623998][ T3190] RBP: 00007fc42cc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.631979][ T3190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.639952][ T3190] R13: 00007ffd3dae6c1f R14: 00007fc42cc07300 R15: 0000000000022000 [ 1107.647938][ T3190] 11:12:08 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000001180)={r0, 0xa5, 0x1000, "047ada3fb0955f8c263f5ad4d34d6ea5d19c08ec297a07c950e7e9011884eb68b315e777486b40563e83e1f71a47"}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003680)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="851cd8f8ca133fdc50518cf8919f38ace71c805094174da2f0490cac139e58e197c964", 0x23}, {&(0x7f0000000140)="307f9f648946732b7099c10f2d8cbb9f813a7b4e3cfbb58679039c56cfe721192ea31d2c67f949bf20b167a35c6d33d48e1d1d73c77485f987538015379b6f0448284ca8a619008144592800bf", 0x4d}, {&(0x7f0000000280)="edef017146537d17ab96cff515fd8ab7fe5e653d76117063960d271362303dd6f37d3038d174f5b2638a7a15e82717b69f0daba9c054a7f272fca2d40a58ef1350d38ffe6eeb01b9c3d9a700a0f1cff9696518f1485917a7322d671e59f1470b48dbb46452df27e220c4ba0faa3abb239b6d864f64d495e9f6a6aae31d72205c39917e8afe05", 0x86}, {&(0x7f0000000340)="f874aeaf674c361156957aca556697b5cd8283e6f317b5acddead768929a92bf3ba6359bd8114a0969108ee7cdac0ccf711b600bf95c5b06c650cff3fc979123efddd67def753a1e93d8b5ec4aa03c0fccb81c47833a40adb86cc11a3fd94b54297e7b996fe3c03ccf7981ca6f750794f525ac1757ce2d0dc235cf8ef92e7bcdd5df5ea161ce1a109106178f41498a7d584a401ce53ffc1bf857873368609feddfc12e648d62b643e2a968e9b19e8ee85277475b05af72efc089517d13092c0c9e72f0bdadb596b5a0b61a2365918d9156c7c4faed8c0c258c08f04bb4b2cdf8a5", 0xe1}, {&(0x7f0000000440)="a2fd5e227c06a082dfb33f98cad0b0b8dbc6d18490ef450acaae10cec96dfdfd57457daa1ed5b29b882a395e1061a93fb4c9c8c708885917e0ba02162098c22b5e719283a0bddfe405d31ae6b3d0b08777dae402657b2555aadade9a", 0x5c}], 0x5, 0x0, 0x0, 0x8001}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="c011b224cd2b3644f3c1048311eb4c066094e891141296791dfd09", 0x1b}, {&(0x7f0000000540)="df11f73c46ffcb2e8631622c18862edd0ecee92cbf8a1f60a5feacac27bf1501259e148fe50deb5d0050558bdf431344c7c28e1aae1a273efe6da03924be807c27815154831d9b9761f0d4615570dc6eab25e26967afe2cb09f79a3b682f6a7d954d86349f3253a133a385b711fc6da17c3d24604cdcc285a58a6b8ac97e01bb1848db1fb8607f9979f0db53b4d815779117c913dfb9d7d09165de2f3aaf9ab2bc210d719d7756ec6b955039", 0xac}], 0x2, &(0x7f00000010c0)=[@assoc={0x18, 0x117, 0x4, 0xffffffe1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7fff}, @assoc={0x18, 0x117, 0x4, 0xdc7}, @iv={0x28, 0x117, 0x2, 0xf, "bf0be8f3dfa0c27bea439a755189b5"}, @op={0x18, 0x117, 0x3, 0x1}], 0xa0, 0x40}, {0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="6696523af63b3ab327132921986d03ede8401751f88445e44e2687623ea41bf6944f706f1f31ec614379f324cf855ff299629f5593095770ee4f84ab41bf404667f79a8ad3655ae996cb636b575af23cbd730f76edc4d41fab8f3a0de07381946218e41cc6702af9866bf0bf386127f9bcff3f48419f6aff28f0f5ac", 0x7c}], 0x1, &(0x7f0000000700)=[@op={0x18}], 0x18, 0x4000889}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000740)="386b03377f5fe41e58c234c541ec42c69ee4d2f5f6c52e53d40260ba40b369db4dc55c4aa9aa66ac08266f77711dfa3c628d0833", 0x34}, {&(0x7f0000000780)="7403660fd2c851a0be875654f40cb7de128ec280a57585bcb762d8cad0233ab7669ca56eb39bbffc259a8303dbbbe999b57cbf8d09d1fa020e2bedcf9b228c5be7ed74ddf9d84123c87eabdca75eb81fdb58bc1125aa4eed0c0e66f5607574698250d7d3689cb28a8419580a59b62448bcbb907f54f95f7f4d0f715c11c019c0c4a05612c50075c2", 0x88}, {&(0x7f0000000840)="5b9c97945bcddeeb4e98cbdc0233424f420b39e704fcc23f60ac56b98d3477dfaf94b5b781d19ed3467f935d98c9403b96e9dc2edca51b589c4495f445d9bfb4f17923", 0x43}, {&(0x7f00000008c0)="e5f5f34ab720bb6ce60da4aaf54151ae4af7f47416edc80c2a08c2456e291613c11ff607f92e3526d9c7f3838b292d4ae6cc61b9ef510fbb274646426d58b6184a4d79ae06ec2588e8c145233c65d52dd0657bbd522ee64ac56260efccb87af4ab03459f319e26e7a530f73a55ae0bdbf53aeb72c85e2d8add3a95d65a9059e36b8efab5aaa9e03c47af0eadb957fe9a378c8610b505017c46ade58f00fe00a37c4916b8089e1db60ca59226777182b149add5d43dbad9d2585cbe958e27af12ff97914c7927", 0xc6}], 0x4, &(0x7f0000000a00)=[@iv={0x78, 0x117, 0x2, 0x5f, "8a80d4721ed670937c1902899681f45e01ce36746be1714d0d9933815947640e864f19202731dd9eef81ad1c7581fad7304425772fefbdf62e2cbfa844170ee4b5e1d3063dd3b9c76962aff679c680263e585935ca10671f6d9d58b8cc626a"}, @op={0x18, 0x117, 0x3, 0x1}], 0x90, 0x20000804}, {0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000ac0)="821ecd3b31a348828ddc527b41db9f3153762a373c205ef4ecf9c48321842ef0042bbcaa94f4842e985856b5fb0b4ff60bbe85539b7a73ac017ba0e4bc5a140164b15c90c39b9017e66e23f8e2055c497a60c2074b6768929ca31a6598698c5db832fc9671bd6455117e08cab8659c48eafcb17705c3b83a0f804d101027fe70d7b7a6cf3fc904bf27f8e021ea0f9d87dc916a8e9def0896a97c0f17a95b2c2f30fc1be1692611ef8be169d26b51874b3f4a0d00981e4cda63a01b33cf0bd5b1a686d6fd6fcfbc8dd292bbf1f008c6cd42b5be6cf0d7fbeba0b4a67811afb1f28b6b84a36b96f246bcd2ba0e42541b752bbcbed9fbd2d097", 0xf8}, {&(0x7f0000000bc0)="a1c0fdc629a28152be9feb5f6669edd9e6b8f4791d95c6b3c1800a63fc7406", 0x1f}, {&(0x7f0000000c00)="08c194249d2e4bf3a8076c9996ee05d4cfce26e57941a972a11e8df0ddc780cc0fcc6eed12b7b389c1543ba08507c9120741e0621ea1ad9f7ec2d75e28db7caefb4fa9c22966ae2dd45029d8c0e0803ac53af1d875842a7cbb82c6b5014ac144ac109f8d8a2e509eec68e9314ad6fb1beb1d39", 0x73}], 0x3, &(0x7f0000000cc0)=[@iv={0xe0, 0x117, 0x2, 0xc9, "a73e55fe52717bcd7a2b82913b136fd937b7a5573667154493b9b540b120e3e66dbed41be268d30ecdd162f852ab1d4f2af26c8a178db5815482867bc391d74127194b6721e2a102085e5f8e2ee5f5dca4cf9dff3e264d83cd88621ee89ea6f42c733a1ad48945b7c0fde778ca580c7c2c17fc8a7d6ebae024f8064071d36cbb60e160411d1d0c302368db8bf5e081284f7a0b58bce2857a45944eeb0791fbe922ceedc0d5475f0a9ade8e04e6df022a6d81f8da1df2a8216bcf2d4e1ad9d3b495583758615627d700"}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x1d, "584d2ca220ed61a3cf8bc83c239c43010469b53f1c951f181f01e91b1f"}], 0x148}, {0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e40)="5e12ddc9ca12996965d22e92562fed82eab8d943a18de18dac79f6", 0x1b}, {&(0x7f0000000e80)="17f48b4599877bd76cd35ac0bcced0a1a14becb2d722de473b7e3cdde59acd6f56b8cd1370586ed68a3a72b99a27b5b4f22b392c4b035bdb004e112c890bf13e89e4efc91dcbd5fe734d4cac16e8827ab3fe857d0052c5b7e3b855a4ed3fdacc02ff47f4796276595690b818bd4c7a9091cb7fdd3ee1a2284932741b320e26d2fd651d99f8e5b77c14ef2fb1d1cd91366cd100d28f7227ed2fdea0a8ce189b7b7fc59b4cdde1b2d2c2e977187bddef6f4b0d507f0db9c5331afe45113f1a4aa0f4958ab2f2d9dcb4e47556b462172519e251404e38544bd6", 0xd8}], 0x2, 0x0, 0x0, 0x4040041}, {0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000fc0)="82559901902e16c6668b1e4d39ee6c9c419a971050a08c6679c264643fb688f5a431c682da1ef2f3c65bcb0144943b41f7940b937ac070dc53dd610ef07f879e2947dd0fe442fc640e45d7bfbb8449b5b513d3ed4e75b93248cd031a564d639e05d96b690b762add8ca40cb518a482142b2d1534693f369ee3383276b8d4380cc04ea79d64f89aa096b2a04b", 0x8c}, {&(0x7f0000002180)}, {&(0x7f00000021c0)="cf121747436e1522ca41959a95fed3102e315df44b7feec15b4cb1ee6dd81e515fbfcff0e871356754616af9743113cf5b79663e66a4ea5edeeabe73f48735be1468524ec252797525147b40632f4b4a6e09d0217f9273022b2fefce1396e7916aae303d47df333e6ea5e522a75802226ab21d9f9f3e42bc27bf86b416d934a4c1682edf48ef9a1a2077859250c2c3189a5a0f80fa5eb761c3b418ef5aa64ef25d69a2c87f95c352230724e1d83c46604a4bb010df89fb54c77c2dfc35cd6bbdeaf96df720c62f21de40248eb3", 0xcd}, {&(0x7f00000022c0)="0055d8064ffcd3d6ae91c7cf439915ddf160f55010b2586410e00fd96151e4cdce61201b16597c2b74b0b296b9d2da30a4606b7868f30f6d3cdbbd7cb5f75b28bffb4c449246caf1231853c224a0f0129a132026121754ec34a9985e04565b99045d444df03a36ed4b0db60ee6b40be0d15bc05bb7c91b43b56ea2d7314101c64fdfe72f8da3f5a2be5888967271551e48d4276919644af0171b5ea19fe0271efe3bae03ccba07216d4c458df0bff47da2304d6a7d81f0157e10369f30f3c8a4f0cfb9adec01b4cd351fbc97d16a0d640d2fe4c273d33b6c45380bcc5271cb67d4afaaf101", 0xe5}], 0x4, &(0x7f0000002400)=[@iv={0x1018, 0x117, 0x2, 0x1000, "3684f10d19f0e5030f4f71433ae3a1751388b82304be7b2883be87514e6f182f912af576a3f550f6646cc8be373bed4750c5e8cadb60cb7fe744d60d246554744b1b58e5f061492190f76937de39652f3a35e31ab83f89a368dc7638e62cf86007316a0b2e150e710576da14cd0b7965b76029795c7ba68a4b039ebb61a14d4d1b72308370cd6e9c7becd473686303e1ef1ba702b37d36535bfb4e7bbc8e7889727da50fd1d867262b9ea3c6bfe354f31e954682844fa5c972e90726a53cc809cc7abe3286ddce2b967401215c82d846babe048e50f6096eb40f67e0ceff3d842b2666b1dd0c421e7b006677dae2b05f20c61db47c6ddd506354e7d6679b34061e633903351504ecf2d135124f3f2fa8818f861378cb0e84a34d922d6af96a568becbd5de56ded5a707358a272c5f4aa7f54ee0d10fd04d1f0c3242982ec53dda1f613db28450394fe7c0829312c89364d8761b82f3b115a011af3beff5a66626508a0a004b1ad80c42e0c981727518613e33d500c84ee14c0024ab0c25fd248a95076076bbc70f79afd5c03cc41b127ae6c57fe52d2ed89b3d46900e719159a9bc1f6d7a714e9aebb4e0bbbb7974cf43e6ad9cdcfcc24acb8726894e9d8371617be85591c986fcbdb8a3df45b4ed5270e22d55737e4211b1cd1abef6c6939e72c6ecae460abb764267d2aaa953da214b66d272c01bcf471ab1ff60835326b47d2911b3bfd5195476ac89fd7ed82fad6a6ff8b570271c407b8acd9567f9c84bd98418304b6a8197802253da7ab7b3009867fb5614db4269b46722826d792828b7ce961531b40e2c644c4fe916fbbf7202f13c17aafd7eff495d25da273b707bfba3e957aa9143f20a9735d2ea1a1cf7aeb1e2ca55f7fd9303e4b805a072f56e2b10859e0465d7a528189c181ebb0a7220d911b5267363b583b710a816821b6fc420751485f9cf37e811c0c47394c4850cf7fdcae1630b7518b3286f1e8b0f75326a97507e3dd3e2a23938636a0633eee774038e1d4c223bacf7a459f95a99cf09a3ea64624a5819c08f1441452704b2803d3707e6196ff136075f9e6390dc614925b7cf90469e21f0f4fe5b6ec8a2689dc1914a08ba21a083072ee4414b68cc65064321134d09d5b7cbacd35d958e23f7c9cd0d3fabf17cd8769050ba6e9ff5c2fec31926e8fd3a29cade9020888f1a2519a9edec1f891461b2b9a652ca3c216846917f790b4c3e1c6cbe4ade1a35f884e40520d46b799e36e3ca0c7270bf75b67a87b11124dd94aa497edf320fcdad636a0166ade4b2e6a15a5b2436e3f8e4819216d43976bcb3ad4449a3baef1570484a4bf818371f6f59874db0ba1a0afae587020e160c3b17b8097cb9d193a370b3664f9818cd1f2fe2c6d44489573ace73eed48a39e45b9bdb72c7d12e147d04b5cf23df918112e347171f12c2d680ae7eaf9aa18924b44bb616b30b17e8502047e6b294cc629159b9278e3ce8e23a03d4862723038fa6ef6926e664a93e9de9ae925bb69f656ecba2c27a93a9f133f0fad4680307fb2243e4bb2149a4848fdb5c95718324f63017ec193b51f3574cfc4346dd59b2f5640fb0ebb0387e7277a68160fc1196954bc7c8d9f2164496660f8cad24408b65f2f9c08abe34c4358157eda1c0ac9c639e920bdccbdc585a28857bf98f331abc011732e143621ff6560be5cda9c1d1b8760610c32e60ef3b5b11142191f6996c392a068f5a37cac711a9acc84157f603af4f0c701f2d2cd6f1de81390443fde06247387eeef30f93c96ba79593fafdada9df52fc2ade53397431352ae3a9c950c8faf517db82a7976b8d966c6a8c148499dd0eee85d196175d828adf4730c290453382e18af8432cc11187e814447f35bb53e70d80dfcf330da78d9906bdf0e77f2f4ab713bfcaaea3b42e31ec4e2c77ec584b344984ea80f5d901146501d9b328311cda649a2a95bfdacde480d613d4a5e706dfdff173e73eecacd4820f5e906af39375bd5fbbc2ca6dd949aa53fc7ce2db7060db78a3642b5446b0baf795899db85cda6cfc64e7745daf15e77b52a3c062d9ec97963c5c17be42773d22cd1df68262cf1e0c8b1523e0052942765202fa600dc09bdcb88a4cc8143479528cd3a859887b5f412cfa84554892afb238a0d713a193a315d6f8785afdbe69dd71ba6147239c9fe5bd78a9bc8b7122fbe0e8b0127242c895aca2824104986a70884fac51d67b986765398810f8ca676ffdd1b0280a5736044f7deb45005c625e28dad196d6aeeeaee43c37b376b168983f13dab63659c9d6864b4d1263b8d37572e0b3a27f0e3f516d3aa13dcfb3a921646b1cd158ab175d7c54a99460f5179455cac40f0ded34793011c0ed7f088b2174bd5c0dc60e195740efc3b532315cb24f2ec0c79691ba800d233f87e9b833effdc5a189d1883c5053a1d3c7a47c7f9a60b6a3715e8a251618b3f2a92f3e88c3b818e5bf6c64e56292f124a08d2979ddec550ccaeabbf5600239d22a69e4d105c62b65b4265457a79b557ff05ec7d5ca7e39c809f4e505c30c2cf45e2897703b85e7b0721a520d7f110899cdee2d67bc581a02b6a1dc8a936cbe5c2f0955f06084379ea8c1e5a8c54e6708195a0d1e65505018f8a6e95a359818d982da94576ffbc2aa3482f17d41d8687d7cee5a5b31e8f80edfce11ec716df1d8e38ede44f80a1cbdb280f4efd568cacd2c0d06e46bc1a9ae9fc2d3936a7a4d76217c753986da111eab1c8ebd03ac3db95e7675b68c08e3eca6c4d9cdd3f5f4a3e1e72e8f892a3b770bfbd0269500f30c409c5eba1d9315f6ce64462256f6138ca1ac2552837f069dba512e8b98fd5790af7da14de764131c793529b491355d5efdfa378d764acf208d2bc62498c43d9e28eb24ec769f53e3c29e8350cc8f1fa31f164633286e3eaca1f69c8b321f23eb46d555ba4d597c7a1331285e989434e89ef72093c9cf527a00774da9331da976605382a88d443c8127241126c5bfc2cc40abf9bf47062763ba8c4a0f213e1073c7414471d91a5d19ddd122d73aca821508fe01464c1aa91a812286a78923e032dd8be95edd47a67e943e296c550ef0dbc5f67476d23d81c1a8f6f8d7d2d86582767ddec35261bba7f549fb2d913fe3f1300fef1df59fe39a22f09ea0542f430707aaca940269ededf61a3b3193cfa220cbf445802e88bff74f697b939ebb9fa7fd96b3c9b85e4315aba785a7cbbabe450fa7f8c2b2a4c020d2874e70f580f912913f56f9dc951b86c72ed64631cc03b587d11f04da3c40ddb55adae3a47e62d7478b85e0a3df11bffb3c1ba293f611cd0a756e2972564f3bd678168af189c8e575c8710e701ecc1d54bc7cadbb7cffd3e05534987ea8b9f0a77b8bc8c21b3fb32b1871b42d80de31689f820d1b5e226e9c6eb18ff7b0cadf242feea1f8435450032655cdae561d5fcc5dad1a0437701f4c238c59d304d65f3079d6feaabc070a25c314d9c732567a7892413e7ffba1e86d1ad54ecf250bf03af6c74d05f9bd50df8a6b20f6fd9ec36834ed001e45f83695d5efb29e1f27a07eeb0a00aa5e9cde3dd2e8a141c8274fca12fce61dec21b11462c04aa3c96cee223a549943f9741ccb856e74db968166e5ac552276ea24daf9bfced014081c178297456b5724c84451d69b3ca7f0330f31fb7d21d9b80b14737cde195faa7cdc0129b7b49ffb86c13abbb3458d9562c860f03cb7c04ee8c6efad45e7594f4f49392ae11571e90b18bf0531bb37c28c7c8f3acc5857d1ce4ed9615b9a226c2d7027f51ac42c3f496943f228fed9642aee005c8e77462d3bf34733ca2f8cf0c01dd70a06e037bdbde062dedc099e1f95fd8351a0acbe6d8857a62f726befeea60106b291726c907f7929a18cae592c3ee9c16dde0207881eb64ee0d0a73ba0181ff5eeec6633fe88d5b28f34bcfa348dbbde98575f1f9b3a52d4a249caeec399d036c2fadfbe736e983ef33622ac5f7162382d67f5c937faa41caaa36404cf30b467745ca941b9f12c85c453c14a01f60231cdd8d93af95594489756b9b557f77268bd9f1bed796ff8ab37468667a2b0287396c1736f5e309669338e65fa4db6355fbf713238b96179f63697127c64d606781f6112d1859e82f9de0a1be7789031d76a2e70c6caa905da6f41ff79441c28ac43a7beca4dfc53eea22b9b4528a0016626e770010f12a1cbb8323a4e590e24da53b7b25d27819e45a7674aa258004d790f2a72c7ee20a36017d3affcbe101ea098cfacd09f0f1bd7eb21846f13fb6309a00fc6456be821dca4be7efd590fd47d9308f0adb40dc5093ed907c1d093ce25b596f21b26955015f97c00fd354e026287f17adb606bcba314320557b84fbc590f6a6dff8698ca3e87cb9a61a38298e944846aff49f087026576e1e061a264fd3bde7337c7d783672148a881dc97c1956593acf80f2a846b7b81ea5fd480e252d820057cd36afc2bd7a85a0c8bb4abe1a4d1e81c5d945b39c516bb2a987c58adbd7ab847a9c9f059950aa21c1a87d23d549c0828c1df2c82b878a1a9e6102d4263f837aa410f371f91f7b920b7e1010192dea7cef9c5f25f11af8b899da2474fbb69299b584030937752af1d2ec49f8845677254863cfa14bbb2060c1a2e4813cb6cebdc2a08430e00ea0af89a020bbf882745f3816f3f5596d44b6fcd66d6de747340ae5ba470a3e538772767de172fd652555f937e3b8f98555bef934654b5040a6e0b4ad9957d3fb29b219692111a370171f61e4ce7bb0f2f074a89c37887c5bab859781fa306372271266e1d810d448aee0e622aac25a0ec277c1bbcde84803552206697697791ae3e49c146c90fbaddf94d678777a6cf4bbd293d301c203e5e23a21d8a1a2f8d8650bd109abe267696b5b19d3e0287b05ebffa139cf09fdc60797198ca7a63c94ee0546a0e93c403e76785ead7786a9e07e1f6e6fd40c072c517512073cc38f6241be05f941a56b0de4aaf39db4a1e9d934a27bd60abf9a6b62e4d0d8c175966ab2b4a2842da8bbb7a2739d87de6e539ac3f33989b68229708385506233af797d112947de2413a9626c0782fe9ea280b3feacf27a557264a591a438036de535348421a0fb1e6ed84a0dafd0a56b180aeb421bf1cf9abc119fd56edee40299c698e2c504a5e311b90b6587c674d28e1ef4ee451ca3c43469436960493c240a5a1a1e96cba1e2f66860b00b29c324a7db996f5e6997dafc87a28cd8fd631b60f6269ad50abc62950a4994d7d92a49c8f967f66c26f7597e9f4f9de7d8920a533c058d09c91d52256238968789c1d25f5e5b39ec4d54c616bf419644ae0d6f35012f8047dab92dee5a26ae164f58bad814fa15eb46ca841c7d17925f4792a34df194fbf64af8fadf095aeeef01c2a0ecfd21855116a55854e83e32468390f8d88dce2dce72499acfb013ec7222b08824c97135aa036c5320c93bfc228c8608d617aba4d1993c72d9c8dccada0707a4b9a0569546c3847c5b25a608cf4f54d64c26aa9acbbb118a933e86ff0d85d1d95c060a4ede9c7113ca59ed164a410e7e10e2a66665c3fd15c29a8f9962982df41d8fb0d917ca30ed32360e4064b9c21af7a3044c89c88ba97d6c9fc2eebccbdecb52e79a42714244dff0b6cf2c59d45bad3a217a5d4dfe082ec74e2f830a83556461fe7c4ec597069b28b75a9cf1ff584c79413fd600b9e5c2c39ed56cbc2687db29bc01141bdc7b31d43c60d0eff0fab3b17906e7f4f1adec86e872ab3228bb1f53dd949c2f1901f7a610f1077ba968dd80"}, @op={0x18}, @assoc={0x18}, @iv={0x110, 0x117, 0x2, 0xfb, "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"}, @iv={0x90, 0x117, 0x2, 0x7b, "c84e08c638bad8741fb816a0da28a3659e633018d13953c9556b34b0c8aa18d856333787129cf6760628618ed6bf0d2e83638e1986ab429818a2830566331ac25d53b57b5ca9a421dd23451575450e9d37500651f713b7101df04044c8ef332e00f8dc49c410c2370210e04ff82ae8811f51b5c7aa68b2ec9651f1"}, @iv={0x48, 0x117, 0x2, 0x31, "063bd90bbfb380e75b95ff8f44c46c85130d66e07001cf7db1da50e3f686411c509271ac1b6bb0b2134910fb1fadeb01a1"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1248, 0x30004040}], 0x7, 0x90) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:08 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1107.653051][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888076d73c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:08 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (fail_nth: 8) [ 1107.757107][ T3193] device bond174 entered promiscuous mode [ 1107.765096][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888070eb2000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 1107.787752][ T3205] FAULT_INJECTION: forcing a failure. [ 1107.787752][ T3205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.801112][ T3205] CPU: 1 PID: 3205 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1107.811556][ T3205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.818001][ T3194] bond174: (slave bridge97): making interface the new active one [ 1107.821634][ T3205] Call Trace: [ 1107.821646][ T3205] [ 1107.821658][ T3205] dump_stack_lvl+0xcd/0x134 [ 1107.821695][ T3205] should_fail.cold+0x5/0xa [ 1107.821728][ T3205] _copy_to_user+0x2c/0x150 [ 1107.821761][ T3205] simple_read_from_buffer+0xcc/0x160 [ 1107.830048][ T3194] device bridge97 entered promiscuous mode [ 1107.832772][ T3205] proc_fail_nth_read+0x187/0x220 [ 1107.832815][ T3205] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1107.832848][ T3205] ? security_file_permission+0xab/0xd0 [ 1107.832886][ T3205] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1107.839175][ T3194] bond174: (slave bridge97): Enslaving as an active interface with an up link [ 1107.840411][ T3205] vfs_read+0x1b5/0x600 [ 1107.840453][ T3205] ksys_read+0x12d/0x250 [ 1107.840483][ T3205] ? vfs_write+0xae0/0xae0 [ 1107.840515][ T3205] ? syscall_enter_from_user_mode+0x21/0x70 [ 1107.910079][ T3205] do_syscall_64+0x35/0xb0 [ 1107.914516][ T3205] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1107.920425][ T3205] RIP: 0033:0x7f90000c2c0c [ 1107.924848][ T3205] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1107.944463][ T3205] RSP: 002b:00007f8ffea85160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 11:12:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1107.952889][ T3205] RAX: ffffffffffffffda RBX: 00007f9000222f60 RCX: 00007f90000c2c0c [ 1107.960869][ T3205] RDX: 000000000000000f RSI: 00007f8ffea851e0 RDI: 0000000000000005 [ 1107.968850][ T3205] RBP: 00007f8ffea851d0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.976826][ T3205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.984807][ T3205] R13: 00007fff709e577f R14: 00007f8ffea85300 R15: 0000000000022000 [ 1107.992802][ T3205] [ 1108.056460][ T3207] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1108.080734][ T3207] device bond175 entered promiscuous mode 11:12:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1108.102006][ T3207] bond175: (slave bridge98): making interface the new active one [ 1108.112008][ T3207] device bridge98 entered promiscuous mode [ 1108.119312][ T3207] bond175: (slave bridge98): Enslaving as an active interface with an up link [ 1108.177524][ T3210] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1108.201808][ T3210] device bond176 entered promiscuous mode 11:12:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1108.228473][ T3210] bond176: (slave bridge99): making interface the new active one [ 1108.238807][ T3210] device bridge99 entered promiscuous mode [ 1108.248134][ T3210] bond176: (slave bridge99): Enslaving as an active interface with an up link [ 1108.295990][ T3213] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1108.316739][ T3213] device bond177 entered promiscuous mode [ 1108.333696][ T3213] bond177: (slave bridge100): making interface the new active one 11:12:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1108.341645][ T3213] device bridge100 entered promiscuous mode [ 1108.348323][ T3213] bond177: (slave bridge100): Enslaving as an active interface with an up link [ 1108.392428][ T3216] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1108.418616][ T3216] device bond178 entered promiscuous mode 11:12:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1108.440927][ T3216] bond178: (slave bridge101): making interface the new active one [ 1108.449308][ T3216] device bridge101 entered promiscuous mode [ 1108.456888][ T3216] bond178: (slave bridge101): Enslaving as an active interface with an up link 11:12:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x0) [ 1108.524855][ T3219] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1108.551359][ T3219] device bond179 entered promiscuous mode [ 1108.569163][ T3219] bond179: (slave bridge102): making interface the new active one [ 1108.579654][ T3219] device bridge102 entered promiscuous mode [ 1108.586345][ T3219] bond179: (slave bridge102): Enslaving as an active interface with an up link 11:12:09 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xa, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1108.658565][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c415400: rx timeout, send abort [ 1108.667091][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c415400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1108.705207][ T3226] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1108.743441][ T3226] device bond180 entered promiscuous mode 11:12:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1108.762127][ T3226] bond180: (slave bridge103): making interface the new active one [ 1108.772631][ T3226] device bridge103 entered promiscuous mode [ 1108.779368][ T3226] bond180: (slave bridge103): Enslaving as an active interface with an up link [ 1108.826302][ T3230] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1108.850796][ T3230] device bond181 entered promiscuous mode [ 1108.870801][ T3230] bond181: (slave bridge104): making interface the new active one [ 1108.879024][ T3230] device bridge104 entered promiscuous mode [ 1108.887256][ T3230] bond181: (slave bridge104): Enslaving as an active interface with an up link [ 1108.994833][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a799800: rx timeout, send abort [ 1109.003293][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a799800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1109.017758][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806dc27800: rx timeout, send abort [ 1109.026887][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806dc27800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1109.037726][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e017800: rx timeout, send abort [ 1109.050211][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e017800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:09 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000001180)={r0, 0xa5, 0x1000, "047ada3fb0955f8c263f5ad4d34d6ea5d19c08ec297a07c950e7e9011884eb68b315e777486b40563e83e1f71a47"}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003680)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="851cd8f8ca133fdc50518cf8919f38ace71c805094174da2f0490cac139e58e197c964", 0x23}, {&(0x7f0000000140)="307f9f648946732b7099c10f2d8cbb9f813a7b4e3cfbb58679039c56cfe721192ea31d2c67f949bf20b167a35c6d33d48e1d1d73c77485f987538015379b6f0448284ca8a619008144592800bf", 0x4d}, {&(0x7f0000000280)="edef017146537d17ab96cff515fd8ab7fe5e653d76117063960d271362303dd6f37d3038d174f5b2638a7a15e82717b69f0daba9c054a7f272fca2d40a58ef1350d38ffe6eeb01b9c3d9a700a0f1cff9696518f1485917a7322d671e59f1470b48dbb46452df27e220c4ba0faa3abb239b6d864f64d495e9f6a6aae31d72205c39917e8afe05", 0x86}, {&(0x7f0000000340)="f874aeaf674c361156957aca556697b5cd8283e6f317b5acddead768929a92bf3ba6359bd8114a0969108ee7cdac0ccf711b600bf95c5b06c650cff3fc979123efddd67def753a1e93d8b5ec4aa03c0fccb81c47833a40adb86cc11a3fd94b54297e7b996fe3c03ccf7981ca6f750794f525ac1757ce2d0dc235cf8ef92e7bcdd5df5ea161ce1a109106178f41498a7d584a401ce53ffc1bf857873368609feddfc12e648d62b643e2a968e9b19e8ee85277475b05af72efc089517d13092c0c9e72f0bdadb596b5a0b61a2365918d9156c7c4faed8c0c258c08f04bb4b2cdf8a5", 0xe1}, {&(0x7f0000000440)="a2fd5e227c06a082dfb33f98cad0b0b8dbc6d18490ef450acaae10cec96dfdfd57457daa1ed5b29b882a395e1061a93fb4c9c8c708885917e0ba02162098c22b5e719283a0bddfe405d31ae6b3d0b08777dae402657b2555aadade9a", 0x5c}], 0x5, 0x0, 0x0, 0x8001}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="c011b224cd2b3644f3c1048311eb4c066094e891141296791dfd09", 0x1b}, {&(0x7f0000000540)="df11f73c46ffcb2e8631622c18862edd0ecee92cbf8a1f60a5feacac27bf1501259e148fe50deb5d0050558bdf431344c7c28e1aae1a273efe6da03924be807c27815154831d9b9761f0d4615570dc6eab25e26967afe2cb09f79a3b682f6a7d954d86349f3253a133a385b711fc6da17c3d24604cdcc285a58a6b8ac97e01bb1848db1fb8607f9979f0db53b4d815779117c913dfb9d7d09165de2f3aaf9ab2bc210d719d7756ec6b955039", 0xac}], 0x2, &(0x7f00000010c0)=[@assoc={0x18, 0x117, 0x4, 0xffffffe1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7fff}, @assoc={0x18, 0x117, 0x4, 0xdc7}, @iv={0x28, 0x117, 0x2, 0xf, "bf0be8f3dfa0c27bea439a755189b5"}, @op={0x18, 0x117, 0x3, 0x1}], 0xa0, 0x40}, {0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="6696523af63b3ab327132921986d03ede8401751f88445e44e2687623ea41bf6944f706f1f31ec614379f324cf855ff299629f5593095770ee4f84ab41bf404667f79a8ad3655ae996cb636b575af23cbd730f76edc4d41fab8f3a0de07381946218e41cc6702af9866bf0bf386127f9bcff3f48419f6aff28f0f5ac", 0x7c}], 0x1, &(0x7f0000000700)=[@op={0x18}], 0x18, 0x4000889}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000740)="386b03377f5fe41e58c234c541ec42c69ee4d2f5f6c52e53d40260ba40b369db4dc55c4aa9aa66ac08266f77711dfa3c628d0833", 0x34}, {&(0x7f0000000780)="7403660fd2c851a0be875654f40cb7de128ec280a57585bcb762d8cad0233ab7669ca56eb39bbffc259a8303dbbbe999b57cbf8d09d1fa020e2bedcf9b228c5be7ed74ddf9d84123c87eabdca75eb81fdb58bc1125aa4eed0c0e66f5607574698250d7d3689cb28a8419580a59b62448bcbb907f54f95f7f4d0f715c11c019c0c4a05612c50075c2", 0x88}, {&(0x7f0000000840)="5b9c97945bcddeeb4e98cbdc0233424f420b39e704fcc23f60ac56b98d3477dfaf94b5b781d19ed3467f935d98c9403b96e9dc2edca51b589c4495f445d9bfb4f17923", 0x43}, {&(0x7f00000008c0)="e5f5f34ab720bb6ce60da4aaf54151ae4af7f47416edc80c2a08c2456e291613c11ff607f92e3526d9c7f3838b292d4ae6cc61b9ef510fbb274646426d58b6184a4d79ae06ec2588e8c145233c65d52dd0657bbd522ee64ac56260efccb87af4ab03459f319e26e7a530f73a55ae0bdbf53aeb72c85e2d8add3a95d65a9059e36b8efab5aaa9e03c47af0eadb957fe9a378c8610b505017c46ade58f00fe00a37c4916b8089e1db60ca59226777182b149add5d43dbad9d2585cbe958e27af12ff97914c7927", 0xc6}], 0x4, &(0x7f0000000a00)=[@iv={0x78, 0x117, 0x2, 0x5f, "8a80d4721ed670937c1902899681f45e01ce36746be1714d0d9933815947640e864f19202731dd9eef81ad1c7581fad7304425772fefbdf62e2cbfa844170ee4b5e1d3063dd3b9c76962aff679c680263e585935ca10671f6d9d58b8cc626a"}, @op={0x18, 0x117, 0x3, 0x1}], 0x90, 0x20000804}, {0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000ac0)="821ecd3b31a348828ddc527b41db9f3153762a373c205ef4ecf9c48321842ef0042bbcaa94f4842e985856b5fb0b4ff60bbe85539b7a73ac017ba0e4bc5a140164b15c90c39b9017e66e23f8e2055c497a60c2074b6768929ca31a6598698c5db832fc9671bd6455117e08cab8659c48eafcb17705c3b83a0f804d101027fe70d7b7a6cf3fc904bf27f8e021ea0f9d87dc916a8e9def0896a97c0f17a95b2c2f30fc1be1692611ef8be169d26b51874b3f4a0d00981e4cda63a01b33cf0bd5b1a686d6fd6fcfbc8dd292bbf1f008c6cd42b5be6cf0d7fbeba0b4a67811afb1f28b6b84a36b96f246bcd2ba0e42541b752bbcbed9fbd2d097", 0xf8}, {&(0x7f0000000bc0)="a1c0fdc629a28152be9feb5f6669edd9e6b8f4791d95c6b3c1800a63fc7406", 0x1f}, {&(0x7f0000000c00)="08c194249d2e4bf3a8076c9996ee05d4cfce26e57941a972a11e8df0ddc780cc0fcc6eed12b7b389c1543ba08507c9120741e0621ea1ad9f7ec2d75e28db7caefb4fa9c22966ae2dd45029d8c0e0803ac53af1d875842a7cbb82c6b5014ac144ac109f8d8a2e509eec68e9314ad6fb1beb1d39", 0x73}], 0x3, &(0x7f0000000cc0)=[@iv={0xe0, 0x117, 0x2, 0xc9, "a73e55fe52717bcd7a2b82913b136fd937b7a5573667154493b9b540b120e3e66dbed41be268d30ecdd162f852ab1d4f2af26c8a178db5815482867bc391d74127194b6721e2a102085e5f8e2ee5f5dca4cf9dff3e264d83cd88621ee89ea6f42c733a1ad48945b7c0fde778ca580c7c2c17fc8a7d6ebae024f8064071d36cbb60e160411d1d0c302368db8bf5e081284f7a0b58bce2857a45944eeb0791fbe922ceedc0d5475f0a9ade8e04e6df022a6d81f8da1df2a8216bcf2d4e1ad9d3b495583758615627d700"}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x1d, "584d2ca220ed61a3cf8bc83c239c43010469b53f1c951f181f01e91b1f"}], 0x148}, {0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e40)="5e12ddc9ca12996965d22e92562fed82eab8d943a18de18dac79f6", 0x1b}, {&(0x7f0000000e80)="17f48b4599877bd76cd35ac0bcced0a1a14becb2d722de473b7e3cdde59acd6f56b8cd1370586ed68a3a72b99a27b5b4f22b392c4b035bdb004e112c890bf13e89e4efc91dcbd5fe734d4cac16e8827ab3fe857d0052c5b7e3b855a4ed3fdacc02ff47f4796276595690b818bd4c7a9091cb7fdd3ee1a2284932741b320e26d2fd651d99f8e5b77c14ef2fb1d1cd91366cd100d28f7227ed2fdea0a8ce189b7b7fc59b4cdde1b2d2c2e977187bddef6f4b0d507f0db9c5331afe45113f1a4aa0f4958ab2f2d9dcb4e47556b462172519e251404e38544bd6", 0xd8}], 0x2, 0x0, 0x0, 0x4040041}, {0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000fc0)="82559901902e16c6668b1e4d39ee6c9c419a971050a08c6679c264643fb688f5a431c682da1ef2f3c65bcb0144943b41f7940b937ac070dc53dd610ef07f879e2947dd0fe442fc640e45d7bfbb8449b5b513d3ed4e75b93248cd031a564d639e05d96b690b762add8ca40cb518a482142b2d1534693f369ee3383276b8d4380cc04ea79d64f89aa096b2a04b", 0x8c}, {&(0x7f0000002180)}, {&(0x7f00000021c0)="cf121747436e1522ca41959a95fed3102e315df44b7feec15b4cb1ee6dd81e515fbfcff0e871356754616af9743113cf5b79663e66a4ea5edeeabe73f48735be1468524ec252797525147b40632f4b4a6e09d0217f9273022b2fefce1396e7916aae303d47df333e6ea5e522a75802226ab21d9f9f3e42bc27bf86b416d934a4c1682edf48ef9a1a2077859250c2c3189a5a0f80fa5eb761c3b418ef5aa64ef25d69a2c87f95c352230724e1d83c46604a4bb010df89fb54c77c2dfc35cd6bbdeaf96df720c62f21de40248eb3", 0xcd}, {&(0x7f00000022c0)="0055d8064ffcd3d6ae91c7cf439915ddf160f55010b2586410e00fd96151e4cdce61201b16597c2b74b0b296b9d2da30a4606b7868f30f6d3cdbbd7cb5f75b28bffb4c449246caf1231853c224a0f0129a132026121754ec34a9985e04565b99045d444df03a36ed4b0db60ee6b40be0d15bc05bb7c91b43b56ea2d7314101c64fdfe72f8da3f5a2be5888967271551e48d4276919644af0171b5ea19fe0271efe3bae03ccba07216d4c458df0bff47da2304d6a7d81f0157e10369f30f3c8a4f0cfb9adec01b4cd351fbc97d16a0d640d2fe4c273d33b6c45380bcc5271cb67d4afaaf101", 0xe5}], 0x4, &(0x7f0000002400)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}, @assoc={0x18}, @iv={0x110, 0x117, 0x2, 0xfb, "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"}, @iv={0x90, 0x117, 0x2, 0x7b, "c84e08c638bad8741fb816a0da28a3659e633018d13953c9556b34b0c8aa18d856333787129cf6760628618ed6bf0d2e83638e1986ab429818a2830566331ac25d53b57b5ca9a421dd23451575450e9d37500651f713b7101df04044c8ef332e00f8dc49c410c2370210e04ff82ae8811f51b5c7aa68b2ec9651f1"}, @iv={0x48, 0x117, 0x2, 0x31, "063bd90bbfb380e75b95ff8f44c46c85130d66e07001cf7db1da50e3f686411c509271ac1b6bb0b2134910fb1fadeb01a1"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1248, 0x30004040}], 0x7, 0x90) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:09 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xe, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:09 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1109.094192][ T3233] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:12:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1109.149613][ T3233] device bond182 entered promiscuous mode [ 1109.163932][ T3242] bond182: (slave bridge105): making interface the new active one [ 1109.171939][ T3242] device bridge105 entered promiscuous mode [ 1109.178709][ T3242] bond182: (slave bridge105): Enslaving as an active interface with an up link [ 1109.228375][ T3244] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1109.249872][ T3244] device bond183 entered promiscuous mode [ 1109.267129][ T3244] bond183: (slave bridge106): making interface the new active one 11:12:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1109.275231][ T3244] device bridge106 entered promiscuous mode [ 1109.281965][ T3244] bond183: (slave bridge106): Enslaving as an active interface with an up link 11:12:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x2}, 0x0) [ 1109.341934][ T3247] device bond184 entered promiscuous mode [ 1109.363408][ T3247] bond184: (slave bridge107): making interface the new active one [ 1109.371357][ T3247] device bridge107 entered promiscuous mode [ 1109.378361][ T3247] bond184: (slave bridge107): Enslaving as an active interface with an up link 11:12:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1e, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1109.462218][ T3252] device bond185 entered promiscuous mode [ 1109.492147][ T3252] bond185: (slave bridge108): making interface the new active one [ 1109.500560][ T3252] device bridge108 entered promiscuous mode 11:12:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x22, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1109.507529][ T3252] bond185: (slave bridge108): Enslaving as an active interface with an up link [ 1109.580812][ T3256] device bond186 entered promiscuous mode [ 1109.605348][ T3256] bond186: (slave bridge109): making interface the new active one [ 1109.617130][ T3256] device bridge109 entered promiscuous mode [ 1109.625863][ T3256] bond186: (slave bridge109): Enslaving as an active interface with an up link 11:12:10 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2d, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1109.978954][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880750c1c00: rx timeout, send abort [ 1109.987435][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880750c1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:10 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1110.052340][ T3259] device bond187 entered promiscuous mode [ 1110.081581][ T3259] bond187: (slave bridge110): making interface the new active one [ 1110.089863][ T3259] device bridge110 entered promiscuous mode [ 1110.096753][ T3259] bond187: (slave bridge110): Enslaving as an active interface with an up link [ 1110.378248][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807995b800: rx timeout, send abort [ 1110.381937][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802305d000: rx timeout, send abort [ 1110.386679][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807995b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1110.395019][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802305d000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:10 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x1d, r2, 0x0, {0x2, 0x1, 0x2}, 0xfd}, 0x18, &(0x7f00000002c0)={&(0x7f00000010c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x10000}, 0x80800) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r2, 0x0, {0x2, 0x0, 0x3}, 0x2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect(r1, &(0x7f0000000340)=@llc={0x1a, 0x204, 0x40, 0x4, 0x8, 0xab, @broadcast}, 0x80) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r4}, 0x18) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1}}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r4, 0x1, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000001c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r7}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x3}, 0x0) 11:12:10 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x2, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:10 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1110.420264][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079959c00: rx timeout, send abort [ 1110.434451][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079959c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1110.500546][ T3270] vcan0: tx drop: invalid da for name 0x0000000000000002 11:12:11 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x3, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:11 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x1d, r2, 0x0, {0x2, 0x1, 0x2}, 0xfd}, 0x18, &(0x7f00000002c0)={&(0x7f00000010c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x10000}, 0x80800) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r2, 0x0, {0x2, 0x0, 0x3}, 0x2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect(r1, &(0x7f0000000340)=@llc={0x1a, 0x204, 0x40, 0x4, 0x8, 0xab, @broadcast}, 0x80) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r4}, 0x18) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1}}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r4, 0x1, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000001c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r7}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r2}, 0x18) (async) sendmsg$can_j1939(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x1d, r2, 0x0, {0x2, 0x1, 0x2}, 0xfd}, 0x18, &(0x7f00000002c0)={&(0x7f00000010c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x10000}, 0x80800) (async) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r2, 0x0, {0x2, 0x0, 0x3}, 0x2}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) connect(r1, &(0x7f0000000340)=@llc={0x1a, 0x204, 0x40, 0x4, 0x8, 0xab, @broadcast}, 0x80) (async) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r4}, 0x18) (async) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1}}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r4, 0x1, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000001c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r7}, 0x18) (async) sendmsg$can_j1939(r5, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) 11:12:11 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1110.597209][ T3273] device bond188 entered promiscuous mode 11:12:11 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x1d, r2, 0x0, {0x2, 0x1, 0x2}, 0xfd}, 0x18, &(0x7f00000002c0)={&(0x7f00000010c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x10000}, 0x80800) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r2, 0x0, {0x2, 0x0, 0x3}, 0x2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect(r1, &(0x7f0000000340)=@llc={0x1a, 0x204, 0x40, 0x4, 0x8, 0xab, @broadcast}, 0x80) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r4}, 0x18) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1}}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r4, 0x1, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000001c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r7}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r2}, 0x18) (async) sendmsg$can_j1939(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x1d, r2, 0x0, {0x2, 0x1, 0x2}, 0xfd}, 0x18, &(0x7f00000002c0)={&(0x7f00000010c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x10000}, 0x80800) (async) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r2, 0x0, {0x2, 0x0, 0x3}, 0x2}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) connect(r1, &(0x7f0000000340)=@llc={0x1a, 0x204, 0x40, 0x4, 0x8, 0xab, @broadcast}, 0x80) (async) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r4}, 0x18) (async) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1}}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r4, 0x1, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000001c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r7}, 0x18) (async) sendmsg$can_j1939(r5, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) [ 1110.645580][ T3292] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1110.666106][ T3280] bond188: (slave bridge111): making interface the new active one 11:12:11 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x2, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:11 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x4, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1110.692904][ T3280] device bridge111 entered promiscuous mode [ 1110.711872][ T3280] bond188: (slave bridge111): Enslaving as an active interface with an up link 11:12:11 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x3, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x48, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1110.745697][ T3298] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1110.772938][ T3315] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 1110.879351][ T3319] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1110.891819][ T3318] device bond189 entered promiscuous mode [ 1110.921726][ T3318] bond189: (slave bridge112): making interface the new active one [ 1110.929887][ T3318] device bridge112 entered promiscuous mode [ 1110.936718][ T3318] bond189: (slave bridge112): Enslaving as an active interface with an up link 11:12:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x4}, 0x0) 11:12:11 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:11 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x8, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1111.380001][ T3323] vcan0: tx drop: invalid da for name 0x0000000000000008 11:12:12 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:12 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x4, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:12 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x11, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1111.755821][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806d627800: rx timeout, send abort [ 1111.764307][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806d627800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1111.829842][ T3333] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 1111.833938][ T3331] device bond190 entered promiscuous mode [ 1111.840290][ T3334] vcan0: tx drop: invalid da for name 0x0000000000000011 [ 1111.870911][ T3331] bond190: (slave bridge113): making interface the new active one [ 1111.884127][ T3336] vcan0: tx drop: invalid da for name 0x0000000000000002 11:12:12 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xee, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:12 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x7, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1111.920153][ T3331] device bridge113 entered promiscuous mode [ 1111.930408][ T3331] bond190: (slave bridge113): Enslaving as an active interface with an up link 11:12:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1111.967473][ T3338] vcan0: tx drop: invalid da for name 0x0000000000000007 [ 1111.984187][ T3340] vcan0: tx drop: invalid da for name 0x00000000000000ee 11:12:12 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x300, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:12 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x8, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1112.063607][ T3345] vcan0: tx drop: invalid da for name 0x0000000000000008 [ 1112.078024][ T3347] vcan0: tx drop: invalid da for name 0x0000000000000300 [ 1112.091214][ T3342] device bond191 entered promiscuous mode [ 1112.123610][ T3351] bond191: (slave bridge114): making interface the new active one [ 1112.132109][ T3351] device bridge114 entered promiscuous mode [ 1112.142056][ T3351] bond191: (slave bridge114): Enslaving as an active interface with an up link 11:12:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x8}, 0x0) 11:12:13 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) 11:12:13 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x11, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1112.639212][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801a369000: rx timeout, send abort [ 1112.648013][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801a369000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1112.709808][ T3360] vcan0: tx drop: invalid da for name 0x0000000000000011 11:12:13 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x3}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:13 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x1100, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:13 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xee, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xe}, 0x0) [ 1113.131139][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d781000: rx timeout, send abort [ 1113.140034][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801d781000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1113.191778][ T3375] validate_nla: 8 callbacks suppressed [ 1113.191798][ T3375] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1113.219142][ T3378] vcan0: tx drop: invalid da for name 0x00000000000000ee [ 1113.219736][ T3376] vcan0: tx drop: invalid da for name 0x0000000000001100 11:12:13 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xee00, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:13 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x300, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1113.261326][ T3375] device bond192 entered promiscuous mode [ 1113.270705][ T3382] vcan0: tx drop: invalid da for name 0x0000000000000003 11:12:13 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xefff, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1113.311568][ T3385] vcan0: tx drop: invalid da for name 0x000000000000ee00 [ 1113.313585][ T3383] bond192: (slave bridge115): making interface the new active one [ 1113.332111][ T3383] device bridge115 entered promiscuous mode [ 1113.339744][ T3383] bond192: (slave bridge115): Enslaving as an active interface with an up link 11:12:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x60, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:13 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x700, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1113.368407][ T3387] vcan0: tx drop: invalid da for name 0x0000000000000300 [ 1113.418080][ T3389] vcan0: tx drop: invalid da for name 0x000000000000efff [ 1113.451107][ T3391] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1113.475131][ T3394] vcan0: tx drop: invalid da for name 0x0000000000000700 [ 1113.478799][ T3391] device bond193 entered promiscuous mode [ 1113.503457][ T3391] bond193: (slave bridge116): making interface the new active one [ 1113.511637][ T3391] device bridge116 entered promiscuous mode [ 1113.519349][ T3391] bond193: (slave bridge116): Enslaving as an active interface with an up link 11:12:14 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:14 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffef, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1113.951118][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880785d7800: rx timeout, send abort [ 1113.959686][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880785d7800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1113.974524][ C1] vcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff8880792a1800: CMD 0xff with PGN 0x40000 for running session with different PGN 0x00000. [ 1114.013977][ T3400] vcan0: tx drop: invalid da for name 0x000000000000ffef 11:12:15 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x4}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:15 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x1100, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x61, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x60}, 0x0) 11:12:15 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x34000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1114.505009][ C1] vcan0: j1939_tp_rxtimer: 0xffff888070ea0c00: rx timeout, send abort [ 1114.513446][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888070ea0c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:15 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xee00, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1114.569780][ T3410] vcan0: tx drop: invalid da for name 0x0000000000001100 [ 1114.577748][ T3408] vcan0: tx drop: invalid da for name 0x0000000000034000 [ 1114.579310][ T3409] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1114.608915][ T3414] vcan0: tx drop: invalid da for name 0x0000000000000004 11:12:15 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x3ffff, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1114.635615][ T3409] device bond194 entered promiscuous mode [ 1114.657689][ T3415] bond194: (slave bridge117): making interface the new active one [ 1114.667916][ T3418] vcan0: tx drop: invalid da for name 0x000000000000ee00 [ 1114.668361][ T3415] device bridge117 entered promiscuous mode 11:12:15 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xefff, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1114.690083][ T3415] bond194: (slave bridge117): Enslaving as an active interface with an up link 11:12:15 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffef, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1114.734178][ T3422] vcan0: tx drop: invalid da for name 0x000000000000efff [ 1114.739211][ T3420] vcan0: tx drop: invalid da for name 0x000000000003ffff 11:12:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1114.797890][ T3424] vcan0: tx drop: invalid da for name 0x000000000000ffef [ 1114.831227][ T3426] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1114.855185][ T3426] device bond195 entered promiscuous mode [ 1114.872307][ T3426] bond195: (slave bridge118): making interface the new active one [ 1114.880357][ T3426] device bridge118 entered promiscuous mode [ 1114.889453][ T3426] bond195: (slave bridge118): Enslaving as an active interface with an up link 11:12:15 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x400300, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:15 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x34000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1115.286915][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802275cc00: rx timeout, send abort [ 1115.295246][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802275cc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1115.347886][ T3431] vcan0: tx drop: invalid da for name 0x0000000000034000 [ 1115.349302][ T3430] vcan0: tx drop: invalid da for name 0x0000000000400300 [ 1115.606313][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 11:12:16 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:16 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac041410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) getpeername$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$can_j1939(r3, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x6c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:16 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x3ffff, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:16 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xee0000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xf0}, 0x0) [ 1115.857018][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880743e7400: rx timeout, send abort [ 1115.865481][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880743e7400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1115.943189][ T3438] vcan0: tx drop: invalid da for name 0x000000000003ffff [ 1115.943936][ T3437] vcan0: tx drop: invalid da for name 0x0000000000ee0000 [ 1115.953836][ T3439] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1115.959139][ T3440] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:12:16 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x1000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:16 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x400300, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1116.002225][ T3443] vcan0: tx drop: invalid da for name 0x0000000000000007 [ 1116.024427][ T3440] netlink: 4662 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1116.044689][ T3439] device bond196 entered promiscuous mode 11:12:16 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xee0000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x74, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1116.102172][ T3446] bond196: (slave bridge119): making interface the new active one [ 1116.110282][ T3446] device bridge119 entered promiscuous mode [ 1116.118861][ T3446] bond196: (slave bridge119): Enslaving as an active interface with an up link [ 1116.137091][ T3449] vcan0: tx drop: invalid da for name 0x0000000001000000 [ 1116.137591][ T3451] vcan0: tx drop: invalid da for name 0x0000000000400300 11:12:16 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x2000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1116.196460][ T3453] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1116.252517][ T3453] device bond197 entered promiscuous mode [ 1116.270591][ T3458] vcan0: tx drop: invalid da for name 0x0000000002000000 [ 1116.277971][ T3457] bond197: (slave bridge120): making interface the new active one [ 1116.278656][ T3459] vcan0: tx drop: invalid da for name 0x0000000000ee0000 [ 1116.287043][ T3457] device bridge120 entered promiscuous mode 11:12:16 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x1000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1116.308289][ T3457] bond197: (slave bridge120): Enslaving as an active interface with an up link [ 1116.402688][ T3461] vcan0: tx drop: invalid da for name 0x0000000001000000 11:12:17 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x8}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:17 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) write(r2, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac041410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) getpeername$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$can_j1939(r3, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1117.251503][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075149800: rx timeout, send abort [ 1117.260231][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888075149800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1117.273660][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b3e6800: rx timeout, send abort [ 1117.282869][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b3e6800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x78, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:17 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x3000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:17 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x2000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x300}, 0x0) [ 1117.356518][ T3468] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1117.367949][ T3470] vcan0: tx drop: invalid da for name 0x0000000000000008 [ 1117.372519][ T3469] vcan0: tx drop: invalid da for name 0x0000000002000000 [ 1117.384455][ T3467] vcan0: tx drop: invalid da for name 0x0000000003000000 11:12:17 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x4000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:17 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x3000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1117.421876][ T3475] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1117.461887][ T3468] device bond198 entered promiscuous mode [ 1117.465631][ T3480] vcan0: tx drop: invalid da for name 0x0000000004000000 11:12:18 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x8000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1117.480121][ T3475] netlink: 4662 bytes leftover after parsing attributes in process `syz-executor.0'. 11:12:18 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x11000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1117.524264][ T3484] vcan0: tx drop: invalid da for name 0x0000000008000000 [ 1117.540423][ T3485] vcan0: tx drop: invalid da for name 0x0000000003000000 [ 1117.550453][ T3476] bond198: (slave bridge121): making interface the new active one 11:12:18 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x4000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1117.570283][ T3476] device bridge121 entered promiscuous mode [ 1117.590552][ T3476] bond198: (slave bridge121): Enslaving as an active interface with an up link [ 1117.599610][ T3487] vcan0: tx drop: invalid da for name 0x0000000011000000 11:12:18 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffef0000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1117.638663][ T3489] vcan0: tx drop: invalid da for name 0x0000000004000000 [ 1117.686919][ T3491] vcan0: tx drop: invalid da for name 0x00000000ffef0000 11:12:19 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x11}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1118.617260][ C1] vcan0: j1939_tp_rxtimer: 0xffff888018c92400: rx timeout, send abort [ 1118.625900][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888018c92400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:19 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac041410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) getpeername$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$can_j1939(r3, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) socket(0x10, 0x3, 0x0) (async) write(r2, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac041410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) getpeername$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$can_j1939(r3, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) 11:12:19 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x7000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7a, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:19 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffff0300, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x887}, 0x0) [ 1118.672435][ T3494] vcan0: tx drop: invalid da for name 0x0000000000000011 [ 1118.679585][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dc86400: rx timeout, send abort [ 1118.688212][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807dc86400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1118.741777][ T3499] vcan0: tx drop: invalid da for name 0x00000000ffff0300 [ 1118.757520][ T3502] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1118.771587][ T3500] vcan0: tx drop: invalid da for name 0x0000000007000000 [ 1118.778153][ T3504] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:12:19 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x8000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:19 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffffff7f, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1118.793186][ T3504] netlink: 4662 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1118.860209][ T3502] device bond199 entered promiscuous mode [ 1118.879239][ T3507] bond199: (slave bridge122): making interface the new active one [ 1118.887806][ T3507] device bridge122 entered promiscuous mode [ 1118.898303][ T3507] bond199: (slave bridge122): Enslaving as an active interface with an up link 11:12:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xae, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:19 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x11000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1118.907760][ T3510] vcan0: tx drop: invalid da for name 0x0000000008000000 [ 1118.959436][ T3520] vcan0: tx drop: invalid da for name 0x00000000ffffff7f [ 1118.971524][ T3522] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1118.996681][ T3522] device bond200 entered promiscuous mode 11:12:19 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x1022453eba6, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1119.017846][ T3522] bond200: (slave bridge123): making interface the new active one [ 1119.025980][ T3522] device bridge123 entered promiscuous mode [ 1119.037110][ T3522] bond200: (slave bridge123): Enslaving as an active interface with an up link 11:12:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xcc, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1119.066226][ T3525] vcan0: tx drop: invalid da for name 0x0000000011000000 [ 1119.093666][ T3529] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1119.104447][ T3527] vcan0: tx drop: invalid da for name 0x000001022453eba6 [ 1119.129486][ T3529] device bond201 entered promiscuous mode [ 1119.162510][ T3529] bond201: (slave bridge124): making interface the new active one [ 1119.170624][ T3529] device bridge124 entered promiscuous mode [ 1119.177382][ T3529] bond201: (slave bridge124): Enslaving as an active interface with an up link 11:12:20 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xee}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1119.922050][ C0] vcan0: j1939_tp_rxtimer: 0xffff888076f1c400: rx timeout, send abort [ 1119.930632][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888076f1c400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1119.980883][ T3532] vcan0: tx drop: invalid da for name 0x00000000000000ee 11:12:20 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r3, 0x4, 0x4, 0x2, 0x8, 0x1, @remote, @local, 0x20, 0x40, 0x7f, 0x10000}}) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r5, 0x3, {0x0, 0xf0}, 0xfd}, 0x18, &(0x7f0000000280)={&(0x7f00000010c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:20 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffef0000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:20 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x40030000000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xd2, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xae8}, 0x0) [ 1120.114005][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079860c00: rx timeout, send abort [ 1120.122535][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079860c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:20 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xee000000000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1120.172617][ T3539] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1120.173919][ T3540] vcan0: tx drop: invalid da for name 0x0040030000000000 [ 1120.192452][ T3538] vcan0: tx drop: invalid da for name 0x00000000ffef0000 11:12:20 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffff0300, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1120.256351][ T3539] device bond202 entered promiscuous mode [ 1120.289497][ T3547] vcan0: tx drop: invalid da for name 0x00ee000000000000 11:12:20 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x100000000000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:20 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffffff7f, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1120.305385][ T3549] vcan0: tx drop: invalid da for name 0x00000000ffff0300 [ 1120.327597][ T3545] bond202: (slave bridge125): making interface the new active one [ 1120.337180][ T3545] device bridge125 entered promiscuous mode [ 1120.346602][ T3545] bond202: (slave bridge125): Enslaving as an active interface with an up link 11:12:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xd4, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1120.375768][ T3551] vcan0: tx drop: invalid da for name 0x0100000000000000 [ 1120.404191][ T3553] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:12:20 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x200000000000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1120.436174][ T3553] device bond203 entered promiscuous mode [ 1120.460093][ T3556] vcan0: tx drop: invalid da for name 0x00000000ffffff7f [ 1120.471106][ T3553] bond203: (slave bridge126): making interface the new active one [ 1120.482133][ T3553] device bridge126 entered promiscuous mode [ 1120.492179][ T3553] bond203: (slave bridge126): Enslaving as an active interface with an up link [ 1120.496965][ T3558] vcan0: tx drop: invalid da for name 0x0200000000000000 11:12:21 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x300}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1121.230161][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880771dc400: rx timeout, send abort [ 1121.239687][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880771dc400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1121.281164][ T3560] vcan0: tx drop: invalid da for name 0x0000000000000300 11:12:22 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r3, 0x4, 0x4, 0x2, 0x8, 0x1, @remote, @local, 0x20, 0x40, 0x7f, 0x10000}}) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r5, 0x3, {0x0, 0xf0}, 0xfd}, 0x18, &(0x7f0000000280)={&(0x7f00000010c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r3, 0x4, 0x4, 0x2, 0x8, 0x1, @remote, @local, 0x20, 0x40, 0x7f, 0x10000}}) (async) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r5, 0x3, {0x0, 0xf0}, 0xfd}, 0x18, &(0x7f0000000280)={&(0x7f00000010c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) 11:12:22 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x1023c214d83, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xd9, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:22 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x300000000000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xe00}, 0x0) [ 1121.468447][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e4d5400: rx timeout, send abort [ 1121.476831][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e4d5400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:22 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x40030000000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:22 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x400000000000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1121.539925][ T3563] vcan0: tx drop: invalid da for name 0x000001023c214d83 [ 1121.550706][ T3566] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1121.559194][ T3567] vcan0: tx drop: invalid da for name 0x0300000000000000 [ 1121.619214][ T3566] device bond204 entered promiscuous mode [ 1121.635011][ T3577] bond204: (slave bridge127): making interface the new active one [ 1121.642940][ T3577] device bridge127 entered promiscuous mode [ 1121.657454][ T3577] bond204: (slave bridge127): Enslaving as an active interface with an up link 11:12:22 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xee000000000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xf0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1121.668691][ T3579] vcan0: tx drop: invalid da for name 0x0040030000000000 [ 1121.697336][ T3581] vcan0: tx drop: invalid da for name 0x0400000000000000 11:12:22 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x800000000000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1121.726501][ T3583] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1121.757105][ T3583] device bond205 entered promiscuous mode [ 1121.782049][ T3586] vcan0: tx drop: invalid da for name 0x00ee000000000000 [ 1121.784575][ T3583] bond205: (slave bridge128): making interface the new active one [ 1121.797289][ T3583] device bridge128 entered promiscuous mode [ 1121.805106][ T3583] bond205: (slave bridge128): Enslaving as an active interface with an up link 11:12:22 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x100000000000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1121.828473][ T3588] vcan0: tx drop: invalid da for name 0x0800000000000000 [ 1121.860356][ T3590] vcan0: tx drop: invalid da for name 0x0100000000000000 11:12:23 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x700}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1122.530375][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804d522c00: rx timeout, send abort [ 1122.538859][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804d522c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1122.582924][ T3593] vcan0: tx drop: invalid da for name 0x0000000000000700 11:12:23 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r3, 0x4, 0x4, 0x2, 0x8, 0x1, @remote, @local, 0x20, 0x40, 0x7f, 0x10000}}) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r5, 0x3, {0x0, 0xf0}, 0xfd}, 0x18, &(0x7f0000000280)={&(0x7f00000010c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:23 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x1100000000000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xf2, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:23 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x200000000000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xec0}, 0x0) [ 1122.822871][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d809c00: rx timeout, send abort [ 1122.831265][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d809c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1122.845601][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079e37400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:23 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xa6eb532402010000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:23 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x300000000000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1122.899768][ T3606] vcan0: tx drop: invalid da for name 0x0200000000000000 [ 1122.910663][ T3608] vcan0: tx drop: invalid da for name 0x1100000000000000 [ 1122.921855][ T3607] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:12:23 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x1, 0xf0}, 0xfd}, 0x18) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f0000000140)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xc080) 11:12:23 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffef000000000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1122.998798][ T3620] vcan0: tx drop: invalid da for name 0xa6eb532402010000 [ 1123.031542][ T3617] vcan0: tx drop: invalid da for name 0x0300000000000000 [ 1123.034158][ T3607] device bond206 entered promiscuous mode 11:12:23 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffff030000000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1123.062610][ T3636] vcan0: tx drop: invalid da for name 0xffef000000000000 [ 1123.090552][ T3618] bond206: (slave bridge129): making interface the new active one [ 1123.098529][ T3618] device bridge129 entered promiscuous mode 11:12:23 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x400000000000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1123.107472][ T3618] bond206: (slave bridge129): Enslaving as an active interface with an up link [ 1123.143872][ T3639] vcan0: tx drop: invalid da for name 0xffff030000000000 [ 1123.216760][ T3641] vcan0: tx drop: invalid da for name 0x0400000000000000 11:12:24 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x1100}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x10c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:24 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffffff7f00000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:24 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x700000000000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x3b7b}, 0x0) [ 1123.832310][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079192000: rx timeout, send abort [ 1123.840785][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079192000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1123.901605][ T3649] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1123.905921][ T3651] vcan0: tx drop: invalid da for name 0x0000000000001100 [ 1123.911490][ T3647] vcan0: tx drop: invalid da for name 0x0700000000000000 [ 1123.922767][ T3648] vcan0: tx drop: invalid da for name 0xffffff7f00000000 11:12:24 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffffffff00000000, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:24 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x800000000000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1123.959275][ T3649] device bond207 entered promiscuous mode [ 1123.988868][ T3656] bond207: (slave bridge130): making interface the new active one 11:12:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x13a, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1124.006311][ T3656] device bridge130 entered promiscuous mode [ 1124.012960][ T3656] bond207: (slave bridge130): Enslaving as an active interface with an up link [ 1124.021543][ T3668] vcan0: tx drop: invalid da for name 0xffffffff00000000 [ 1124.044872][ T3674] vcan0: tx drop: invalid da for name 0x0800000000000000 [ 1124.096546][ T3682] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1124.119284][ T3682] device bond208 entered promiscuous mode [ 1124.137018][ T3682] bond208: (slave bridge131): making interface the new active one [ 1124.145150][ T3682] device bridge131 entered promiscuous mode [ 1124.152423][ T3682] bond208: (slave bridge131): Enslaving as an active interface with an up link 11:12:24 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:24 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x1100000000000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:24 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x1, 0xf0}, 0xfd}, 0x18) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f0000000140)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xc080) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x1, 0xf0}, 0xfd}, 0x18) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f0000000140)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xc080) (async) 11:12:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x140, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1124.354235][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e0c8400: rx timeout, send abort [ 1124.362959][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e0c8400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1124.423495][ T3694] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1124.433953][ T3695] vcan0: tx drop: invalid da for name 0x1100000000000000 [ 1124.484760][ T3694] device bond209 entered promiscuous mode [ 1124.501279][ T3706] bond209: (slave bridge132): making interface the new active one [ 1124.509754][ T3706] device bridge132 entered promiscuous mode [ 1124.516783][ T3706] bond209: (slave bridge132): Enslaving as an active interface with an up link 11:12:25 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x834d213c02010000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:25 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xee00}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x6000}, 0x0) 11:12:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x14a, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1125.155219][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801df69c00: rx timeout, send abort [ 1125.163651][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801df69c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1125.220446][ T3712] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1125.225794][ T3711] vcan0: tx drop: invalid da for name 0x834d213c02010000 [ 1125.249409][ T3712] device bond210 entered promiscuous mode 11:12:25 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffef000000000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1125.265481][ T3715] vcan0: tx drop: invalid da for name 0x000000000000ee00 11:12:25 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffff030000000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x14e, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1125.308089][ T3712] bond210: (slave bridge133): making interface the new active one [ 1125.319173][ T3718] vcan0: tx drop: invalid da for name 0xffef000000000000 [ 1125.320682][ T3712] device bridge133 entered promiscuous mode [ 1125.340608][ T3712] bond210: (slave bridge133): Enslaving as an active interface with an up link [ 1125.387183][ T3720] vcan0: tx drop: invalid da for name 0xffff030000000000 [ 1125.401939][ T3722] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:12:25 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffffff7f00000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1125.431363][ T3722] device bond211 entered promiscuous mode [ 1125.475518][ T3722] bond211: (slave bridge134): making interface the new active one [ 1125.475621][ T3725] vcan0: tx drop: invalid da for name 0xffffff7f00000000 [ 1125.484584][ T3722] device bridge134 entered promiscuous mode [ 1125.498573][ T3722] bond211: (slave bridge134): Enslaving as an active interface with an up link 11:12:26 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1125.665574][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806dc6f800: rx timeout, send abort [ 1125.673967][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806dc6f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1125.698551][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801dc1f800: rx timeout, send abort 11:12:26 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffffffff00000000, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:26 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x1, 0xf0}, 0xfd}, 0x18) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f0000000140)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xc080) 11:12:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x15a, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1125.710463][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801dc1f800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1125.742600][ T3729] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1125.754599][ T3728] vcan0: tx drop: invalid da for name 0xffffffff00000000 11:12:26 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x3}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:26 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1125.783425][ T3729] device bond212 entered promiscuous mode [ 1125.804247][ T3729] bond212: (slave bridge135): making interface the new active one [ 1125.815853][ T3729] device bridge135 entered promiscuous mode [ 1125.823772][ T3729] bond212: (slave bridge135): Enslaving as an active interface with an up link 11:12:27 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xefff}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x16a, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:27 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x4}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x7b3b}, 0x0) [ 1126.513687][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806cb56400: rx timeout, send abort [ 1126.522051][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806cb56400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:27 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x8}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1126.560502][ T3745] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1126.595663][ T3745] device bond213 entered promiscuous mode 11:12:27 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x11}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1126.622729][ T3750] vcan0: tx drop: invalid da for name 0x000000000000efff [ 1126.656742][ T3745] bond213: (slave bridge136): making interface the new active one [ 1126.665589][ T3745] device bridge136 entered promiscuous mode 11:12:27 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x182, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1126.674747][ T3745] bond213: (slave bridge136): Enslaving as an active interface with an up link [ 1126.734626][ T3759] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1126.754315][ T3759] device bond214 entered promiscuous mode [ 1126.770921][ T3759] bond214: (slave bridge137): making interface the new active one [ 1126.779094][ T3759] device bridge137 entered promiscuous mode [ 1126.786762][ T3759] bond214: (slave bridge137): Enslaving as an active interface with an up link [ 1127.048455][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806df78000: rx timeout, send abort [ 1127.142018][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880193c0c00: rx timeout, send abort [ 1127.150632][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880193c0c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:28 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5}, 0xffffffffffffff3e) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r5, 0x2, {0x2, 0xff}, 0xff}, 0x18) 11:12:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x188, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:28 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x8708}, 0x0) [ 1127.556785][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806df78000: abort rx timeout. Force session deactivation [ 1127.627275][ T3765] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1127.649203][ T3765] device bond215 entered promiscuous mode [ 1127.672308][ T3765] bond215: (slave bridge138): making interface the new active one [ 1127.680743][ T3765] device bridge138 entered promiscuous mode [ 1127.687751][ T3765] bond215: (slave bridge138): Enslaving as an active interface with an up link 11:12:28 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffef}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:28 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x3}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x190, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1127.871811][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078fb6c00: rx timeout, send abort [ 1127.880296][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078fb6c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1127.922458][ T3772] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1127.947618][ T3772] device bond216 entered promiscuous mode [ 1127.953296][ T3776] vcan0: tx drop: invalid da for name 0x000000000000ffef [ 1127.958244][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f15c000: rx timeout, send abort 11:12:28 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x2}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:28 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x4}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1127.969356][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801f15c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:28 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x7}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:28 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x8}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1128.024885][ T3772] bond216: (slave bridge139): making interface the new active one [ 1128.034354][ T3772] device bridge139 entered promiscuous mode [ 1128.047907][ T3772] bond216: (slave bridge139): Enslaving as an active interface with an up link 11:12:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1cc, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1128.155305][ T3788] device bond217 entered promiscuous mode [ 1128.186008][ T3788] bond217: (slave bridge140): making interface the new active one [ 1128.194051][ T3788] device bridge140 entered promiscuous mode [ 1128.200618][ T3788] bond217: (slave bridge140): Enslaving as an active interface with an up link 11:12:29 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5}, 0xffffffffffffff3e) (async) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r5, 0x2, {0x2, 0xff}, 0xff}, 0x18) 11:12:29 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x11}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1de, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) [ 1128.872404][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880226e7800: rx timeout, send abort [ 1128.880815][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880226e7800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1128.938246][ T3797] validate_nla: 1 callbacks suppressed [ 1128.938265][ T3797] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1128.966522][ T3797] device bond218 entered promiscuous mode [ 1128.989486][ T3797] bond218: (slave bridge141): making interface the new active one [ 1128.997941][ T3797] device bridge141 entered promiscuous mode [ 1129.005549][ T3797] bond218: (slave bridge141): Enslaving as an active interface with an up link 11:12:29 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x34000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:29 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1ea, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1129.201287][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cc71400: rx timeout, send abort [ 1129.209857][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cc71400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1129.252941][ T3805] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1129.275582][ T3809] vcan0: tx drop: invalid da for name 0x0000000000034000 [ 1129.284302][ T3805] device bond219 entered promiscuous mode 11:12:29 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x3}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1ec, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1129.306237][ T3805] bond219: (slave bridge142): making interface the new active one [ 1129.314354][ T3805] device bridge142 entered promiscuous mode [ 1129.320957][ T3805] bond219: (slave bridge142): Enslaving as an active interface with an up link [ 1129.332242][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880790d1800: rx timeout, send abort [ 1129.340833][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880790d1800: 0x00200: (3) A timeout occurred and this is the connection abort to close the session. [ 1129.403535][ T3811] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1129.424183][ T3811] device bond220 entered promiscuous mode [ 1129.440537][ T3811] bond220: (slave bridge143): making interface the new active one 11:12:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x203, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1129.449013][ T3811] device bridge143 entered promiscuous mode [ 1129.455977][ T3811] bond220: (slave bridge143): Enslaving as an active interface with an up link [ 1129.499286][ T3816] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1129.523013][ T3816] device bond221 entered promiscuous mode [ 1129.540019][ T3816] bond221: (slave bridge144): making interface the new active one 11:12:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x20a, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1129.548445][ T3816] device bridge144 entered promiscuous mode [ 1129.555242][ T3816] bond221: (slave bridge144): Enslaving as an active interface with an up link [ 1129.602299][ T3819] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1129.630391][ T3819] device bond222 entered promiscuous mode 11:12:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x20c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1129.651197][ T3819] bond222: (slave bridge145): making interface the new active one [ 1129.659189][ T3819] device bridge145 entered promiscuous mode [ 1129.669912][ T3819] bond222: (slave bridge145): Enslaving as an active interface with an up link [ 1129.719010][ T3822] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1129.741228][ T3822] device bond223 entered promiscuous mode [ 1129.759495][ T3822] bond223: (slave bridge146): making interface the new active one [ 1129.767683][ T3822] device bridge146 entered promiscuous mode [ 1129.774748][ T3822] bond223: (slave bridge146): Enslaving as an active interface with an up link 11:12:30 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async, rerun: 32) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (rerun: 32) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5}, 0xffffffffffffff3e) (async, rerun: 64) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r5, 0x2, {0x2, 0xff}, 0xff}, 0x18) (rerun: 64) 11:12:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xe80a}, 0x0) 11:12:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x20e, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1130.247837][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ab61000: rx timeout, send abort [ 1130.256393][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ab61000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1130.306047][ T3826] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1130.333458][ T3826] device bond224 entered promiscuous mode 11:12:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x216, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1130.352498][ T3826] bond224: (slave bridge147): making interface the new active one [ 1130.360846][ T3826] device bridge147 entered promiscuous mode [ 1130.368672][ T3826] bond224: (slave bridge147): Enslaving as an active interface with an up link [ 1130.411414][ T3834] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1130.443444][ T3834] device bond225 entered promiscuous mode [ 1130.462580][ T3834] bond225: (slave bridge148): making interface the new active one [ 1130.471453][ T3834] device bridge148 entered promiscuous mode [ 1130.478508][ T3834] bond225: (slave bridge148): Enslaving as an active interface with an up link 11:12:31 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x3ffff}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x220, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:31 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x2}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1130.512369][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ca2bc00: rx timeout, send abort [ 1130.523888][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804ca2bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1130.538502][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d998c00: rx timeout, send abort [ 1130.546993][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d998c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1130.592675][ T3837] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1130.618717][ T3841] vcan0: tx drop: invalid da for name 0x000000000003ffff [ 1130.630821][ T3837] device bond226 entered promiscuous mode 11:12:31 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x4}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x22a, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1130.649871][ T3837] bond226: (slave bridge149): making interface the new active one [ 1130.658561][ T3837] device bridge149 entered promiscuous mode [ 1130.664730][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807957c400: rx timeout, send abort [ 1130.671269][ T3837] bond226: (slave bridge149): Enslaving as an active interface with an up link [ 1130.673005][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807957c400: 0x00300: (3) A timeout occurred and this is the connection abort to close the session. [ 1130.751820][ T3846] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1130.770636][ T3846] device bond227 entered promiscuous mode 11:12:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x234, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1130.792174][ T3846] bond227: (slave bridge150): making interface the new active one [ 1130.800382][ T3846] device bridge150 entered promiscuous mode [ 1130.807402][ T3846] bond227: (slave bridge150): Enslaving as an active interface with an up link 11:12:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x238, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1130.861992][ T3849] device bond228 entered promiscuous mode [ 1130.880502][ T3849] bond228: (slave bridge151): making interface the new active one [ 1130.888817][ T3849] device bridge151 entered promiscuous mode [ 1130.895932][ T3849] bond228: (slave bridge151): Enslaving as an active interface with an up link 11:12:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x23c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1130.956489][ T3852] device bond229 entered promiscuous mode [ 1130.977004][ T3852] bond229: (slave bridge152): making interface the new active one [ 1130.985547][ T3852] device bridge152 entered promiscuous mode [ 1130.992156][ T3852] bond229: (slave bridge152): Enslaving as an active interface with an up link [ 1131.050474][ T3855] device bond230 entered promiscuous mode [ 1131.073035][ T3855] bond230: (slave bridge153): making interface the new active one [ 1131.080960][ T3855] device bridge153 entered promiscuous mode [ 1131.088115][ T3855] bond230: (slave bridge153): Enslaving as an active interface with an up link [ 1131.571029][ C0] vcan0: j1939_tp_rxtimer: 0xffff888076e8ec00: rx timeout, send abort [ 1131.579532][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888076e8ec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1131.593936][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888076e8d400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1131.857893][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880758f4800: rx timeout, send abort [ 1131.866390][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880758f4800: 0x00200: (3) A timeout occurred and this is the connection abort to close the session. [ 1131.867946][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b040000: rx timeout, send abort [ 1131.889318][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801b040000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1132.000109][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022868800: rx timeout, send abort [ 1132.008545][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888022868800: 0x00400: (3) A timeout occurred and this is the connection abort to close the session. [ 1132.870451][ C0] vcan0: j1939_tp_rxtimer: 0xffff888076e8e000: rx timeout, send abort [ 1132.878888][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888076e8e000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1132.893302][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888076e8cc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:33 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r4}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000080)="7bd3f5d4757a75feb571c9efd0275090340f", 0x12}}, 0x0) 11:12:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x242, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xf000}, 0x0) 11:12:33 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x3}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:33 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x400300}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:33 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x8}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1133.365122][ T3865] vcan0: tx drop: invalid da for name 0x0000000000400300 [ 1133.379732][ T3864] device bond231 entered promiscuous mode [ 1133.415142][ T3864] bond231: (slave bridge154): making interface the new active one [ 1133.424735][ T3864] device bridge154 entered promiscuous mode [ 1133.431572][ T3864] bond231: (slave bridge154): Enslaving as an active interface with an up link 11:12:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x258, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x272, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1133.511693][ T3875] device bond232 entered promiscuous mode [ 1133.529144][ T3875] bond232: (slave bridge155): making interface the new active one [ 1133.537569][ T3875] device bridge155 entered promiscuous mode [ 1133.544725][ T3875] bond232: (slave bridge155): Enslaving as an active interface with an up link 11:12:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x29c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1133.601205][ T3878] device bond233 entered promiscuous mode [ 1133.621121][ T3878] bond233: (slave bridge156): making interface the new active one [ 1133.629492][ T3878] device bridge156 entered promiscuous mode [ 1133.636331][ T3878] bond233: (slave bridge156): Enslaving as an active interface with an up link 11:12:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2a0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1133.692082][ T3881] device bond234 entered promiscuous mode [ 1133.713489][ T3881] bond234: (slave bridge157): making interface the new active one [ 1133.721356][ T3881] device bridge157 entered promiscuous mode [ 1133.728241][ T3881] bond234: (slave bridge157): Enslaving as an active interface with an up link 11:12:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2d6, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1133.792100][ T3884] device bond235 entered promiscuous mode [ 1133.812097][ T3884] bond235: (slave bridge158): making interface the new active one [ 1133.821116][ T3884] device bridge158 entered promiscuous mode [ 1133.829157][ T3884] bond235: (slave bridge158): Enslaving as an active interface with an up link 11:12:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2da, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1133.882963][ T3887] device bond236 entered promiscuous mode [ 1133.900744][ T3887] bond236: (slave bridge159): making interface the new active one [ 1133.908879][ T3887] device bridge159 entered promiscuous mode [ 1133.918282][ T3887] bond236: (slave bridge159): Enslaving as an active interface with an up link [ 1133.961628][ T3890] validate_nla: 9 callbacks suppressed [ 1133.961642][ T3890] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1133.987091][ T3890] device bond237 entered promiscuous mode [ 1134.006006][ T3890] bond237: (slave bridge160): making interface the new active one [ 1134.015601][ T3890] device bridge160 entered promiscuous mode [ 1134.022280][ T3890] bond237: (slave bridge160): Enslaving as an active interface with an up link [ 1134.607316][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cff4800: rx timeout, send abort [ 1134.615744][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cff4800: 0x00800: (3) A timeout occurred and this is the connection abort to close the session. [ 1134.630265][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cff6000: rx timeout, send abort [ 1134.632046][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020d25000: rx timeout, send abort [ 1134.639104][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cff6000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1134.649221][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888020d25000: 0x00300: (3) A timeout occurred and this is the connection abort to close the session. [ 1134.675470][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077386c00: rx timeout, send abort 11:12:35 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r4}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000080)="7bd3f5d4757a75feb571c9efd0275090340f", 0x12}}, 0x0) 11:12:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x34000}, 0x0) 11:12:35 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x11}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:35 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xee0000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:35 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x4}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1134.704693][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888077386c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1134.764561][ T3895] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1134.768559][ T3899] vcan0: tx drop: invalid da for name 0x0000000000ee0000 [ 1134.840356][ T3895] device bond238 entered promiscuous mode [ 1134.864131][ T3908] bond238: (slave bridge161): making interface the new active one [ 1134.880295][ T3908] device bridge161 entered promiscuous mode 11:12:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x302, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1134.887743][ T3908] bond238: (slave bridge161): Enslaving as an active interface with an up link [ 1134.936497][ T3912] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1134.958391][ T3912] device bond239 entered promiscuous mode 11:12:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x30c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1134.979664][ T3912] bond239: (slave bridge162): making interface the new active one [ 1134.987605][ T3912] device bridge162 entered promiscuous mode [ 1134.999577][ T3912] bond239: (slave bridge162): Enslaving as an active interface with an up link [ 1135.049479][ T3915] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1135.073958][ T3915] device bond240 entered promiscuous mode 11:12:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x312, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1135.092433][ T3915] bond240: (slave bridge163): making interface the new active one [ 1135.100726][ T3915] device bridge163 entered promiscuous mode [ 1135.107769][ T3915] bond240: (slave bridge163): Enslaving as an active interface with an up link [ 1135.161813][ T3918] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1135.187802][ T3918] device bond241 entered promiscuous mode 11:12:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x32e, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1135.207730][ T3918] bond241: (slave bridge164): making interface the new active one [ 1135.215677][ T3918] device bridge164 entered promiscuous mode [ 1135.222258][ T3918] bond241: (slave bridge164): Enslaving as an active interface with an up link [ 1135.268353][ T3921] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1135.292645][ T3921] device bond242 entered promiscuous mode 11:12:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x336, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1135.315015][ T3921] bond242: (slave bridge165): making interface the new active one [ 1135.323198][ T3921] device bridge165 entered promiscuous mode [ 1135.330294][ T3921] bond242: (slave bridge165): Enslaving as an active interface with an up link [ 1135.378466][ T3924] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1135.401557][ T3924] device bond243 entered promiscuous mode 11:12:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x35a, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1135.425016][ T3924] bond243: (slave bridge166): making interface the new active one [ 1135.432930][ T3924] device bridge166 entered promiscuous mode [ 1135.441647][ T3924] bond243: (slave bridge166): Enslaving as an active interface with an up link [ 1135.484538][ T3927] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1135.509140][ T3927] device bond244 entered promiscuous mode [ 1135.531449][ T3927] bond244: (slave bridge167): making interface the new active one [ 1135.543212][ T3927] device bridge167 entered promiscuous mode [ 1135.549928][ T3927] bond244: (slave bridge167): Enslaving as an active interface with an up link [ 1136.017707][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801dfed800: rx timeout, send abort [ 1136.026244][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801dfed800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1136.041077][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020d0c800: rx timeout, send abort [ 1136.042676][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801eb6f800: rx timeout, send abort 11:12:36 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r4}, 0x18) (async, rerun: 32) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000080)="7bd3f5d4757a75feb571c9efd0275090340f", 0x12}}, 0x0) (rerun: 32) 11:12:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x35c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x400300}, 0x0) 11:12:36 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x1000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:36 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:36 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x7}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1136.049577][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888020d0c800: 0x01100: (3) A timeout occurred and this is the connection abort to close the session. [ 1136.058114][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801eb6f800: 0x00400: (3) A timeout occurred and this is the connection abort to close the session. [ 1136.086415][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880196d4000: rx timeout, send abort [ 1136.102243][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880196d4000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1136.146836][ T3931] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1136.203348][ T3931] device bond245 entered promiscuous mode [ 1136.219080][ T3942] vcan0: tx drop: invalid da for name 0x0000000001000000 11:12:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x36c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1136.250170][ T3941] bond245: (slave bridge168): making interface the new active one [ 1136.265479][ T3941] device bridge168 entered promiscuous mode [ 1136.272608][ T3941] bond245: (slave bridge168): Enslaving as an active interface with an up link [ 1136.331033][ T3949] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1136.354515][ T3949] device bond246 entered promiscuous mode [ 1136.373609][ T3949] bond246: (slave bridge169): making interface the new active one 11:12:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x38a, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1136.381471][ T3949] device bridge169 entered promiscuous mode [ 1136.389494][ T3949] bond246: (slave bridge169): Enslaving as an active interface with an up link 11:12:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x394, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1136.441499][ T3952] device bond247 entered promiscuous mode [ 1136.467405][ T3952] bond247: (slave bridge170): making interface the new active one [ 1136.475713][ T3952] device bridge170 entered promiscuous mode [ 1136.482368][ T3952] bond247: (slave bridge170): Enslaving as an active interface with an up link 11:12:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x39c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1136.545723][ T3955] device bond248 entered promiscuous mode [ 1136.569600][ T3955] bond248: (slave bridge171): making interface the new active one [ 1136.578437][ T3955] device bridge171 entered promiscuous mode [ 1136.586590][ T3955] bond248: (slave bridge171): Enslaving as an active interface with an up link [ 1136.652275][ T3958] device bond249 entered promiscuous mode [ 1136.678832][ T3958] bond249: (slave bridge172): making interface the new active one [ 1136.686862][ T3958] device bridge172 entered promiscuous mode 11:12:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3ac, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1136.693904][ T3958] bond249: (slave bridge172): Enslaving as an active interface with an up link 11:12:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3b4, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1136.741949][ T3961] device bond250 entered promiscuous mode [ 1136.763364][ T3961] bond250: (slave bridge173): making interface the new active one [ 1136.771849][ T3961] device bridge173 entered promiscuous mode [ 1136.781431][ T3961] bond250: (slave bridge173): Enslaving as an active interface with an up link [ 1136.844313][ T3964] device bond251 entered promiscuous mode [ 1136.860202][ T3964] bond251: (slave bridge174): making interface the new active one [ 1136.870733][ T3964] device bridge174 entered promiscuous mode [ 1136.877602][ T3964] bond251: (slave bridge174): Enslaving as an active interface with an up link [ 1137.432214][ C0] vcan0: j1939_tp_rxtimer: 0xffff888076b44400: rx timeout, send abort [ 1137.440725][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888076b44400: 0x00700: (3) A timeout occurred and this is the connection abort to close the session. [ 1137.464844][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e890000: rx timeout, send abort 11:12:38 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3bc, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) [ 1137.473222][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e890000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1137.487675][ C0] vcan0: j1939_tp_rxtimer: 0xffff888019686400: rx timeout, send abort [ 1137.495977][ C0] vcan0: j1939_tp_rxtimer: 0xffff888019685800: rx timeout, send abort [ 1137.504955][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888019686400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:38 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x2000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1137.519510][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888019685800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:38 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x2}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:38 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x8}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1137.613617][ T3977] vcan0: tx drop: invalid da for name 0x0000000002000000 [ 1137.635103][ T3969] device bond252 entered promiscuous mode [ 1137.652692][ T3979] bond252: (slave bridge175): making interface the new active one 11:12:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3c8, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1137.661211][ T3979] device bridge175 entered promiscuous mode [ 1137.668515][ T3979] bond252: (slave bridge175): Enslaving as an active interface with an up link 11:12:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3d6, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1137.741147][ T3982] device bond253 entered promiscuous mode [ 1137.762018][ T3982] bond253: (slave bridge176): making interface the new active one [ 1137.770089][ T3982] device bridge176 entered promiscuous mode [ 1137.778808][ T3982] bond253: (slave bridge176): Enslaving as an active interface with an up link 11:12:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3da, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1137.842929][ T3985] device bond254 entered promiscuous mode [ 1137.864048][ T3985] bond254: (slave bridge177): making interface the new active one [ 1137.871986][ T3985] device bridge177 entered promiscuous mode [ 1137.879091][ T3985] bond254: (slave bridge177): Enslaving as an active interface with an up link 11:12:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3e4, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1137.948162][ T3988] device bond255 entered promiscuous mode [ 1137.968623][ T3988] bond255: (slave bridge178): making interface the new active one [ 1137.976633][ T3988] device bridge178 entered promiscuous mode [ 1137.983644][ T3988] bond255: (slave bridge178): Enslaving as an active interface with an up link 11:12:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3ea, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1138.040782][ T3991] device bond256 entered promiscuous mode [ 1138.061478][ T3991] bond256: (slave bridge179): making interface the new active one [ 1138.069492][ T3991] device bridge179 entered promiscuous mode [ 1138.076265][ T3991] bond256: (slave bridge179): Enslaving as an active interface with an up link 11:12:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3ec, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1138.134122][ T3994] device bond257 entered promiscuous mode [ 1138.154371][ T3994] bond257: (slave bridge180): making interface the new active one [ 1138.162496][ T3994] device bridge180 entered promiscuous mode [ 1138.169812][ T3994] bond257: (slave bridge180): Enslaving as an active interface with an up link [ 1138.230176][ T3997] device bond258 entered promiscuous mode [ 1138.258519][ T3997] bond258: (slave bridge181): making interface the new active one [ 1138.269793][ T3997] device bridge181 entered promiscuous mode [ 1138.277130][ T3997] bond258: (slave bridge181): Enslaving as an active interface with an up link [ 1138.855403][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020293c00: rx timeout, send abort [ 1138.856570][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e4d3800: rx timeout, send abort [ 1138.863938][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888020293c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1138.872288][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e4d3800: 0x00800: (3) A timeout occurred and this is the connection abort to close the session. 11:12:39 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3f2, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 1138.900858][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ccf9000: rx timeout, send abort [ 1138.901696][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e7ea000: rx timeout, send abort [ 1138.937227][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ccf9000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1138.962706][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e7ea000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:39 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x3000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:39 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x11}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:39 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x3}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1139.011763][ T4002] device bond259 entered promiscuous mode 11:12:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3f4, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1139.058799][ T4009] bond259: (slave bridge182): making interface the new active one [ 1139.063418][ T4015] vcan0: tx drop: invalid da for name 0x0000000003000000 [ 1139.067100][ T4009] device bridge182 entered promiscuous mode [ 1139.082651][ T4009] bond259: (slave bridge182): Enslaving as an active interface with an up link [ 1139.132394][ T4017] validate_nla: 13 callbacks suppressed [ 1139.132408][ T4017] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1139.161759][ T4017] device bond260 entered promiscuous mode 11:12:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3f6, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1139.182853][ T4017] bond260: (slave bridge183): making interface the new active one [ 1139.191148][ T4017] device bridge183 entered promiscuous mode [ 1139.198181][ T4017] bond260: (slave bridge183): Enslaving as an active interface with an up link [ 1139.243031][ T4020] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1139.263013][ T4020] device bond261 entered promiscuous mode [ 1139.280451][ T4020] bond261: (slave bridge184): making interface the new active one 11:12:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3fd, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1139.290569][ T4020] device bridge184 entered promiscuous mode [ 1139.297724][ T4020] bond261: (slave bridge184): Enslaving as an active interface with an up link [ 1139.342787][ T4023] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1139.365354][ T4023] device bond262 entered promiscuous mode [ 1139.382071][ T4023] bond262: (slave bridge185): making interface the new active one 11:12:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x500, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1139.390371][ T4023] device bridge185 entered promiscuous mode [ 1139.397391][ T4023] bond262: (slave bridge185): Enslaving as an active interface with an up link [ 1139.447338][ T4026] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1139.470013][ T4026] device bond263 entered promiscuous mode 11:12:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x600, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1139.491619][ T4026] bond263: (slave bridge186): making interface the new active one [ 1139.500332][ T4026] device bridge186 entered promiscuous mode [ 1139.507229][ T4026] bond263: (slave bridge186): Enslaving as an active interface with an up link [ 1139.559769][ T4029] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1139.589484][ T4029] device bond264 entered promiscuous mode 11:12:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x700, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1139.608346][ T4029] bond264: (slave bridge187): making interface the new active one [ 1139.616435][ T4029] device bridge187 entered promiscuous mode [ 1139.623621][ T4029] bond264: (slave bridge187): Enslaving as an active interface with an up link [ 1139.668166][ T4032] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1139.691468][ T4032] device bond265 entered promiscuous mode [ 1139.712820][ T4032] bond265: (slave bridge188): making interface the new active one [ 1139.720865][ T4032] device bridge188 entered promiscuous mode [ 1139.727722][ T4032] bond265: (slave bridge188): Enslaving as an active interface with an up link 11:12:40 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) 11:12:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x900, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 1140.228369][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e713000: rx timeout, send abort [ 1140.237145][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e713000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1140.285233][ T4037] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1140.293941][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f3ab000: rx timeout, send abort [ 1140.299252][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079e36800: rx timeout, send abort [ 1140.304605][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f3ab000: 0x01100: (3) A timeout occurred and this is the connection abort to close the session. [ 1140.310971][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079e36800: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 1140.351350][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c04a000: rx timeout, send abort [ 1140.360152][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c04a000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:40 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x4000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:40 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:40 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1140.384570][ T4037] device bond266 entered promiscuous mode [ 1140.414186][ T4040] bond266: (slave bridge189): making interface the new active one [ 1140.422322][ T4040] device bridge189 entered promiscuous mode [ 1140.429391][ T4040] bond266: (slave bridge189): Enslaving as an active interface with an up link 11:12:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xa00, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1140.470369][ T4057] vcan0: tx drop: invalid da for name 0x0000000004000000 [ 1140.501571][ T4059] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:12:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xa02, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1140.525940][ T4059] device bond267 entered promiscuous mode [ 1140.542718][ T4059] bond267: (slave bridge190): making interface the new active one [ 1140.550804][ T4059] device bridge190 entered promiscuous mode [ 1140.559268][ T4059] bond267: (slave bridge190): Enslaving as an active interface with an up link [ 1140.602783][ T4062] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1140.627729][ T4062] device bond268 entered promiscuous mode 11:12:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xb94, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1140.648528][ T4062] bond268: (slave bridge191): making interface the new active one [ 1140.656918][ T4062] device bridge191 entered promiscuous mode [ 1140.666289][ T4062] bond268: (slave bridge191): Enslaving as an active interface with an up link [ 1140.709324][ T4065] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1140.734403][ T4065] device bond269 entered promiscuous mode 11:12:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xc00, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1140.752810][ T4065] bond269: (slave bridge192): making interface the new active one [ 1140.761531][ T4065] device bridge192 entered promiscuous mode [ 1140.768639][ T4065] bond269: (slave bridge192): Enslaving as an active interface with an up link 11:12:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xc01, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1140.827488][ T4068] device bond270 entered promiscuous mode [ 1140.845380][ T4068] bond270: (slave bridge193): making interface the new active one [ 1140.853584][ T4068] device bridge193 entered promiscuous mode [ 1140.860304][ T4068] bond270: (slave bridge193): Enslaving as an active interface with an up link 11:12:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xc02, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1140.915319][ T4071] device bond271 entered promiscuous mode [ 1140.932220][ T4071] bond271: (slave bridge194): making interface the new active one [ 1140.940224][ T4071] device bridge194 entered promiscuous mode [ 1140.947401][ T4071] bond271: (slave bridge194): Enslaving as an active interface with an up link [ 1141.010509][ T4074] device bond272 entered promiscuous mode [ 1141.029700][ T4074] bond272: (slave bridge195): making interface the new active one [ 1141.037680][ T4074] device bridge195 entered promiscuous mode [ 1141.048575][ T4074] bond272: (slave bridge195): Enslaving as an active interface with an up link 11:12:42 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f00000001c0)={0x1d, r3, 0x1, {0x1, 0xff, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x8040) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000180)) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000200)={0x1d, r8}, 0x18) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r8}, 0x10, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="05000000010000200001000000000000d89ac5a1188901d4cdadc7ead58c8e1969897d2e3502212f99002dc224fc6ab5f18b9f3235361af812ca78f4050fc7041c128bb7ad09f7b66e641e2480f6d24bf303e19b6a394b574645de2364aa9abc9803ba5434daa6bedb096069a902f906adb90000395bdb5c2876e47f5041b56cffdb2f6f44af81468cc92000fd10f6697807e7ef4b8c9668e55a6fd70450ffe8a2f8a7147bcc01051dfabb030000009029b9c49b229cfb3a0288ddbc9637", @ANYRES64=r9, @ANYRES64=r10/1000+10000, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRESDEC=r9], 0x80}, 0x1, 0x0, 0x0, 0x80c0}, 0x4008000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000140)={0x8, 'bridge_slave_0\x00', {'vlan0\x00'}, 0xb3}) [ 1141.702631][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801d784800: rx timeout, send abort [ 1141.711124][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801d784800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1141.725606][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ddcc400: rx timeout, send abort [ 1141.733907][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880796c6400: rx timeout, send abort [ 1141.742168][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e127400: rx timeout, send abort 11:12:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xc03, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x3000000}, 0x0) 11:12:42 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x7000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1141.750964][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ddcc400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1141.765538][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880796c6400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1141.780020][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e127400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1141.787453][ T4078] vcan0: tx drop: invalid da for name 0x0000000000000002 11:12:42 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x2}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:42 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x8}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1141.846906][ T4080] device bond273 entered promiscuous mode [ 1141.873355][ T4080] bond273: (slave bridge196): making interface the new active one [ 1141.891245][ T4080] device bridge196 entered promiscuous mode 11:12:42 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) connect$can_j1939(r0, &(0x7f00000001c0)={0x1d, r3, 0x1, {0x1, 0xff, 0x1}, 0x2}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x8040) (async, rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) r6 = socket$inet_icmp(0x2, 0x2, 0x1) (async) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000180)) r7 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000200)={0x1d, r8}, 0x18) (async) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r8}, 0x10, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="05000000010000200001000000000000d89ac5a1188901d4cdadc7ead58c8e1969897d2e3502212f99002dc224fc6ab5f18b9f3235361af812ca78f4050fc7041c128bb7ad09f7b66e641e2480f6d24bf303e19b6a394b574645de2364aa9abc9803ba5434daa6bedb096069a902f906adb90000395bdb5c2876e47f5041b56cffdb2f6f44af81468cc92000fd10f6697807e7ef4b8c9668e55a6fd70450ffe8a2f8a7147bcc01051dfabb030000009029b9c49b229cfb3a0288ddbc9637", @ANYRES64=r9, @ANYRES64=r10/1000+10000, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRESDEC=r9], 0x80}, 0x1, 0x0, 0x0, 0x80c0}, 0x4008000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000140)={0x8, 'bridge_slave_0\x00', {'vlan0\x00'}, 0xb3}) 11:12:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xc67, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1141.916679][ T4087] vcan0: tx drop: invalid da for name 0x0000000007000000 [ 1141.919434][ T4080] bond273: (slave bridge196): Enslaving as an active interface with an up link [ 1141.972704][ T4093] vcan0: tx drop: invalid da for name 0x0000000000000002 11:12:42 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) connect$can_j1939(r0, &(0x7f00000001c0)={0x1d, r3, 0x1, {0x1, 0xff, 0x1}, 0x2}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x8040) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) r6 = socket$inet_icmp(0x2, 0x2, 0x1) (async) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000180)) r7 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000200)={0x1d, r8}, 0x18) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r8}, 0x10, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="05000000010000200001000000000000d89ac5a1188901d4cdadc7ead58c8e1969897d2e3502212f99002dc224fc6ab5f18b9f3235361af812ca78f4050fc7041c128bb7ad09f7b66e641e2480f6d24bf303e19b6a394b574645de2364aa9abc9803ba5434daa6bedb096069a902f906adb90000395bdb5c2876e47f5041b56cffdb2f6f44af81468cc92000fd10f6697807e7ef4b8c9668e55a6fd70450ffe8a2f8a7147bcc01051dfabb030000009029b9c49b229cfb3a0288ddbc9637", @ANYRES64=r9, @ANYRES64=r10/1000+10000, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRESDEC=r9], 0x80}, 0x1, 0x0, 0x0, 0x80c0}, 0x4008000) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000140)={0x8, 'bridge_slave_0\x00', {'vlan0\x00'}, 0xb3}) [ 1142.034508][ T4096] device bond274 entered promiscuous mode [ 1142.058304][ T4096] bond274: (slave bridge197): making interface the new active one [ 1142.066385][ T4096] device bridge197 entered promiscuous mode [ 1142.080181][ T4096] bond274: (slave bridge197): Enslaving as an active interface with an up link 11:12:42 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, r5, 0x2, {}, 0x1}, 0x18, &(0x7f0000000280)={&(0x7f0000000180)="11d082915c935d3a85e36cd160d7fd7bffb5375edc419f7b023d6bff5c6c7e3326c7f77dadfc4cc33f8bc1de81d535b6f63b8831bba39542256b3a2225fcb963c2020f2e1c", 0x45}, 0x1, 0x0, 0x0, 0x40000a7}, 0x4000800) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xc68, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xe00, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1142.168563][ T4106] device bond275 entered promiscuous mode [ 1142.186788][ T4106] bond275: (slave bridge198): making interface the new active one [ 1142.195410][ T4106] device bridge198 entered promiscuous mode [ 1142.202082][ T4106] bond275: (slave bridge198): Enslaving as an active interface with an up link 11:12:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xe02, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1142.265976][ T4109] device bond276 entered promiscuous mode [ 1142.282853][ T4109] bond276: (slave bridge199): making interface the new active one [ 1142.291475][ T4109] device bridge199 entered promiscuous mode [ 1142.301020][ T4109] bond276: (slave bridge199): Enslaving as an active interface with an up link 11:12:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1200, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1142.360849][ T4112] device bond277 entered promiscuous mode [ 1142.378439][ T4112] bond277: (slave bridge200): making interface the new active one [ 1142.386873][ T4112] device bridge200 entered promiscuous mode [ 1142.393837][ T4112] bond277: (slave bridge200): Enslaving as an active interface with an up link [ 1142.454245][ T4115] device bond278 entered promiscuous mode [ 1142.471899][ T4115] bond278: (slave bridge201): making interface the new active one [ 1142.479834][ T4115] device bridge201 entered promiscuous mode [ 1142.494258][ T4115] bond278: (slave bridge201): Enslaving as an active interface with an up link 11:12:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 1143.152518][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076de1800: rx timeout, send abort [ 1143.160974][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888076de1800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1143.177374][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801dc1c400: rx timeout, send abort 11:12:43 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x8000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1203, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:43 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x11}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:43 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x3}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1143.193577][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801dc1c400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1143.195995][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806cb17c00: rx timeout, send abort [ 1143.221711][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806cb17c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1143.286275][ T4123] vcan0: tx drop: invalid da for name 0x0000000008000000 [ 1143.312395][ T4122] device bond279 entered promiscuous mode 11:12:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1602, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1143.338835][ T4122] bond279: (slave bridge202): making interface the new active one [ 1143.347178][ T4122] device bridge202 entered promiscuous mode [ 1143.354896][ T4122] bond279: (slave bridge202): Enslaving as an active interface with an up link 11:12:43 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, r5, 0x2, {}, 0x1}, 0x18, &(0x7f0000000280)={&(0x7f0000000180)="11d082915c935d3a85e36cd160d7fd7bffb5375edc419f7b023d6bff5c6c7e3326c7f77dadfc4cc33f8bc1de81d535b6f63b8831bba39542256b3a2225fcb963c2020f2e1c", 0x45}, 0x1, 0x0, 0x0, 0x40000a7}, 0x4000800) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) (async) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, r5, 0x2, {}, 0x1}, 0x18, &(0x7f0000000280)={&(0x7f0000000180)="11d082915c935d3a85e36cd160d7fd7bffb5375edc419f7b023d6bff5c6c7e3326c7f77dadfc4cc33f8bc1de81d535b6f63b8831bba39542256b3a2225fcb963c2020f2e1c", 0x45}, 0x1, 0x0, 0x0, 0x40000a7}, 0x4000800) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) [ 1143.391766][ C1] vcan0: j1939_tp_rxtimer: 0xffff888147ea2c00: rx timeout, send abort [ 1143.400376][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888147ea2c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1143.439490][ T4130] device bond280 entered promiscuous mode [ 1143.470899][ T4130] bond280: (slave bridge203): making interface the new active one [ 1143.478868][ T4130] device bridge203 entered promiscuous mode 11:12:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1e00, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x8000000}, 0x0) [ 1143.486195][ T4130] bond280: (slave bridge203): Enslaving as an active interface with an up link 11:12:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1f00, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1143.558724][ T4139] device bond281 entered promiscuous mode [ 1143.582813][ T4139] bond281: (slave bridge204): making interface the new active one [ 1143.590867][ T4139] device bridge204 entered promiscuous mode [ 1143.597787][ T4139] bond281: (slave bridge204): Enslaving as an active interface with an up link 11:12:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2000, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1143.658705][ T4145] device bond282 entered promiscuous mode [ 1143.679193][ T4145] bond282: (slave bridge205): making interface the new active one [ 1143.687382][ T4145] device bridge205 entered promiscuous mode [ 1143.694644][ T4145] bond282: (slave bridge205): Enslaving as an active interface with an up link [ 1143.750996][ T4148] device bond283 entered promiscuous mode [ 1143.774116][ T4148] bond283: (slave bridge206): making interface the new active one [ 1143.781949][ T4148] device bridge206 entered promiscuous mode 11:12:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2002, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1143.792613][ T4148] bond283: (slave bridge206): Enslaving as an active interface with an up link 11:12:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2200, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1143.858948][ T4151] device bond284 entered promiscuous mode [ 1143.880749][ T4151] bond284: (slave bridge207): making interface the new active one [ 1143.889358][ T4151] device bridge207 entered promiscuous mode [ 1143.896912][ T4151] bond284: (slave bridge207): Enslaving as an active interface with an up link [ 1143.958853][ T4154] device bond285 entered promiscuous mode [ 1143.978167][ T4154] bond285: (slave bridge208): making interface the new active one [ 1143.986741][ T4154] device bridge208 entered promiscuous mode [ 1143.994278][ T4154] bond285: (slave bridge208): Enslaving as an active interface with an up link [ 1144.531811][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c2f5800: rx timeout, send abort [ 1144.540267][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c2f5800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1144.550687][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078483800: rx timeout, send abort [ 1144.563300][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888078483800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2a02, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:45 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x11000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1144.568353][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807db88800: rx timeout, send abort [ 1144.586639][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807db88800: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:45 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xe000000}, 0x0) 11:12:45 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1144.623268][ T4157] validate_nla: 16 callbacks suppressed [ 1144.623287][ T4157] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1144.660530][ T4160] vcan0: tx drop: invalid da for name 0x0000000011000000 [ 1144.693037][ T4157] device bond286 entered promiscuous mode [ 1144.710752][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078f5f000: rx timeout, send abort [ 1144.719293][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078f5f000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1144.719708][ T4164] bond286: (slave bridge209): making interface the new active one 11:12:45 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, r5, 0x2, {}, 0x1}, 0x18, &(0x7f0000000280)={&(0x7f0000000180)="11d082915c935d3a85e36cd160d7fd7bffb5375edc419f7b023d6bff5c6c7e3326c7f77dadfc4cc33f8bc1de81d535b6f63b8831bba39542256b3a2225fcb963c2020f2e1c", 0x45}, 0x1, 0x0, 0x0, 0x40000a7}, 0x4000800) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) (async) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, r5, 0x2, {}, 0x1}, 0x18, &(0x7f0000000280)={&(0x7f0000000180)="11d082915c935d3a85e36cd160d7fd7bffb5375edc419f7b023d6bff5c6c7e3326c7f77dadfc4cc33f8bc1de81d535b6f63b8831bba39542256b3a2225fcb963c2020f2e1c", 0x45}, 0x1, 0x0, 0x0, 0x40000a7}, 0x4000800) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) 11:12:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2d00, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1144.733739][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888023225c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1144.769262][ T4164] device bridge209 entered promiscuous mode [ 1144.780479][ T4164] bond286: (slave bridge209): Enslaving as an active interface with an up link [ 1144.834006][ T4175] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1144.858681][ T4175] device bond287 entered promiscuous mode 11:12:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2e03, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1144.880126][ T4175] bond287: (slave bridge210): making interface the new active one [ 1144.888492][ T4175] device bridge210 entered promiscuous mode [ 1144.895294][ T4175] bond287: (slave bridge210): Enslaving as an active interface with an up link [ 1144.938456][ T4178] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1144.961563][ T4178] device bond288 entered promiscuous mode 11:12:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3402, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1144.984694][ T4178] bond288: (slave bridge211): making interface the new active one [ 1144.992677][ T4178] device bridge211 entered promiscuous mode [ 1145.000013][ T4178] bond288: (slave bridge211): Enslaving as an active interface with an up link [ 1145.042570][ T4181] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1145.070761][ T4181] device bond289 entered promiscuous mode 11:12:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3603, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1145.091749][ T4181] bond289: (slave bridge212): making interface the new active one [ 1145.100039][ T4181] device bridge212 entered promiscuous mode [ 1145.107654][ T4181] bond289: (slave bridge212): Enslaving as an active interface with an up link [ 1145.152321][ T4184] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1145.175051][ T4184] device bond290 entered promiscuous mode 11:12:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3802, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1145.195402][ T4184] bond290: (slave bridge213): making interface the new active one [ 1145.210228][ T4184] device bridge213 entered promiscuous mode [ 1145.218966][ T4184] bond290: (slave bridge213): Enslaving as an active interface with an up link [ 1145.263869][ T4187] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1145.287435][ T4187] device bond291 entered promiscuous mode 11:12:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3a01, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1145.320189][ T4187] bond291: (slave bridge214): making interface the new active one [ 1145.328230][ T4187] device bridge214 entered promiscuous mode [ 1145.335540][ T4187] bond291: (slave bridge214): Enslaving as an active interface with an up link [ 1145.381539][ T4190] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1145.403015][ T4190] device bond292 entered promiscuous mode [ 1145.423198][ T4190] bond292: (slave bridge215): making interface the new active one 11:12:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3c00, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1145.431058][ T4190] device bridge215 entered promiscuous mode [ 1145.437746][ T4190] bond292: (slave bridge215): Enslaving as an active interface with an up link [ 1145.488785][ T4193] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1145.530307][ T4193] device bond293 entered promiscuous mode [ 1145.552826][ T4193] bond293: (slave bridge216): making interface the new active one [ 1145.560935][ T4193] device bridge216 entered promiscuous mode [ 1145.568078][ T4193] bond293: (slave bridge216): Enslaving as an active interface with an up link 11:12:46 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xfdffffff}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1145.909794][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079abf400: rx timeout, send abort [ 1145.918190][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079abf400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1145.945072][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801a34e400: rx timeout, send abort 11:12:46 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) 11:12:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3c02, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1145.953779][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801a34e400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1145.964849][ T4196] vcan0: tx drop: invalid da for name 0x00000000fdffffff [ 1145.968089][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d780000: rx timeout, send abort [ 1145.983651][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801d780000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1146.032571][ T4199] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1146.056651][ T4199] device bond294 entered promiscuous mode [ 1146.067193][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880229da800: rx timeout, send abort [ 1146.075674][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880229da800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1146.090104][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806cbe4400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1146.090554][ T4199] bond294: (slave bridge217): making interface the new active one [ 1146.117490][ T4199] device bridge217 entered promiscuous mode 11:12:46 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000340)={0x1d, r1, 0x3, {0x1, 0x1, 0x4}, 0x2}, 0x18) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00'}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac041410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000300), 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) getpeername$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) sendmsg$can_j1939(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="7114d302cde0f25f10e4081b61a5ac1bc722056eb9ecf94dad43d5ffcac23988d81d0e25ed18b902fb9e530a60213dc7035533b2b26b1a491be87d8aafa5116b3d5b0f8a0c2330fe420c3a5fccbf561407f4f1ab2f4f5ba67b1b164cc94397", 0x5f}, 0x1, 0x0, 0x0, 0x80}, 0x40840) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200), 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440)) 11:12:46 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x7}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1146.124559][ T4199] bond294: (slave bridge217): Enslaving as an active interface with an up link 11:12:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3f00, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1146.189967][ T4207] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1146.202047][ T4207] netlink: 4662 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1146.218180][ T4210] device bond295 entered promiscuous mode 11:12:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4000, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1146.235895][ T4210] bond295: (slave bridge218): making interface the new active one [ 1146.244124][ T4210] device bridge218 entered promiscuous mode [ 1146.250813][ T4210] bond295: (slave bridge218): Enslaving as an active interface with an up link 11:12:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4001, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1146.305187][ T4213] device bond296 entered promiscuous mode [ 1146.324196][ T4213] bond296: (slave bridge219): making interface the new active one [ 1146.332413][ T4213] device bridge219 entered promiscuous mode [ 1146.339537][ T4213] bond296: (slave bridge219): Enslaving as an active interface with an up link 11:12:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4202, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1146.400093][ T4216] device bond297 entered promiscuous mode [ 1146.420438][ T4216] bond297: (slave bridge220): making interface the new active one [ 1146.428912][ T4216] device bridge220 entered promiscuous mode [ 1146.436032][ T4216] bond297: (slave bridge220): Enslaving as an active interface with an up link 11:12:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4800, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1146.502276][ T4219] device bond298 entered promiscuous mode [ 1146.521512][ T4219] bond298: (slave bridge221): making interface the new active one [ 1146.529597][ T4219] device bridge221 entered promiscuous mode [ 1146.536631][ T4219] bond298: (slave bridge221): Enslaving as an active interface with an up link 11:12:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4a00, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1146.594153][ T4222] device bond299 entered promiscuous mode [ 1146.612511][ T4222] bond299: (slave bridge222): making interface the new active one [ 1146.620505][ T4222] device bridge222 entered promiscuous mode [ 1146.627308][ T4222] bond299: (slave bridge222): Enslaving as an active interface with an up link [ 1146.687868][ T4225] device bond300 entered promiscuous mode [ 1146.708573][ T4225] bond300: (slave bridge223): making interface the new active one [ 1146.716554][ T4225] device bridge223 entered promiscuous mode [ 1146.723163][ T4225] bond300: (slave bridge223): Enslaving as an active interface with an up link 11:12:47 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffef0000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1147.214250][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041b5ac00: rx timeout, send abort [ 1147.222552][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888041b5ac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:47 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4a01, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x7b3b0000}, 0x0) [ 1147.271984][ T4228] vcan0: tx drop: invalid da for name 0x00000000ffef0000 [ 1147.293350][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b13b000: rx timeout, send abort [ 1147.303554][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b13b000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1147.370952][ T4232] device bond301 entered promiscuous mode [ 1147.392585][ T4232] bond301: (slave bridge224): making interface the new active one [ 1147.400725][ T4232] device bridge224 entered promiscuous mode [ 1147.407911][ T4232] bond301: (slave bridge224): Enslaving as an active interface with an up link [ 1147.438402][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880738fe800: rx timeout, send abort [ 1147.447015][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880738fd000: rx timeout, send abort [ 1147.455711][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880738fe800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1147.470185][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880738fd000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1147.484605][ C1] vcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff888021f33400: CMD 0xff with PGN 0x40000 for running session with different PGN 0x0f000. [ 1148.521351][ C0] vcan0: j1939_tp_rxtimer: 0xffff888040f1fc00: rx timeout, send abort [ 1148.529774][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888040f1fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1148.615965][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e6cb400: rx timeout, send abort [ 1148.624416][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e6cb400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:49 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000340)={0x1d, r1, 0x3, {0x1, 0x1, 0x4}, 0x2}, 0x18) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00'}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac041410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000300), 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) getpeername$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) sendmsg$can_j1939(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="7114d302cde0f25f10e4081b61a5ac1bc722056eb9ecf94dad43d5ffcac23988d81d0e25ed18b902fb9e530a60213dc7035533b2b26b1a491be87d8aafa5116b3d5b0f8a0c2330fe420c3a5fccbf561407f4f1ab2f4f5ba67b1b164cc94397", 0x5f}, 0x1, 0x0, 0x0, 0x80}, 0x40840) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200), 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440)) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) connect$can_j1939(r2, &(0x7f0000000340)={0x1d, r1, 0x3, {0x1, 0x1, 0x4}, 0x2}, 0x18) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00'}) (async) socket(0x10, 0x3, 0x0) (async) write(r4, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac041410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000300), 0x4) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) getpeername$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) (async) sendmsg$can_j1939(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="7114d302cde0f25f10e4081b61a5ac1bc722056eb9ecf94dad43d5ffcac23988d81d0e25ed18b902fb9e530a60213dc7035533b2b26b1a491be87d8aafa5116b3d5b0f8a0c2330fe420c3a5fccbf561407f4f1ab2f4f5ba67b1b164cc94397", 0x5f}, 0x1, 0x0, 0x0, 0x80}, 0x40840) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200), 0x18) (async) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440)) (async) 11:12:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4c00, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:49 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x8}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x87080000}, 0x0) 11:12:49 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffff0300}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:49 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1148.756698][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021f33400: rx timeout, send abort [ 1148.765032][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021f33400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1148.837030][ T4246] vcan0: tx drop: invalid da for name 0x00000000ffff0300 [ 1148.845289][ T4249] netlink: 4662 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1148.874043][ T4245] device bond302 entered promiscuous mode 11:12:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4e01, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1148.893206][ T4262] bond302: (slave bridge225): making interface the new active one [ 1148.901387][ T4262] device bridge225 entered promiscuous mode [ 1148.908403][ T4262] bond302: (slave bridge225): Enslaving as an active interface with an up link 11:12:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x5800, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1148.971377][ T4265] device bond303 entered promiscuous mode [ 1148.988206][ T4265] bond303: (slave bridge226): making interface the new active one [ 1148.996303][ T4265] device bridge226 entered promiscuous mode [ 1149.002800][ T4265] bond303: (slave bridge226): Enslaving as an active interface with an up link 11:12:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x5802, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1149.055611][ T4268] device bond304 entered promiscuous mode [ 1149.077670][ T4268] bond304: (slave bridge227): making interface the new active one [ 1149.085626][ T4268] device bridge227 entered promiscuous mode [ 1149.092164][ T4268] bond304: (slave bridge227): Enslaving as an active interface with an up link 11:12:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x5865, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1149.149235][ T4271] device bond305 entered promiscuous mode [ 1149.168962][ T4271] bond305: (slave bridge228): making interface the new active one [ 1149.177026][ T4271] device bridge228 entered promiscuous mode [ 1149.187027][ T4271] bond305: (slave bridge228): Enslaving as an active interface with an up link 11:12:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x5a01, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1149.243394][ T4274] device bond306 entered promiscuous mode [ 1149.262236][ T4274] bond306: (slave bridge229): making interface the new active one [ 1149.270533][ T4274] device bridge229 entered promiscuous mode [ 1149.278449][ T4274] bond306: (slave bridge229): Enslaving as an active interface with an up link [ 1149.342785][ T4277] device bond307 entered promiscuous mode [ 1149.368841][ T4277] bond307: (slave bridge230): making interface the new active one [ 1149.380935][ T4277] device bridge230 entered promiscuous mode 11:12:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x5a03, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1149.388829][ T4277] bond307: (slave bridge230): Enslaving as an active interface with an up link [ 1149.447586][ T4280] device bond308 entered promiscuous mode [ 1149.468581][ T4280] bond308: (slave bridge231): making interface the new active one [ 1149.476560][ T4280] device bridge231 entered promiscuous mode [ 1149.483304][ T4280] bond308: (slave bridge231): Enslaving as an active interface with an up link [ 1150.070325][ C0] vcan0: j1939_tp_rxtimer: 0xffff888010e1f800: rx timeout, send abort [ 1150.078860][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888010e1f800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1150.086032][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d764400: rx timeout, send abort [ 1150.093650][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880222dd400: rx timeout, send abort [ 1150.101586][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d764400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1150.110878][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880222dd400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1150.138492][ C0] vcan0: j1939_tp_rxtimer: 0xffff888018c0b000: rx timeout, send abort [ 1150.167808][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888018c0b000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1150.182236][ C0] vcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff888019968400: CMD 0xff with PGN 0x40000 for running session with different PGN 0x0f000. 11:12:51 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000340)={0x1d, r1, 0x3, {0x1, 0x1, 0x4}, 0x2}, 0x18) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00'}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac041410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000300), 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) getpeername$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) sendmsg$can_j1939(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="7114d302cde0f25f10e4081b61a5ac1bc722056eb9ecf94dad43d5ffcac23988d81d0e25ed18b902fb9e530a60213dc7035533b2b26b1a491be87d8aafa5116b3d5b0f8a0c2330fe420c3a5fccbf561407f4f1ab2f4f5ba67b1b164cc94397", 0x5f}, 0x1, 0x0, 0x0, 0x80}, 0x40840) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200), 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440)) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) connect$can_j1939(r2, &(0x7f0000000340)={0x1d, r1, 0x3, {0x1, 0x1, 0x4}, 0x2}, 0x18) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00'}) (async) socket(0x10, 0x3, 0x0) (async) write(r4, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac041410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000300), 0x4) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) getpeername$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) (async) sendmsg$can_j1939(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="7114d302cde0f25f10e4081b61a5ac1bc722056eb9ecf94dad43d5ffcac23988d81d0e25ed18b902fb9e530a60213dc7035533b2b26b1a491be87d8aafa5116b3d5b0f8a0c2330fe420c3a5fccbf561407f4f1ab2f4f5ba67b1b164cc94397", 0x5f}, 0x1, 0x0, 0x0, 0x80}, 0x40840) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200), 0x18) (async) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440)) (async) 11:12:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x5c03, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 11:12:51 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffffff7f}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:51 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x11}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:51 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1151.449872][ C0] vcan0: j1939_tp_rxtimer: 0xffff888019968400: rx timeout, send abort [ 1151.458285][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888019968400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1151.529144][ T4291] vcan0: tx drop: invalid da for name 0x00000000ffffff7f [ 1151.534587][ T4292] validate_nla: 15 callbacks suppressed [ 1151.534605][ T4292] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1151.550228][ T4292] netlink: 4662 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1151.563429][ T4294] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1151.598100][ T4294] device bond309 entered promiscuous mode [ 1151.625490][ T4294] bond309: (slave bridge232): making interface the new active one [ 1151.633852][ T4294] device bridge232 entered promiscuous mode 11:12:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x6000, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1151.641214][ T4294] bond309: (slave bridge232): Enslaving as an active interface with an up link [ 1151.690998][ T4304] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1151.711593][ T4304] device bond310 entered promiscuous mode 11:12:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x6100, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1151.736411][ T4304] bond310: (slave bridge233): making interface the new active one [ 1151.744430][ T4304] device bridge233 entered promiscuous mode [ 1151.750888][ T4304] bond310: (slave bridge233): Enslaving as an active interface with an up link [ 1151.794239][ T4307] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1151.812690][ T4307] device bond311 entered promiscuous mode 11:12:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x6558, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1151.835723][ T4307] bond311: (slave bridge234): making interface the new active one [ 1151.852817][ T4307] device bridge234 entered promiscuous mode [ 1151.859661][ T4307] bond311: (slave bridge234): Enslaving as an active interface with an up link [ 1151.906930][ T4310] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1151.929736][ T4310] device bond312 entered promiscuous mode 11:12:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x670c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1151.961088][ T4310] bond312: (slave bridge235): making interface the new active one [ 1151.969111][ T4310] device bridge235 entered promiscuous mode [ 1151.979760][ T4310] bond312: (slave bridge235): Enslaving as an active interface with an up link [ 1152.032901][ T4313] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1152.056744][ T4313] device bond313 entered promiscuous mode 11:12:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x6800, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1152.080785][ T4313] bond313: (slave bridge236): making interface the new active one [ 1152.088892][ T4313] device bridge236 entered promiscuous mode [ 1152.095730][ T4313] bond313: (slave bridge236): Enslaving as an active interface with an up link [ 1152.139812][ T4316] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1152.162476][ T4316] device bond314 entered promiscuous mode 11:12:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x680c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1152.186057][ T4316] bond314: (slave bridge237): making interface the new active one [ 1152.194428][ T4316] device bridge237 entered promiscuous mode [ 1152.201063][ T4316] bond314: (slave bridge237): Enslaving as an active interface with an up link [ 1152.251708][ T4319] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1152.275028][ T4319] device bond315 entered promiscuous mode [ 1152.294845][ T4319] bond315: (slave bridge238): making interface the new active one [ 1152.303036][ T4319] device bridge238 entered promiscuous mode [ 1152.310930][ T4319] bond315: (slave bridge238): Enslaving as an active interface with an up link [ 1152.778364][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b6e4800: rx timeout, send abort [ 1152.779862][ C1] vcan0: j1939_tp_rxtimer: 0xffff888019d3a000: rx timeout, send abort [ 1152.786800][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804b6e4800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1152.794958][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888019d3a000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1152.823442][ C1] vcan0: j1939_tp_rxtimer: 0xffff888019d3b800: rx timeout, send abort [ 1152.831694][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d1e6c00: rx timeout, send abort [ 1152.849343][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888019d3b800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1152.863830][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d1e6c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1152.878322][ C1] vcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff88807d1e5000: CMD 0xff with PGN 0x40000 for running session with different PGN 0x0f000. [ 1154.142706][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d1e5000: rx timeout, send abort [ 1154.154039][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d1e5000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1154.168443][ C1] vcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff888079bc7000: CMD 0xff with PGN 0x0f000 for running session with different PGN 0x40000. [ 1155.440558][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079bc7000: rx timeout, send abort [ 1155.448976][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079bc7000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1155.463387][ C1] vcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff88807b3e2800: CMD 0xff with PGN 0x40000 for running session with different PGN 0x0f000. 11:12:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xabb2ffff}, 0x0) 11:12:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x6a01, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:57 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xfffffffd}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:57 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:57 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x0, {0x1, 0x1}}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0xa7, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0273f90340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) recvmmsg(r4, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x55}}, {{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/87}, {&(0x7f00000001c0)=""/16}, {&(0x7f0000000300)=""/19}, {&(0x7f0000000340)}, {&(0x7f00000010c0)=""/4089}, {&(0x7f0000000380)=""/237}, {&(0x7f0000000540)=""/59}]}, 0xc5aa}, {{&(0x7f0000000280)=@caif, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/196}]}, 0x21d}, {{&(0x7f0000000740)=@caif=@rfm, 0x0, &(0x7f0000000e80)=[{&(0x7f00000007c0)=""/205}, {&(0x7f00000020c0)=""/4096}, {&(0x7f00000030c0)=""/4096}, {&(0x7f00000008c0)=""/95}, {&(0x7f0000000940)=""/119}, {&(0x7f0000000f40)=""/187}, {&(0x7f0000000a40)=""/38}, {&(0x7f0000000ac0)=""/133}, {&(0x7f0000000480)=""/32}, {&(0x7f00000009c0)=""/100}, {&(0x7f0000000580)=""/45}, {&(0x7f0000000e00)=""/114}], 0x0, &(0x7f0000000c00)=""/83}, 0x7}, {{&(0x7f0000000c80)=@l2, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)=""/133}, 0x8}], 0x3c, 0x10000, 0x0) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r1, 0x1, {0x2, 0xf0}, 0xff}, 0x18) 11:12:57 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x11}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1156.731495][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b3e2800: rx timeout, send abort [ 1156.739833][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b3e2800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1156.788746][ T4328] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1156.809281][ T4327] vcan0: tx drop: invalid da for name 0x00000000fffffffd 11:12:57 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x0, {0x1, 0x1}}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0xa7, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0273f90340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) recvmmsg(r4, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x55}}, {{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/87}, {&(0x7f00000001c0)=""/16}, {&(0x7f0000000300)=""/19}, {&(0x7f0000000340)}, {&(0x7f00000010c0)=""/4089}, {&(0x7f0000000380)=""/237}, {&(0x7f0000000540)=""/59}]}, 0xc5aa}, {{&(0x7f0000000280)=@caif, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/196}]}, 0x21d}, {{&(0x7f0000000740)=@caif=@rfm, 0x0, &(0x7f0000000e80)=[{&(0x7f00000007c0)=""/205}, {&(0x7f00000020c0)=""/4096}, {&(0x7f00000030c0)=""/4096}, {&(0x7f00000008c0)=""/95}, {&(0x7f0000000940)=""/119}, {&(0x7f0000000f40)=""/187}, {&(0x7f0000000a40)=""/38}, {&(0x7f0000000ac0)=""/133}, {&(0x7f0000000480)=""/32}, {&(0x7f00000009c0)=""/100}, {&(0x7f0000000580)=""/45}, {&(0x7f0000000e00)=""/114}], 0x0, &(0x7f0000000c00)=""/83}, 0x7}, {{&(0x7f0000000c80)=@l2, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)=""/133}, 0x8}], 0x3c, 0x10000, 0x0) (async) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r1, 0x1, {0x2, 0xf0}, 0xff}, 0x18) 11:12:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x6c00, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1156.840158][ T4328] device bond316 entered promiscuous mode [ 1156.859914][ T4334] bond316: (slave bridge239): making interface the new active one [ 1156.870052][ T4334] device bridge239 entered promiscuous mode [ 1156.877006][ T4334] bond316: (slave bridge239): Enslaving as an active interface with an up link 11:12:57 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x0, {0x1, 0x1}}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0xa7, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0273f90340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) recvmmsg(r4, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x55}}, {{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/87}, {&(0x7f00000001c0)=""/16}, {&(0x7f0000000300)=""/19}, {&(0x7f0000000340)}, {&(0x7f00000010c0)=""/4089}, {&(0x7f0000000380)=""/237}, {&(0x7f0000000540)=""/59}]}, 0xc5aa}, {{&(0x7f0000000280)=@caif, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/196}]}, 0x21d}, {{&(0x7f0000000740)=@caif=@rfm, 0x0, &(0x7f0000000e80)=[{&(0x7f00000007c0)=""/205}, {&(0x7f00000020c0)=""/4096}, {&(0x7f00000030c0)=""/4096}, {&(0x7f00000008c0)=""/95}, {&(0x7f0000000940)=""/119}, {&(0x7f0000000f40)=""/187}, {&(0x7f0000000a40)=""/38}, {&(0x7f0000000ac0)=""/133}, {&(0x7f0000000480)=""/32}, {&(0x7f00000009c0)=""/100}, {&(0x7f0000000580)=""/45}, {&(0x7f0000000e00)=""/114}], 0x0, &(0x7f0000000c00)=""/83}, 0x7}, {{&(0x7f0000000c80)=@l2, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)=""/133}, 0x8}], 0x3c, 0x10000, 0x0) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r1, 0x1, {0x2, 0xf0}, 0xff}, 0x18) [ 1156.946884][ T4341] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1156.981515][ T4341] device bond317 entered promiscuous mode 11:12:57 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000080)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x6c03, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1157.001020][ T4341] bond317: (slave bridge240): making interface the new active one [ 1157.009068][ T4341] device bridge240 entered promiscuous mode [ 1157.015853][ T4341] bond317: (slave bridge240): Enslaving as an active interface with an up link [ 1157.079804][ T4351] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1157.098860][ T4351] device bond318 entered promiscuous mode 11:12:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7202, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1157.121204][ T4351] bond318: (slave bridge241): making interface the new active one [ 1157.129356][ T4351] device bridge241 entered promiscuous mode [ 1157.138094][ T4351] bond318: (slave bridge241): Enslaving as an active interface with an up link [ 1157.184752][ T4354] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1157.207196][ T4354] device bond319 entered promiscuous mode [ 1157.226340][ T4354] bond319: (slave bridge242): making interface the new active one [ 1157.234317][ T4354] device bridge242 entered promiscuous mode [ 1157.240774][ T4354] bond319: (slave bridge242): Enslaving as an active interface with an up link 11:12:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 11:12:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7400, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1157.641562][ T4357] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1157.667923][ T4357] device bond320 entered promiscuous mode [ 1157.690299][ T4357] bond320: (slave bridge243): making interface the new active one [ 1157.707059][ T4357] device bridge243 entered promiscuous mode [ 1157.717071][ T4357] bond320: (slave bridge243): Enslaving as an active interface with an up link [ 1158.058641][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079e34c00: rx timeout, send abort [ 1158.061632][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880157cf000: rx timeout, send abort [ 1158.067159][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079e34c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1158.077025][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880157cf000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:12:58 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x101eadf2393}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:12:58 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7800, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:12:58 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x17, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1158.103793][ C1] vcan0: j1939_tp_rxtimer: 0xffff888074432000: rx timeout, send abort [ 1158.113282][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888074432000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1158.174048][ T4363] vcan0: tx drop: invalid da for name 0x00000101eadf2393 [ 1158.179029][ T4365] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1158.204917][ T4365] device bond321 entered promiscuous mode 11:12:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7a00, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1158.225097][ T4365] bond321: (slave bridge244): making interface the new active one [ 1158.233513][ T4365] device bridge244 entered promiscuous mode [ 1158.240448][ T4365] bond321: (slave bridge244): Enslaving as an active interface with an up link 11:12:58 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x20000058, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:12:58 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000080)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1158.306718][ T4372] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1158.318943][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880769a6800: rx timeout, send abort [ 1158.327535][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880769a6800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1158.341892][ T4372] device bond322 entered promiscuous mode 11:12:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x8100, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1158.379170][ T4372] bond322: (slave bridge245): making interface the new active one [ 1158.387447][ T4372] device bridge245 entered promiscuous mode [ 1158.394898][ T4372] bond322: (slave bridge245): Enslaving as an active interface with an up link [ 1158.436831][ T4381] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1158.461038][ T4381] device bond323 entered promiscuous mode 11:12:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xe80a0000}, 0x0) 11:12:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x8201, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1158.491228][ T4381] bond323: (slave bridge246): making interface the new active one [ 1158.499273][ T4381] device bridge246 entered promiscuous mode [ 1158.506392][ T4381] bond323: (slave bridge246): Enslaving as an active interface with an up link [ 1158.558077][ T4386] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1158.585599][ T4386] device bond324 entered promiscuous mode 11:12:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x8801, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1158.611235][ T4386] bond324: (slave bridge247): making interface the new active one [ 1158.619598][ T4386] device bridge247 entered promiscuous mode [ 1158.626682][ T4386] bond324: (slave bridge247): Enslaving as an active interface with an up link [ 1158.677494][ T4390] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1158.699155][ T4390] device bond325 entered promiscuous mode 11:12:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x8a03, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1158.730987][ T4390] bond325: (slave bridge248): making interface the new active one [ 1158.739030][ T4390] device bridge248 entered promiscuous mode [ 1158.746412][ T4390] bond325: (slave bridge248): Enslaving as an active interface with an up link [ 1158.806009][ T4393] device bond326 entered promiscuous mode [ 1158.826298][ T4393] bond326: (slave bridge249): making interface the new active one [ 1158.834563][ T4393] device bridge249 entered promiscuous mode [ 1158.841213][ T4393] bond326: (slave bridge249): Enslaving as an active interface with an up link 11:12:59 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x40030000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1159.413715][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079c5dc00: rx timeout, send abort [ 1159.422153][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079c5dc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1159.468320][ T4396] vcan0: tx drop: invalid da for name 0x0040030000000000 [ 1159.502876][ C0] vcan0: j1939_tp_rxtimer: 0xffff888018c00000: rx timeout, send abort 11:13:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x9001, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:00 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:13:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 1159.511220][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888018c00000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:00 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x8}}, 0x0) [ 1159.559795][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f00b400: rx timeout, send abort [ 1159.568193][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f00b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1159.598379][ T4400] device bond327 entered promiscuous mode 11:13:00 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async, rerun: 64) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000080)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:13:00 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6f9}}, 0x0) [ 1159.637607][ T4400] bond327: (slave bridge250): making interface the new active one [ 1159.645299][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075037c00: rx timeout, send abort [ 1159.645800][ T4400] device bridge250 entered promiscuous mode [ 1159.654202][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888075037c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1159.660737][ T4400] bond327: (slave bridge250): Enslaving as an active interface with an up link 11:13:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x9403, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x940b, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1159.785372][ T4414] device bond328 entered promiscuous mode [ 1159.810372][ T4414] bond328: (slave bridge251): making interface the new active one [ 1159.818897][ T4414] device bridge251 entered promiscuous mode [ 1159.825916][ T4414] bond328: (slave bridge251): Enslaving as an active interface with an up link [ 1159.887496][ T4417] device bond329 entered promiscuous mode [ 1159.911210][ T4417] bond329: (slave bridge252): making interface the new active one [ 1159.921805][ T4417] device bridge252 entered promiscuous mode 11:13:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x9c02, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1159.939314][ T4417] bond329: (slave bridge252): Enslaving as an active interface with an up link [ 1160.001025][ T4420] device bond330 entered promiscuous mode [ 1160.029261][ T4420] bond330: (slave bridge253): making interface the new active one [ 1160.038296][ T4420] device bridge253 entered promiscuous mode 11:13:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x9c03, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1160.047912][ T4420] bond330: (slave bridge253): Enslaving as an active interface with an up link 11:13:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xa002, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1160.111823][ T4423] device bond331 entered promiscuous mode [ 1160.132176][ T4423] bond331: (slave bridge254): making interface the new active one [ 1160.140145][ T4423] device bridge254 entered promiscuous mode [ 1160.147434][ T4423] bond331: (slave bridge254): Enslaving as an active interface with an up link [ 1160.207880][ T4426] device bond332 entered promiscuous mode [ 1160.230272][ T4426] bond332: (slave bridge255): making interface the new active one [ 1160.238858][ T4426] device bridge255 entered promiscuous mode [ 1160.245815][ T4426] bond332: (slave bridge255): Enslaving as an active interface with an up link 11:13:01 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xee000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xa089, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1160.717937][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801f167800: rx timeout, send abort [ 1160.726600][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801f167800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1160.779603][ T4431] vcan0: tx drop: invalid da for name 0x00ee000000000000 [ 1160.792903][ T4430] device bond333 entered promiscuous mode [ 1160.814628][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075101c00: rx timeout, send abort 11:13:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xfeffffff}, 0x0) 11:13:01 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:13:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xac03, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1160.815625][ T4430] bond333: (slave bridge256): making interface the new active one [ 1160.822943][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888075101c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1160.831660][ T4430] device bridge256 entered promiscuous mode [ 1160.851953][ T4430] bond333: (slave bridge256): Enslaving as an active interface with an up link [ 1160.929978][ T4438] device bond334 entered promiscuous mode [ 1160.949486][ T4438] bond334: (slave bridge257): making interface the new active one [ 1160.957594][ T4438] device bridge257 entered promiscuous mode [ 1160.965116][ T4438] bond334: (slave bridge257): Enslaving as an active interface with an up link [ 1160.982671][ C1] vcan0: j1939_tp_rxtimer: 0xffff888148446000: rx timeout, send abort [ 1160.991364][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888148446000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1160.995359][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b905800: rx timeout, send abort [ 1161.005754][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cb57400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1161.014106][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b905800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1162.028413][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880730d7c00: rx timeout, send abort [ 1162.036956][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880730d7c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1162.160121][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ba8f800: rx timeout, send abort [ 1162.168579][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ba8f800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1162.301309][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801df6b800: rx timeout, send abort [ 1162.309856][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801df6b800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1162.324251][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e026000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:03 executing program 0: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf2506000000050043000100000008000500050000000a001800030303030303000008000500020000000800050001000000180017800400050004000300810000000400060004000300080017800400040005005300000000001c00e700730465caabb5c3d88307fc850ac82c0197877e27dad07fa002e800ffffbd29fb14e25988d918000303030303030000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000010) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x4a}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x80) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac041410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x65}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}]}, 0x7c}}, 0x20000000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r4}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r6}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r0, 0x3e8d, 0x466, 0x5}) connect$can_j1939(r7, &(0x7f0000000540)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0x2}, 0x18) bind$can_j1939(r0, &(0x7f00000004c0)={0x1d, r6, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000200)={0x1d, r9}, 0x18) sendmsg$can_j1939(r8, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:13:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xae00, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xffff0000}, 0x0) 11:13:03 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:03 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x100000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:03 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1162.764282][ T4446] vcan0: tx drop: invalid da for name 0x0100000000000000 [ 1162.775567][ T4449] validate_nla: 9 callbacks suppressed [ 1162.775585][ T4449] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1162.800136][ T4452] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1162.811255][ T4452] netlink: 4662 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1162.842930][ T4449] device bond335 entered promiscuous mode 11:13:03 executing program 0: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf2506000000050043000100000008000500050000000a001800030303030303000008000500020000000800050001000000180017800400050004000300810000000400060004000300080017800400040005005300000000001c00e700730465caabb5c3d88307fc850ac82c0197877e27dad07fa002e800ffffbd29fb14e25988d918000303030303030000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000010) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x4a}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x80) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac041410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x65}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}]}, 0x7c}}, 0x20000000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r4}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r6}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r0, 0x3e8d, 0x466, 0x5}) connect$can_j1939(r7, &(0x7f0000000540)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0x2}, 0x18) bind$can_j1939(r0, &(0x7f00000004c0)={0x1d, r6, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000200)={0x1d, r9}, 0x18) sendmsg$can_j1939(r8, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf2506000000050043000100000008000500050000000a001800030303030303000008000500020000000800050001000000180017800400050004000300810000000400060004000300080017800400040005005300000000001c00e700730465caabb5c3d88307fc850ac82c0197877e27dad07fa002e800ffffbd29fb14e25988d918000303030303030000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000010) (async) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x4a}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) socket(0x10, 0x3, 0x0) (async) write(r0, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac041410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x65}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}]}, 0x7c}}, 0x20000000) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r4}, 0x18) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r6}, 0x18) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r0, 0x3e8d, 0x466, 0x5}) (async) connect$can_j1939(r7, &(0x7f0000000540)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0x2}, 0x18) (async) bind$can_j1939(r0, &(0x7f00000004c0)={0x1d, r6, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r8, &(0x7f0000000200)={0x1d, r9}, 0x18) (async) sendmsg$can_j1939(r8, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) [ 1162.859119][ T4455] bond335: (slave bridge258): making interface the new active one [ 1162.872957][ T4455] device bridge258 entered promiscuous mode [ 1162.889622][ T4455] bond335: (slave bridge258): Enslaving as an active interface with an up link [ 1162.900548][ T4457] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:13:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xb403, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1162.918299][ T4457] netlink: 4662 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1162.951688][ T4458] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1162.960977][ T4467] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1162.964445][ T4458] netlink: 4662 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1162.993621][ T4467] device bond336 entered promiscuous mode 11:13:03 executing program 0: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf2506000000050043000100000008000500050000000a001800030303030303000008000500020000000800050001000000180017800400050004000300810000000400060004000300080017800400040005005300000000001c00e700730465caabb5c3d88307fc850ac82c0197877e27dad07fa002e800ffffbd29fb14e25988d918000303030303030000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000010) (async) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x4a}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x80) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac041410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x65}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}]}, 0x7c}}, 0x20000000) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r4}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r6}, 0x18) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r0, 0x3e8d, 0x466, 0x5}) connect$can_j1939(r7, &(0x7f0000000540)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0x2}, 0x18) (async) bind$can_j1939(r0, &(0x7f00000004c0)={0x1d, r6, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000200)={0x1d, r9}, 0x18) (async) sendmsg$can_j1939(r8, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:13:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xbc03, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1163.012194][ T4467] bond336: (slave bridge259): making interface the new active one [ 1163.020322][ T4467] device bridge259 entered promiscuous mode [ 1163.027052][ T4467] bond336: (slave bridge259): Enslaving as an active interface with an up link [ 1163.071797][ T4471] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1163.078834][ T4473] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1163.101727][ T4473] netlink: 4662 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1163.109062][ T4471] device bond337 entered promiscuous mode 11:13:03 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x1d, 0x0, 0x2, {0x0, 0x1, 0x3}, 0x2}, 0x18) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r5, 0x2, {0x0, 0xf0, 0x4}, 0xff}, 0x18) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x0, {0x0, 0x1, 0x2}}, 0x18) socketpair(0x29, 0x6, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0xff, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000200)={0x1d, r8}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) recvmmsg(r7, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) 11:13:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xc803, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1163.130590][ T4471] bond337: (slave bridge260): making interface the new active one [ 1163.138547][ T4471] device bridge260 entered promiscuous mode [ 1163.145227][ T4471] bond337: (slave bridge260): Enslaving as an active interface with an up link [ 1163.202273][ T4480] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1163.227009][ T4480] device bond338 entered promiscuous mode 11:13:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xcc00, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1163.246253][ T4480] bond338: (slave bridge261): making interface the new active one [ 1163.254789][ T4480] device bridge261 entered promiscuous mode [ 1163.261518][ T4480] bond338: (slave bridge261): Enslaving as an active interface with an up link [ 1163.324488][ T4484] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1163.348328][ T4484] device bond339 entered promiscuous mode 11:13:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xcc01, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1163.369713][ T4484] bond339: (slave bridge262): making interface the new active one [ 1163.379078][ T4484] device bridge262 entered promiscuous mode [ 1163.386432][ T4484] bond339: (slave bridge262): Enslaving as an active interface with an up link [ 1163.433753][ T4487] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1163.456538][ T4487] device bond340 entered promiscuous mode [ 1163.479226][ T4487] bond340: (slave bridge263): making interface the new active one [ 1163.487399][ T4487] device bridge263 entered promiscuous mode [ 1163.495965][ T4487] bond340: (slave bridge263): Enslaving as an active interface with an up link 11:13:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xffffb2ab}, 0x0) 11:13:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xd200, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1163.642237][ T4490] device bond341 entered promiscuous mode [ 1163.662799][ T4490] bond341: (slave bridge264): making interface the new active one [ 1163.671863][ T4490] device bridge264 entered promiscuous mode [ 1163.678727][ T4490] bond341: (slave bridge264): Enslaving as an active interface with an up link 11:13:04 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x200000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1164.010737][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801d4c0000: rx timeout, send abort [ 1164.019209][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801d4c0000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1164.046578][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c62c400: rx timeout, send abort 11:13:04 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:13:04 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x20000249}}, 0x0) 11:13:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xd400, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1164.055078][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c62c400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:04 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x7ffff000}}, 0x0) [ 1164.109312][ T4496] vcan0: tx drop: invalid da for name 0x0200000000000000 11:13:04 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0xfffffdef}}, 0x0) [ 1164.169065][ T4499] device bond342 entered promiscuous mode [ 1164.188459][ T4506] bond342: (slave bridge265): making interface the new active one [ 1164.196957][ T4506] device bridge265 entered promiscuous mode [ 1164.203890][ T4506] bond342: (slave bridge265): Enslaving as an active interface with an up link 11:13:04 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x1d, 0x0, 0x2, {0x0, 0x1, 0x3}, 0x2}, 0x18) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r5, 0x2, {0x0, 0xf0, 0x4}, 0xff}, 0x18) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x0, {0x0, 0x1, 0x2}}, 0x18) socketpair(0x29, 0x6, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0xff, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000200)={0x1d, r8}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) recvmmsg(r7, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x1d, 0x0, 0x2, {0x0, 0x1, 0x3}, 0x2}, 0x18) (async) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r5, 0x2, {0x0, 0xf0, 0x4}, 0xff}, 0x18) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x0, {0x0, 0x1, 0x2}}, 0x18) (async) socketpair(0x29, 0x6, 0x3, &(0x7f0000000080)) (async) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0xff, 0x2}, 0xfd}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r7, &(0x7f0000000200)={0x1d, r8}, 0x18) (async) sendmsg$can_j1939(r7, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) recvmmsg(r7, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) (async) setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) (async) 11:13:04 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x7}, 0x0) 11:13:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xd602, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1164.439908][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880790d1400: rx timeout, send abort [ 1164.448358][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880790d1400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 1164.538922][ T4512] device bond343 entered promiscuous mode [ 1164.559159][ T4512] bond343: (slave bridge266): making interface the new active one [ 1164.569933][ T4512] device bridge266 entered promiscuous mode 11:13:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xd603, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1164.581597][ T4512] bond343: (slave bridge266): Enslaving as an active interface with an up link [ 1164.585799][ T4521] vcan0: tx drop: invalid sa for name 0x0000000000000002 11:13:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xd900, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1164.660535][ T4527] device bond344 entered promiscuous mode [ 1164.677889][ T4527] bond344: (slave bridge267): making interface the new active one [ 1164.691573][ T4527] device bridge267 entered promiscuous mode [ 1164.698459][ T4527] bond344: (slave bridge267): Enslaving as an active interface with an up link [ 1164.770424][ T4530] device bond345 entered promiscuous mode [ 1164.789998][ T4530] bond345: (slave bridge268): making interface the new active one [ 1164.800143][ T4530] device bridge268 entered promiscuous mode [ 1164.807096][ T4530] bond345: (slave bridge268): Enslaving as an active interface with an up link [ 1165.354238][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802431b000: rx timeout, send abort [ 1165.362647][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802431b000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1165.383186][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801a34e400: rx timeout, send abort 11:13:05 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x300000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:05 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x11}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:13:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xda02, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 1165.393413][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801a34e400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1165.474927][ T4540] vcan0: tx drop: invalid da for name 0x0300000000000000 [ 1165.485785][ T4534] device bond346 entered promiscuous mode [ 1165.505987][ T4534] bond346: (slave bridge269): making interface the new active one [ 1165.514296][ T4534] device bridge269 entered promiscuous mode 11:13:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xda03, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1165.521593][ T4534] bond346: (slave bridge269): Enslaving as an active interface with an up link 11:13:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xde01, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1165.583268][ T4543] device bond347 entered promiscuous mode [ 1165.604948][ T4543] bond347: (slave bridge270): making interface the new active one [ 1165.612807][ T4543] device bridge270 entered promiscuous mode [ 1165.619555][ T4543] bond347: (slave bridge270): Enslaving as an active interface with an up link [ 1165.682655][ T4546] device bond348 entered promiscuous mode [ 1165.702518][ T4546] bond348: (slave bridge271): making interface the new active one [ 1165.710627][ T4546] device bridge271 entered promiscuous mode [ 1165.717466][ T4546] bond348: (slave bridge271): Enslaving as an active interface with an up link [ 1165.753235][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806dc68c00: rx timeout, send abort [ 1165.761665][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806dc68c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1165.793646][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c4f6800: rx timeout, send abort 11:13:06 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async, rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x1d, 0x0, 0x2, {0x0, 0x1, 0x3}, 0x2}, 0x18) (async) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r5, 0x2, {0x0, 0xf0, 0x4}, 0xff}, 0x18) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x0, {0x0, 0x1, 0x2}}, 0x18) (async) socketpair(0x29, 0x6, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0xff, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000200)={0x1d, r8}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) recvmmsg(r7, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) (async) setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) 11:13:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xe403, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:06 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x8}, 0x0) 11:13:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) [ 1166.301884][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c4f6800: abort rx timeout. Force session deactivation [ 1166.368917][ T4552] device bond349 entered promiscuous mode [ 1166.391889][ T4552] bond349: (slave bridge272): making interface the new active one [ 1166.400507][ T4552] device bridge272 entered promiscuous mode 11:13:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xea01, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1166.411263][ T4552] bond349: (slave bridge272): Enslaving as an active interface with an up link 11:13:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xea03, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1166.474964][ T4562] device bond350 entered promiscuous mode [ 1166.493727][ T4562] bond350: (slave bridge273): making interface the new active one [ 1166.506217][ T4562] device bridge273 entered promiscuous mode [ 1166.513591][ T4562] bond350: (slave bridge273): Enslaving as an active interface with an up link [ 1166.575325][ T4565] device bond351 entered promiscuous mode [ 1166.589938][ T4565] bond351: (slave bridge274): making interface the new active one [ 1166.599253][ T4565] device bridge274 entered promiscuous mode [ 1166.606245][ T4565] bond351: (slave bridge274): Enslaving as an active interface with an up link [ 1166.717788][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076d73000: rx timeout, send abort [ 1166.726290][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888076d73000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1166.740846][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076d70000: rx timeout, send abort 11:13:07 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x400000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xec01, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:07 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x17, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1166.763297][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888076d70000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:07 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x20000058, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1166.846910][ T4568] device bond352 entered promiscuous mode [ 1166.850361][ T4573] vcan0: tx drop: invalid da for name 0x0400000000000000 [ 1166.886900][ T4568] bond352: (slave bridge275): making interface the new active one 11:13:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xec03, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1166.896666][ T4568] device bridge275 entered promiscuous mode [ 1166.903548][ T4568] bond352: (slave bridge275): Enslaving as an active interface with an up link 11:13:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xf000, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1166.968863][ T4577] device bond353 entered promiscuous mode [ 1166.990635][ T4577] bond353: (slave bridge276): making interface the new active one [ 1167.000970][ T4577] device bridge276 entered promiscuous mode [ 1167.009155][ T4577] bond353: (slave bridge276): Enslaving as an active interface with an up link [ 1167.085132][ T4580] device bond354 entered promiscuous mode [ 1167.107207][ T4580] bond354: (slave bridge277): making interface the new active one [ 1167.117113][ T4580] device bridge277 entered promiscuous mode [ 1167.124309][ T4580] bond354: (slave bridge277): Enslaving as an active interface with an up link 11:13:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xf200, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:08 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, 0x0, 0x1, {0x2, 0x1, 0x2}, 0xfd}, 0x18, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x20008040) 11:13:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 11:13:08 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0xf}, 0x0) [ 1167.579763][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880773f4000: rx timeout, send abort [ 1167.588179][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880773f4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1167.605422][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e7adc00: rx timeout, send abort [ 1167.613837][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e7adc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1167.698912][ T4586] device bond355 entered promiscuous mode [ 1167.726338][ T4586] bond355: (slave bridge278): making interface the new active one [ 1167.734424][ T4586] device bridge278 entered promiscuous mode 11:13:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xf203, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1167.740977][ T4586] bond355: (slave bridge278): Enslaving as an active interface with an up link [ 1167.784959][ T4593] validate_nla: 15 callbacks suppressed [ 1167.784978][ T4593] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1167.818075][ T4593] device bond356 entered promiscuous mode 11:13:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xf403, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1167.838711][ T4593] bond356: (slave bridge279): making interface the new active one [ 1167.850950][ T4593] device bridge279 entered promiscuous mode [ 1167.857730][ T4593] bond356: (slave bridge279): Enslaving as an active interface with an up link [ 1167.903666][ T4596] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1167.927459][ T4596] device bond357 entered promiscuous mode [ 1167.948625][ T4596] bond357: (slave bridge280): making interface the new active one [ 1167.956765][ T4596] device bridge280 entered promiscuous mode [ 1167.963570][ T4596] bond357: (slave bridge280): Enslaving as an active interface with an up link 11:13:08 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x700000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xf603, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1168.098113][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa7c800: rx timeout, send abort [ 1168.106677][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807aa7c800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1168.131596][ C0] vcan0: j1939_tp_rxtimer: 0xffff888018ded800: rx timeout, send abort 11:13:08 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd027509034ff", 0x9}}, 0x0) [ 1168.148013][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888018ded800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1168.176486][ T4599] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1168.193568][ T4601] vcan0: tx drop: invalid da for name 0x0700000000000000 11:13:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfd03, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1168.229241][ T4599] device bond358 entered promiscuous mode [ 1168.244960][ T4605] bond358: (slave bridge281): making interface the new active one [ 1168.252923][ T4605] device bridge281 entered promiscuous mode [ 1168.260268][ T4605] bond358: (slave bridge281): Enslaving as an active interface with an up link [ 1168.310993][ T4607] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1168.342705][ T4607] device bond359 entered promiscuous mode 11:13:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfeff, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1168.360365][ T4607] bond359: (slave bridge282): making interface the new active one [ 1168.375109][ T4607] device bridge282 entered promiscuous mode [ 1168.381749][ T4607] bond359: (slave bridge282): Enslaving as an active interface with an up link [ 1168.432137][ T4610] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1168.454651][ T4610] device bond360 entered promiscuous mode [ 1168.472648][ T4610] bond360: (slave bridge283): making interface the new active one 11:13:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xfffffffe}, 0x0) 11:13:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xff0f, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1168.480647][ T4610] device bridge283 entered promiscuous mode [ 1168.487680][ T4610] bond360: (slave bridge283): Enslaving as an active interface with an up link [ 1168.552053][ T4615] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1168.580315][ T4615] device bond361 entered promiscuous mode [ 1168.601386][ T4615] bond361: (slave bridge284): making interface the new active one [ 1168.609421][ T4615] device bridge284 entered promiscuous mode [ 1168.617490][ T4615] bond361: (slave bridge284): Enslaving as an active interface with an up link 11:13:09 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async, rerun: 64) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async, rerun: 64) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, 0x0, 0x1, {0x2, 0x1, 0x2}, 0xfd}, 0x18, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x20008040) 11:13:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xff7f, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:09 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0xffffff1f}, 0x0) [ 1168.930794][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a5da800: rx timeout, send abort [ 1168.939194][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a5da800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1168.953665][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cee5000: rx timeout, send abort [ 1168.962133][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cee5000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1169.004588][ T4619] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1169.036710][ T4619] device bond362 entered promiscuous mode 11:13:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfffe, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:09 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x2}, 0x0) [ 1169.056140][ T4619] bond362: (slave bridge285): making interface the new active one [ 1169.064197][ T4619] device bridge285 entered promiscuous mode [ 1169.070985][ T4619] bond362: (slave bridge285): Enslaving as an active interface with an up link [ 1169.131905][ T4630] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1169.157976][ T4630] device bond363 entered promiscuous mode [ 1169.180371][ T4630] bond363: (slave bridge286): making interface the new active one [ 1169.188424][ T4630] device bridge286 entered promiscuous mode [ 1169.195587][ T4630] bond363: (slave bridge286): Enslaving as an active interface with an up link 11:13:09 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x800000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3ffff, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1169.439665][ C0] vcan0: j1939_tp_rxtimer: 0xffff888010e1f800: rx timeout, send abort [ 1169.448088][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888010e1f800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1169.478038][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021e7c800: rx timeout, send abort 11:13:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x8}}, 0x0) 11:13:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1, 0x0, 0x0, 0xffffffff}, 0x0) [ 1169.495958][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888021e7c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1169.513704][ T4634] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1169.521051][ T4635] vcan0: tx drop: invalid da for name 0x0800000000000000 11:13:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6f9}}, 0x0) [ 1169.568408][ T4634] device bond364 entered promiscuous mode [ 1169.594639][ T4640] bond364: (slave bridge287): making interface the new active one [ 1169.602502][ T4640] device bridge287 entered promiscuous mode 11:13:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x40000, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1169.621582][ T4640] bond364: (slave bridge287): Enslaving as an active interface with an up link [ 1169.675636][ T4646] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1169.696557][ T4646] device bond365 entered promiscuous mode [ 1169.715059][ T4646] bond365: (slave bridge288): making interface the new active one 11:13:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7a6, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1169.723255][ T4646] device bridge288 entered promiscuous mode [ 1169.729858][ T4646] bond365: (slave bridge288): Enslaving as an active interface with an up link [ 1169.789042][ T4649] device bond366 entered promiscuous mode [ 1169.810820][ T4649] bond366: (slave bridge289): making interface the new active one [ 1169.819043][ T4649] device bridge289 entered promiscuous mode [ 1169.826288][ T4649] bond366: (slave bridge289): Enslaving as an active interface with an up link 11:13:10 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, 0x0, 0x1, {0x2, 0x1, 0x2}, 0xfd}, 0x18, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x20008040) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, 0x0, 0x1, {0x2, 0x1, 0x2}, 0xfd}, 0x18, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x20008040) (async) 11:13:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7a7, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1170.284769][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806d625800: rx timeout, send abort [ 1170.293230][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806d625800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1170.362066][ T4652] device bond367 entered promiscuous mode [ 1170.381118][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075148000: rx timeout, send abort [ 1170.382303][ T4652] bond367: (slave bridge290): making interface the new active one [ 1170.390846][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888075148000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:10 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x3}, 0x0) 11:13:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x2) 11:13:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7a8, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1170.398281][ T4652] device bridge290 entered promiscuous mode [ 1170.420762][ T4652] bond367: (slave bridge290): Enslaving as an active interface with an up link [ 1170.502146][ T4665] device bond368 entered promiscuous mode [ 1170.521642][ T4665] bond368: (slave bridge291): making interface the new active one [ 1170.532385][ T4665] device bridge291 entered promiscuous mode [ 1170.542614][ T4665] bond368: (slave bridge291): Enslaving as an active interface with an up link 11:13:11 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x1100000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7a9, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1170.762229][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078b0c000: rx timeout, send abort [ 1170.770745][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078b0c000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1170.831951][ T4672] vcan0: tx drop: invalid da for name 0x1100000000000000 [ 1170.832845][ T4669] device bond369 entered promiscuous mode [ 1170.861582][ T4669] bond369: (slave bridge292): making interface the new active one [ 1170.870026][ T4669] device bridge292 entered promiscuous mode 11:13:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7aa, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:11 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1170.882132][ T4669] bond369: (slave bridge292): Enslaving as an active interface with an up link [ 1170.891626][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806d65c800: rx timeout, send abort [ 1170.900215][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806d65c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7ab, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1170.961642][ T4674] device bond370 entered promiscuous mode [ 1170.985255][ T4674] bond370: (slave bridge293): making interface the new active one [ 1170.995660][ T4674] device bridge293 entered promiscuous mode [ 1171.002348][ T4674] bond370: (slave bridge293): Enslaving as an active interface with an up link 11:13:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7ac, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1171.061351][ T4679] device bond371 entered promiscuous mode [ 1171.084501][ T4679] bond371: (slave bridge294): making interface the new active one [ 1171.092332][ T4679] device bridge294 entered promiscuous mode [ 1171.100832][ T4679] bond371: (slave bridge294): Enslaving as an active interface with an up link [ 1171.169524][ T4682] device bond372 entered promiscuous mode [ 1171.190685][ T4682] bond372: (slave bridge295): making interface the new active one [ 1171.199603][ T4682] device bridge295 entered promiscuous mode 11:13:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7ad, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1171.211402][ T4682] bond372: (slave bridge295): Enslaving as an active interface with an up link [ 1171.272108][ T4685] device bond373 entered promiscuous mode [ 1171.298315][ T4685] bond373: (slave bridge296): making interface the new active one [ 1171.306529][ T4685] device bridge296 entered promiscuous mode [ 1171.314225][ T4685] bond373: (slave bridge296): Enslaving as an active interface with an up link 11:13:12 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="9918a61dc64abb925114eaf0cab4313775d259d6a970b8f77174af649c537a88aebcc27a9b814e81e4b81fa12e86fbee7f106c8d63c9f323cc5430e147f6fb3f5b3d55592e4442df51c72d989316b86b6a83c7c0d596fefd1a33079d5c30ac6ad4e7abc64c45cd9bb5a0c2eb4e64425e6973a7d6aa4fd0bcf634a20af42a75d9e551af2c9fb3d5e16e924718744a3ffb360702960682a7d039456f", 0x9b}, 0x1, 0x0, 0x0, 0xc272a4e2030b139e}, 0x1) 11:13:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x3) [ 1171.600088][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804197f800: rx timeout, send abort [ 1171.608527][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804197f800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1171.622867][ C0] vcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff88807d13c000: CMD 0xff with PGN 0x40000 for running session with different PGN 0x00000. 11:13:12 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x4}, 0x0) 11:13:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7ae, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1171.726105][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807305fc00: rx timeout, send abort [ 1171.734590][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807305fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:12 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x20000249}}, 0x0) [ 1171.820953][ T4693] device bond374 entered promiscuous mode [ 1171.850981][ T4699] bond374: (slave bridge297): making interface the new active one [ 1171.859617][ T4699] device bridge297 entered promiscuous mode [ 1171.866955][ T4699] bond374: (slave bridge297): Enslaving as an active interface with an up link 11:13:12 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x9323dfea01010000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:12 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x7ffff000}}, 0x0) 11:13:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7af, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1172.080927][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880743f7c00: rx timeout, send abort [ 1172.089301][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880743f7c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:12 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0xfffffdef}}, 0x0) [ 1172.151693][ T4702] device bond375 entered promiscuous mode [ 1172.170675][ T4706] vcan0: tx drop: invalid da for name 0x9323dfea01010000 [ 1172.174631][ T4702] bond375: (slave bridge298): making interface the new active one [ 1172.185857][ T4702] device bridge298 entered promiscuous mode [ 1172.192629][ T4702] bond375: (slave bridge298): Enslaving as an active interface with an up link 11:13:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7b0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:12 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x8}, 0x0) 11:13:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7b1, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1172.287819][ T4710] device bond376 entered promiscuous mode [ 1172.312014][ T4710] bond376: (slave bridge299): making interface the new active one [ 1172.320521][ T4710] device bridge299 entered promiscuous mode [ 1172.328781][ T4710] bond376: (slave bridge299): Enslaving as an active interface with an up link [ 1172.387605][ T4715] device bond377 entered promiscuous mode [ 1172.410304][ T4715] bond377: (slave bridge300): making interface the new active one [ 1172.418530][ T4715] device bridge300 entered promiscuous mode [ 1172.426047][ T4715] bond377: (slave bridge300): Enslaving as an active interface with an up link 11:13:13 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async, rerun: 64) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="9918a61dc64abb925114eaf0cab4313775d259d6a970b8f77174af649c537a88aebcc27a9b814e81e4b81fa12e86fbee7f106c8d63c9f323cc5430e147f6fb3f5b3d55592e4442df51c72d989316b86b6a83c7c0d596fefd1a33079d5c30ac6ad4e7abc64c45cd9bb5a0c2eb4e64425e6973a7d6aa4fd0bcf634a20af42a75d9e551af2c9fb3d5e16e924718744a3ffb360702960682a7d039456f", 0x9b}, 0x1, 0x0, 0x0, 0xc272a4e2030b139e}, 0x1) (rerun: 64) 11:13:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7b2, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1172.931886][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802711e400: rx timeout, send abort [ 1172.940347][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802711e400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1172.992703][ T4719] validate_nla: 12 callbacks suppressed [ 1172.992723][ T4719] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1173.028194][ T4719] device bond378 entered promiscuous mode [ 1173.051877][ T4719] bond378: (slave bridge301): making interface the new active one [ 1173.059993][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807af40000: rx timeout, send abort [ 1173.068558][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807af40000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:13 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x8}, 0x0) 11:13:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x4) 11:13:13 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="9918a61dc64abb925114eaf0cab4313775d259d6a970b8f77174af649c537a88aebcc27a9b814e81e4b81fa12e86fbee7f106c8d63c9f323cc5430e147f6fb3f5b3d55592e4442df51c72d989316b86b6a83c7c0d596fefd1a33079d5c30ac6ad4e7abc64c45cd9bb5a0c2eb4e64425e6973a7d6aa4fd0bcf634a20af42a75d9e551af2c9fb3d5e16e924718744a3ffb360702960682a7d039456f", 0x9b}, 0x1, 0x0, 0x0, 0xc272a4e2030b139e}, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="9918a61dc64abb925114eaf0cab4313775d259d6a970b8f77174af649c537a88aebcc27a9b814e81e4b81fa12e86fbee7f106c8d63c9f323cc5430e147f6fb3f5b3d55592e4442df51c72d989316b86b6a83c7c0d596fefd1a33079d5c30ac6ad4e7abc64c45cd9bb5a0c2eb4e64425e6973a7d6aa4fd0bcf634a20af42a75d9e551af2c9fb3d5e16e924718744a3ffb360702960682a7d039456f", 0x9b}, 0x1, 0x0, 0x0, 0xc272a4e2030b139e}, 0x1) (async) [ 1173.103269][ T4719] device bridge301 entered promiscuous mode [ 1173.145939][ T4719] bond378: (slave bridge301): Enslaving as an active interface with an up link 11:13:13 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xfdffffff00000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7b3, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1173.418474][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801dbb6000: rx timeout, send abort [ 1173.426973][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801dbb6000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1173.471091][ T4739] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1173.497270][ T4739] device bond379 entered promiscuous mode [ 1173.502534][ T4742] vcan0: tx drop: invalid da for name 0xfdffffff00000000 11:13:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7b4, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:14 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0xf}, 0x0) [ 1173.516065][ T4739] bond379: (slave bridge302): making interface the new active one [ 1173.524056][ T4739] device bridge302 entered promiscuous mode [ 1173.531435][ T4739] bond379: (slave bridge302): Enslaving as an active interface with an up link [ 1173.548183][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801bb96800: rx timeout, send abort [ 1173.556822][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801bb96800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1173.612490][ T4744] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1173.638086][ T4744] device bond380 entered promiscuous mode 11:13:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7b5, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1173.658389][ T4744] bond380: (slave bridge303): making interface the new active one [ 1173.666371][ T4744] device bridge303 entered promiscuous mode [ 1173.672963][ T4744] bond380: (slave bridge303): Enslaving as an active interface with an up link [ 1173.715521][ T4749] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1173.736611][ T4749] device bond381 entered promiscuous mode [ 1173.757810][ T4749] bond381: (slave bridge304): making interface the new active one 11:13:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7b6, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1173.769369][ T4749] device bridge304 entered promiscuous mode [ 1173.779577][ T4749] bond381: (slave bridge304): Enslaving as an active interface with an up link [ 1173.823947][ T4752] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1173.847513][ T4752] device bond382 entered promiscuous mode 11:13:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7b7, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1173.869199][ T4752] bond382: (slave bridge305): making interface the new active one [ 1173.877275][ T4752] device bridge305 entered promiscuous mode [ 1173.884057][ T4752] bond382: (slave bridge305): Enslaving as an active interface with an up link 11:13:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x8) [ 1173.931447][ T4755] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1173.955121][ T4755] device bond383 entered promiscuous mode 11:13:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7b8, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1173.989932][ T4755] bond383: (slave bridge306): making interface the new active one [ 1173.997972][ T4755] device bridge306 entered promiscuous mode [ 1174.005743][ T4755] bond383: (slave bridge306): Enslaving as an active interface with an up link [ 1174.058422][ T4761] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1174.083346][ T4761] device bond384 entered promiscuous mode [ 1174.104767][ T4761] bond384: (slave bridge307): making interface the new active one [ 1174.112789][ T4761] device bridge307 entered promiscuous mode [ 1174.120461][ T4761] bond384: (slave bridge307): Enslaving as an active interface with an up link [ 1174.393857][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079bc2000: rx timeout, send abort [ 1174.402191][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079bc2000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1174.416616][ C0] vcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff88807f264400: CMD 0xff with PGN 0x40000 for running session with different PGN 0x00000. [ 1174.429975][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801db90c00: rx timeout, send abort 11:13:14 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x11}, 0x0) 11:13:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7b9, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:14 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000140)="7bddefd0275090120fed31859d6678c6b18b53d71cfdb5d24549d74eaf0ca42b7f8113b0e3bf38edc0964511d69936d052b02e876e3594b558a7126e8f0c9416d86bc36a692ae088dc1f39863d24ac61255fb0db9853cc0b5f21a0346e691bcf3e4f83abffc0ff5e", 0x68}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1174.438594][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801db90c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1174.481720][ T4764] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1174.511773][ T4764] device bond385 entered promiscuous mode [ 1174.539876][ T4764] bond385: (slave bridge308): making interface the new active one [ 1174.548377][ T4764] device bridge308 entered promiscuous mode [ 1174.556171][ T4764] bond385: (slave bridge308): Enslaving as an active interface with an up link 11:13:15 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffef000000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7ba, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1174.749923][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027534c00: rx timeout, send abort [ 1174.758337][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027534c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0xe) [ 1174.808095][ T4772] vcan0: tx drop: invalid da for name 0xffef000000000000 [ 1174.825084][ T4773] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:13:15 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0xffffff1f}, 0x0) [ 1174.862662][ T4773] device bond386 entered promiscuous mode [ 1174.865353][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077c5f800: rx timeout, send abort [ 1174.877208][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888077c5f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1174.881396][ T4773] bond386: (slave bridge309): making interface the new active one [ 1174.899841][ T4773] device bridge309 entered promiscuous mode [ 1174.906828][ T4773] bond386: (slave bridge309): Enslaving as an active interface with an up link 11:13:15 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x2}, 0x0) 11:13:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7bb, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1174.988653][ T4783] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1175.012070][ T4783] device bond387 entered promiscuous mode [ 1175.031013][ T4783] bond387: (slave bridge310): making interface the new active one 11:13:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7bc, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1175.039068][ T4783] device bridge310 entered promiscuous mode [ 1175.045947][ T4783] bond387: (slave bridge310): Enslaving as an active interface with an up link [ 1175.106410][ T4786] device bond388 entered promiscuous mode [ 1175.131348][ T4786] bond388: (slave bridge311): making interface the new active one [ 1175.140059][ T4786] device bridge311 entered promiscuous mode 11:13:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7bd, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1175.148600][ T4786] bond388: (slave bridge311): Enslaving as an active interface with an up link [ 1175.210180][ T4789] device bond389 entered promiscuous mode [ 1175.232075][ T4789] bond389: (slave bridge312): making interface the new active one [ 1175.240325][ T4789] device bridge312 entered promiscuous mode 11:13:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7be, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1175.251961][ T4789] bond389: (slave bridge312): Enslaving as an active interface with an up link [ 1175.317194][ T4792] device bond390 entered promiscuous mode [ 1175.340704][ T4792] bond390: (slave bridge313): making interface the new active one [ 1175.348904][ T4792] device bridge313 entered promiscuous mode [ 1175.361251][ T4792] bond390: (slave bridge313): Enslaving as an active interface with an up link 11:13:16 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0xee}, 0x0) 11:13:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7bf, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x60) [ 1175.787828][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806dccb400: rx timeout, send abort [ 1175.796379][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806dccb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1175.810821][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e7ed400: rx timeout, send abort [ 1175.819224][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e7ed400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1175.880181][ T4795] device bond391 entered promiscuous mode [ 1175.901229][ T4795] bond391: (slave bridge314): making interface the new active one [ 1175.912612][ T4795] device bridge314 entered promiscuous mode [ 1175.919834][ T4795] bond391: (slave bridge314): Enslaving as an active interface with an up link 11:13:16 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffff030000000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:16 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000140)="7bddefd0275090120fed31859d6678c6b18b53d71cfdb5d24549d74eaf0ca42b7f8113b0e3bf38edc0964511d69936d052b02e876e3594b558a7126e8f0c9416d86bc36a692ae088dc1f39863d24ac61255fb0db9853cc0b5f21a0346e691bcf3e4f83abffc0ff5e", 0x68}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async, rerun: 32) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (rerun: 32) 11:13:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7c0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1176.057227][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021edd400: rx timeout, send abort [ 1176.065648][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021edd400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1176.130509][ T4809] vcan0: tx drop: invalid da for name 0xffff030000000000 [ 1176.145341][ T4804] device bond392 entered promiscuous mode [ 1176.167361][ T4804] bond392: (slave bridge315): making interface the new active one 11:13:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7c1, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1176.175890][ T4804] device bridge315 entered promiscuous mode [ 1176.182596][ T4804] bond392: (slave bridge315): Enslaving as an active interface with an up link 11:13:16 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x3}, 0x0) [ 1176.228391][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806d643000: rx timeout, send abort [ 1176.236934][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806d643000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1176.243982][ T4811] device bond393 entered promiscuous mode 11:13:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7c2, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1176.285893][ T4811] bond393: (slave bridge316): making interface the new active one [ 1176.297144][ T4811] device bridge316 entered promiscuous mode [ 1176.304357][ T4811] bond393: (slave bridge316): Enslaving as an active interface with an up link 11:13:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7c3, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1176.368590][ T4816] device bond394 entered promiscuous mode [ 1176.391558][ T4816] bond394: (slave bridge317): making interface the new active one [ 1176.399956][ T4816] device bridge317 entered promiscuous mode [ 1176.407248][ T4816] bond394: (slave bridge317): Enslaving as an active interface with an up link 11:13:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7c4, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1176.465302][ T4819] device bond395 entered promiscuous mode [ 1176.486366][ T4819] bond395: (slave bridge318): making interface the new active one [ 1176.494676][ T4819] device bridge318 entered promiscuous mode [ 1176.502456][ T4819] bond395: (slave bridge318): Enslaving as an active interface with an up link [ 1176.566899][ T4822] device bond396 entered promiscuous mode [ 1176.591733][ T4822] bond396: (slave bridge319): making interface the new active one [ 1176.601851][ T4822] device bridge319 entered promiscuous mode 11:13:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7c5, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1176.609183][ T4822] bond396: (slave bridge319): Enslaving as an active interface with an up link [ 1176.665423][ T4825] device bond397 entered promiscuous mode [ 1176.688391][ T4825] bond397: (slave bridge320): making interface the new active one [ 1176.697390][ T4825] device bridge320 entered promiscuous mode [ 1176.706579][ T4825] bond397: (slave bridge320): Enslaving as an active interface with an up link [ 1177.046894][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 11:13:17 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x300}, 0x0) 11:13:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7c6, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0xf0) [ 1177.168888][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801d378400: rx timeout, send abort [ 1177.177365][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801d378400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1177.243597][ T4830] device bond398 entered promiscuous mode [ 1177.261380][ T4830] bond398: (slave bridge321): making interface the new active one [ 1177.275706][ T4830] device bridge321 entered promiscuous mode [ 1177.282829][ T4830] bond398: (slave bridge321): Enslaving as an active interface with an up link 11:13:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7c7, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:17 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffffff7f00000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:17 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000140)="7bddefd0275090120fed31859d6678c6b18b53d71cfdb5d24549d74eaf0ca42b7f8113b0e3bf38edc0964511d69936d052b02e876e3594b558a7126e8f0c9416d86bc36a692ae088dc1f39863d24ac61255fb0db9853cc0b5f21a0346e691bcf3e4f83abffc0ff5e", 0x68}}, 0x0) (async, rerun: 64) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1177.370666][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880229bd000: rx timeout, send abort [ 1177.379148][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880229bd000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1177.394964][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079f82400: rx timeout, send abort [ 1177.403502][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079f82400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1177.472361][ T4839] vcan0: tx drop: invalid da for name 0xffffff7f00000000 [ 1177.498862][ T4837] device bond399 entered promiscuous mode 11:13:18 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x4}, 0x0) 11:13:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7c8, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1177.520478][ T4837] bond399: (slave bridge322): making interface the new active one [ 1177.529592][ T4837] device bridge322 entered promiscuous mode [ 1177.536618][ T4837] bond399: (slave bridge322): Enslaving as an active interface with an up link [ 1177.546806][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801de45400: rx timeout, send abort [ 1177.555365][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801de45400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7c9, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1177.640884][ T4847] device bond400 entered promiscuous mode [ 1177.660627][ T4847] bond400: (slave bridge323): making interface the new active one [ 1177.668917][ T4847] device bridge323 entered promiscuous mode [ 1177.677576][ T4847] bond400: (slave bridge323): Enslaving as an active interface with an up link 11:13:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7ca, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1177.738131][ T4851] device bond401 entered promiscuous mode [ 1177.760532][ T4851] bond401: (slave bridge324): making interface the new active one [ 1177.768846][ T4851] device bridge324 entered promiscuous mode [ 1177.776194][ T4851] bond401: (slave bridge324): Enslaving as an active interface with an up link [ 1177.839875][ T4854] device bond402 entered promiscuous mode [ 1177.862324][ T4854] bond402: (slave bridge325): making interface the new active one [ 1177.875444][ T4854] device bridge325 entered promiscuous mode 11:13:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7cb, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1177.882133][ T4854] bond402: (slave bridge325): Enslaving as an active interface with an up link [ 1177.980870][ T4857] device bond403 entered promiscuous mode [ 1177.999773][ T4857] bond403: (slave bridge326): making interface the new active one [ 1178.014320][ T4857] device bridge326 entered promiscuous mode 11:13:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7cc, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1178.026416][ T4857] bond403: (slave bridge326): Enslaving as an active interface with an up link [ 1178.076152][ T4860] validate_nla: 16 callbacks suppressed [ 1178.076171][ T4860] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1178.105637][ T4860] device bond404 entered promiscuous mode [ 1178.126375][ T4860] bond404: (slave bridge327): making interface the new active one [ 1178.134868][ T4860] device bridge327 entered promiscuous mode [ 1178.141994][ T4860] bond404: (slave bridge327): Enslaving as an active interface with an up link 11:13:19 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x1100}, 0x0) 11:13:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x300) 11:13:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7cd, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1178.487871][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e8a8400: rx timeout, send abort [ 1178.496424][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e8a8400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1178.552112][ T4866] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1178.579931][ T4866] device bond405 entered promiscuous mode 11:13:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7ce, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1178.596199][ T4866] bond405: (slave bridge328): making interface the new active one [ 1178.611577][ T4866] device bridge328 entered promiscuous mode [ 1178.618446][ T4866] bond405: (slave bridge328): Enslaving as an active interface with an up link [ 1178.667209][ T4871] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1178.690285][ T4871] device bond406 entered promiscuous mode [ 1178.712639][ T4871] bond406: (slave bridge329): making interface the new active one [ 1178.720914][ T4871] device bridge329 entered promiscuous mode [ 1178.721748][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801eb9f400: rx timeout, send abort [ 1178.737375][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801eb9f400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1178.738196][ T4871] bond406: (slave bridge329): Enslaving as an active interface with an up link 11:13:19 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xffffffff00000000}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1178.751843][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801eb9dc00: rx timeout, send abort [ 1178.753121][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801eb9dc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1178.783756][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880773ce800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1178.841939][ T4874] vcan0: tx drop: invalid da for name 0xffffffff00000000 [ 1178.878469][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027774800: rx timeout, send abort [ 1178.887087][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027774800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1179.810630][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079855000: rx timeout, send abort [ 1179.819217][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079855000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1180.069639][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880773cd400: rx timeout, send abort [ 1180.078016][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880773cd400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1180.090969][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023370000: rx timeout, send abort [ 1180.092430][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880185a4c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1180.100705][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023370000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:20 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) recvmmsg(r2, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000080)=0x5, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:13:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7cf, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:20 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x7}, 0x0) 11:13:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x887) 11:13:20 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0xee00}, 0x0) 11:13:20 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1180.488973][ T4881] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1180.514454][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f261000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 11:13:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7d0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1180.534361][ T4881] device bond407 entered promiscuous mode [ 1180.553353][ T4888] bond407: (slave bridge330): making interface the new active one [ 1180.561381][ T4888] device bridge330 entered promiscuous mode [ 1180.573945][ T4888] bond407: (slave bridge330): Enslaving as an active interface with an up link [ 1180.620897][ T4891] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1180.646649][ T4891] device bond408 entered promiscuous mode 11:13:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7d1, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1180.666635][ T4891] bond408: (slave bridge331): making interface the new active one [ 1180.674724][ T4891] device bridge331 entered promiscuous mode [ 1180.681281][ T4891] bond408: (slave bridge331): Enslaving as an active interface with an up link [ 1180.727891][ T4894] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1180.752051][ T4894] device bond409 entered promiscuous mode 11:13:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7d2, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1180.774658][ T4894] bond409: (slave bridge332): making interface the new active one [ 1180.782683][ T4894] device bridge332 entered promiscuous mode [ 1180.789622][ T4894] bond409: (slave bridge332): Enslaving as an active interface with an up link [ 1180.837661][ T4899] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1180.861630][ T4899] device bond410 entered promiscuous mode [ 1180.879800][ T4899] bond410: (slave bridge333): making interface the new active one 11:13:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7d3, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1180.887868][ T4899] device bridge333 entered promiscuous mode [ 1180.897358][ T4899] bond410: (slave bridge333): Enslaving as an active interface with an up link [ 1180.941499][ T4902] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1180.966196][ T4902] device bond411 entered promiscuous mode 11:13:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7d4, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1180.989068][ T4902] bond411: (slave bridge334): making interface the new active one [ 1181.002149][ T4902] device bridge334 entered promiscuous mode [ 1181.010528][ T4902] bond411: (slave bridge334): Enslaving as an active interface with an up link [ 1181.061542][ T4905] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1181.086125][ T4905] device bond412 entered promiscuous mode 11:13:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7d5, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1181.108038][ T4905] bond412: (slave bridge335): making interface the new active one [ 1181.116383][ T4905] device bridge335 entered promiscuous mode [ 1181.123395][ T4905] bond412: (slave bridge335): Enslaving as an active interface with an up link [ 1181.169979][ T4908] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1181.196907][ T4908] device bond413 entered promiscuous mode [ 1181.228820][ T4908] bond413: (slave bridge336): making interface the new active one [ 1181.239538][ T4908] device bridge336 entered promiscuous mode [ 1181.249151][ T4908] bond413: (slave bridge336): Enslaving as an active interface with an up link [ 1181.736393][ C1] vcan0: j1939_tp_rxtimer: 0xffff888018d8f800: rx timeout, send abort [ 1181.744914][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888018d8f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1181.763359][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f261c00: rx timeout, send abort [ 1181.770059][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806dcf1400: rx timeout, send abort 11:13:22 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) recvmmsg(r2, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) (async) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000080)=0x5, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:13:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7d6, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0xae8) 11:13:22 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x8}, 0x0) [ 1181.779553][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f261c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1181.785193][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806dcf1400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1181.810012][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c4f7800: rx timeout, send abort 11:13:22 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0xefff}, 0x0) 11:13:22 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1181.864916][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c4f7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1181.892940][ T4914] device bond414 entered promiscuous mode 11:13:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7d7, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1181.942718][ T4923] bond414: (slave bridge337): making interface the new active one [ 1181.950776][ T4923] device bridge337 entered promiscuous mode [ 1181.957696][ T4923] bond414: (slave bridge337): Enslaving as an active interface with an up link 11:13:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7d8, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1182.021494][ T4927] device bond415 entered promiscuous mode [ 1182.041450][ T4927] bond415: (slave bridge338): making interface the new active one [ 1182.053381][ T4927] device bridge338 entered promiscuous mode [ 1182.059969][ T4927] bond415: (slave bridge338): Enslaving as an active interface with an up link [ 1182.121396][ T4930] device bond416 entered promiscuous mode [ 1182.146469][ T4930] bond416: (slave bridge339): making interface the new active one [ 1182.156771][ T4930] device bridge339 entered promiscuous mode 11:13:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7d9, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1182.164888][ T4930] bond416: (slave bridge339): Enslaving as an active interface with an up link [ 1182.226689][ T4933] device bond417 entered promiscuous mode [ 1182.255152][ T4933] bond417: (slave bridge340): making interface the new active one [ 1182.270123][ T4933] device bridge340 entered promiscuous mode 11:13:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7da, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1182.278499][ T4933] bond417: (slave bridge340): Enslaving as an active interface with an up link 11:13:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7db, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1182.344882][ T4936] device bond418 entered promiscuous mode [ 1182.361852][ T4936] bond418: (slave bridge341): making interface the new active one [ 1182.370042][ T4936] device bridge341 entered promiscuous mode [ 1182.380215][ T4936] bond418: (slave bridge341): Enslaving as an active interface with an up link [ 1182.446876][ T4939] device bond419 entered promiscuous mode [ 1182.470608][ T4939] bond419: (slave bridge342): making interface the new active one [ 1182.485821][ T4939] device bridge342 entered promiscuous mode 11:13:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7dc, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1182.492501][ T4939] bond419: (slave bridge342): Enslaving as an active interface with an up link [ 1182.556106][ T4942] device bond420 entered promiscuous mode [ 1182.579691][ T4942] bond420: (slave bridge343): making interface the new active one [ 1182.588129][ T4942] device bridge343 entered promiscuous mode [ 1182.598146][ T4942] bond420: (slave bridge343): Enslaving as an active interface with an up link [ 1183.114312][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e12ec00: rx timeout, send abort [ 1183.123711][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e12ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1183.138208][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c4f6800: rx timeout, send abort [ 1183.147107][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c4f6800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:23 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) recvmmsg(r2, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000080)=0x5, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) recvmmsg(r2, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) (async) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000080)=0x5, 0x4) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) 11:13:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7dd, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0xe00) 11:13:23 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x11}, 0x0) [ 1183.178252][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806d5c5000: rx timeout, send abort [ 1183.190115][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806d5c5000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1183.204616][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801d4c3c00: rx timeout, send abort 11:13:23 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0xffef}, 0x0) [ 1183.228082][ T4946] validate_nla: 7 callbacks suppressed [ 1183.228101][ T4946] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1183.256511][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801d4c3c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:23 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x3}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1183.320691][ T4946] device bond421 entered promiscuous mode [ 1183.348822][ T4963] bond421: (slave bridge344): making interface the new active one [ 1183.363278][ T4963] device bridge344 entered promiscuous mode 11:13:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7de, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1183.380536][ T4963] bond421: (slave bridge344): Enslaving as an active interface with an up link [ 1183.431617][ T4969] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1183.455429][ T4969] device bond422 entered promiscuous mode 11:13:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7df, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1183.477163][ T4969] bond422: (slave bridge345): making interface the new active one [ 1183.485172][ T4969] device bridge345 entered promiscuous mode [ 1183.491710][ T4969] bond422: (slave bridge345): Enslaving as an active interface with an up link [ 1183.539528][ T4972] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1183.564971][ T4972] device bond423 entered promiscuous mode 11:13:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7e0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1183.582615][ T4972] bond423: (slave bridge346): making interface the new active one [ 1183.591588][ T4972] device bridge346 entered promiscuous mode [ 1183.599112][ T4972] bond423: (slave bridge346): Enslaving as an active interface with an up link [ 1183.648336][ T4975] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1183.670224][ T4975] device bond424 entered promiscuous mode 11:13:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7e1, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1183.701530][ T4975] bond424: (slave bridge347): making interface the new active one [ 1183.714701][ T4975] device bridge347 entered promiscuous mode [ 1183.721366][ T4975] bond424: (slave bridge347): Enslaving as an active interface with an up link [ 1183.771659][ T4978] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1183.791549][ T4978] device bond425 entered promiscuous mode 11:13:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7e2, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1183.820437][ T4978] bond425: (slave bridge348): making interface the new active one [ 1183.828654][ T4978] device bridge348 entered promiscuous mode [ 1183.842735][ T4978] bond425: (slave bridge348): Enslaving as an active interface with an up link [ 1183.891406][ T4981] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1183.915731][ T4981] device bond426 entered promiscuous mode 11:13:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7e3, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1183.939375][ T4981] bond426: (slave bridge349): making interface the new active one [ 1183.950558][ T4981] device bridge349 entered promiscuous mode [ 1183.959253][ T4981] bond426: (slave bridge349): Enslaving as an active interface with an up link [ 1184.005001][ T4984] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1184.029253][ T4984] device bond427 entered promiscuous mode [ 1184.048827][ T4984] bond427: (slave bridge350): making interface the new active one [ 1184.057036][ T4984] device bridge350 entered promiscuous mode [ 1184.063733][ T4984] bond427: (slave bridge350): Enslaving as an active interface with an up link 11:13:25 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000500)={0x0, 'ip6gre0\x00', {0x3}, 0x20}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x1}, 0xfd}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r2}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x2f, 0x5, 0x4, 0x7, 0x0, @empty, @mcast2, 0x80, 0x80, 0x8, 0xf}}) sendmsg$can_raw(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, r5}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=@canfd={{0x0, 0x1, 0x1}, 0x19, 0x2, 0x0, 0x0, "af1383bc71bd3269e4099874a74303c6a0101808e94c439a0031529e40e77a43b733237aad30355887a745d19c7c21a857bca641f1ed7d3ecb4060dd07273d22"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000200)={0x1d, r7}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(r6, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'sit0\x00', r5, 0x29, 0x3f, 0x5, 0x800, 0x4, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x8, 0x4, 0x6}}) bind$can_j1939(r6, &(0x7f00000004c0)={0x1d, r8, 0x3, {0x1, 0xff, 0x4}, 0xff}, 0x18) 11:13:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0xec0) 11:13:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7e4, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1184.488754][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f5fd800: rx timeout, send abort [ 1184.497187][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f5fd800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1184.511709][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f69ec00: rx timeout, send abort [ 1184.523612][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f69ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:25 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0xee}, 0x0) 11:13:25 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x34000}, 0x0) [ 1184.575783][ T4991] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1184.590103][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c969000: rx timeout, send abort [ 1184.600656][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c969000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1184.615315][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c48a800: rx timeout, send abort 11:13:25 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1184.645543][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c48a800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1184.663382][ T4991] device bond428 entered promiscuous mode 11:13:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7e5, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1184.719661][ T4997] bond428: (slave bridge351): making interface the new active one [ 1184.731953][ T4997] device bridge351 entered promiscuous mode [ 1184.740978][ T4997] bond428: (slave bridge351): Enslaving as an active interface with an up link [ 1184.788180][ T5003] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1184.812678][ T5003] device bond429 entered promiscuous mode 11:13:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7e6, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1184.842007][ T5003] bond429: (slave bridge352): making interface the new active one [ 1184.853560][ T5003] device bridge352 entered promiscuous mode [ 1184.860573][ T5003] bond429: (slave bridge352): Enslaving as an active interface with an up link [ 1184.910974][ T5006] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1184.937368][ T5006] device bond430 entered promiscuous mode 11:13:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7e7, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1184.960214][ T5006] bond430: (slave bridge353): making interface the new active one [ 1184.973547][ T5006] device bridge353 entered promiscuous mode [ 1184.980237][ T5006] bond430: (slave bridge353): Enslaving as an active interface with an up link [ 1185.047513][ T5009] device bond431 entered promiscuous mode [ 1185.072468][ T5009] bond431: (slave bridge354): making interface the new active one [ 1185.083163][ T5009] device bridge354 entered promiscuous mode 11:13:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7e8, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1185.089971][ T5009] bond431: (slave bridge354): Enslaving as an active interface with an up link [ 1185.161752][ T5012] device bond432 entered promiscuous mode [ 1185.187527][ T5012] bond432: (slave bridge355): making interface the new active one [ 1185.195775][ T5012] device bridge355 entered promiscuous mode 11:13:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7e9, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1185.204283][ T5012] bond432: (slave bridge355): Enslaving as an active interface with an up link 11:13:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7ea, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1185.262929][ T5015] device bond433 entered promiscuous mode [ 1185.282433][ T5015] bond433: (slave bridge356): making interface the new active one [ 1185.290688][ T5015] device bridge356 entered promiscuous mode [ 1185.297919][ T5015] bond433: (slave bridge356): Enslaving as an active interface with an up link [ 1185.357304][ T5018] device bond434 entered promiscuous mode [ 1185.378018][ T5018] bond434: (slave bridge357): making interface the new active one [ 1185.386058][ T5018] device bridge357 entered promiscuous mode [ 1185.392776][ T5018] bond434: (slave bridge357): Enslaving as an active interface with an up link [ 1185.816526][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880284d3c00: rx timeout, send abort [ 1185.825136][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880284d3c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1185.839705][ C1] vcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff888075036000: CMD 0xff with PGN 0x40000 for running session with different PGN 0x00000. [ 1185.853176][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807eb98c00: rx timeout, send abort [ 1185.861422][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801c0f1c00: rx timeout, send abort [ 1185.870098][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807eb98c00: 0x10100: (3) A timeout occurred and this is the connection abort to close the session. [ 1185.884526][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801c0f1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:26 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000500)={0x0, 'ip6gre0\x00', {0x3}, 0x20}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x1}, 0xfd}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r2}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x2f, 0x5, 0x4, 0x7, 0x0, @empty, @mcast2, 0x80, 0x80, 0x8, 0xf}}) sendmsg$can_raw(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, r5}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=@canfd={{0x0, 0x1, 0x1}, 0x19, 0x2, 0x0, 0x0, "af1383bc71bd3269e4099874a74303c6a0101808e94c439a0031529e40e77a43b733237aad30355887a745d19c7c21a857bca641f1ed7d3ecb4060dd07273d22"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000200)={0x1d, r7}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(r6, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'sit0\x00', r5, 0x29, 0x3f, 0x5, 0x800, 0x4, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x8, 0x4, 0x6}}) bind$can_j1939(r6, &(0x7f00000004c0)={0x1d, r8, 0x3, {0x1, 0xff, 0x4}, 0xff}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000500)={0x0, 'ip6gre0\x00', {0x3}, 0x20}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1}, 0x10) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x1}, 0xfd}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r2}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x2f, 0x5, 0x4, 0x7, 0x0, @empty, @mcast2, 0x80, 0x80, 0x8, 0xf}}) (async) sendmsg$can_raw(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, r5}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=@canfd={{0x0, 0x1, 0x1}, 0x19, 0x2, 0x0, 0x0, "af1383bc71bd3269e4099874a74303c6a0101808e94c439a0031529e40e77a43b733237aad30355887a745d19c7c21a857bca641f1ed7d3ecb4060dd07273d22"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r6, &(0x7f0000000200)={0x1d, r7}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) recvmmsg(r6, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'sit0\x00', r5, 0x29, 0x3f, 0x5, 0x800, 0x4, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x8, 0x4, 0x6}}) (async) bind$can_j1939(r6, &(0x7f00000004c0)={0x1d, r8, 0x3, {0x1, 0xff, 0x4}, 0xff}, 0x18) (async) 11:13:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x3b7b) 11:13:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7eb, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:26 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x300}, 0x0) 11:13:26 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x3ffff}, 0x0) [ 1185.929356][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e4e4000: rx timeout, send abort [ 1185.937846][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e4e4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:26 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x7}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1185.998517][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076f1ec00: rx timeout, send abort [ 1186.009367][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888076f1ec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1186.038571][ T5025] device bond435 entered promiscuous mode 11:13:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7ec, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1186.082228][ T5032] bond435: (slave bridge358): making interface the new active one [ 1186.091221][ T5032] device bridge358 entered promiscuous mode [ 1186.098379][ T5032] bond435: (slave bridge358): Enslaving as an active interface with an up link [ 1186.163298][ T5045] device bond436 entered promiscuous mode [ 1186.184851][ T5045] bond436: (slave bridge359): making interface the new active one [ 1186.192700][ T5045] device bridge359 entered promiscuous mode 11:13:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7ed, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1186.206912][ T5045] bond436: (slave bridge359): Enslaving as an active interface with an up link 11:13:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7ee, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1186.271424][ T5048] device bond437 entered promiscuous mode [ 1186.292464][ T5048] bond437: (slave bridge360): making interface the new active one [ 1186.300871][ T5048] device bridge360 entered promiscuous mode [ 1186.307772][ T5048] bond437: (slave bridge360): Enslaving as an active interface with an up link [ 1186.372350][ T5051] device bond438 entered promiscuous mode [ 1186.400205][ T5051] bond438: (slave bridge361): making interface the new active one [ 1186.410594][ T5051] device bridge361 entered promiscuous mode 11:13:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7ef, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1186.422924][ T5051] bond438: (slave bridge361): Enslaving as an active interface with an up link 11:13:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7f0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1186.488126][ T5054] device bond439 entered promiscuous mode [ 1186.512168][ T5054] bond439: (slave bridge362): making interface the new active one [ 1186.520323][ T5054] device bridge362 entered promiscuous mode [ 1186.527244][ T5054] bond439: (slave bridge362): Enslaving as an active interface with an up link [ 1186.590559][ T5057] device bond440 entered promiscuous mode [ 1186.612551][ T5057] bond440: (slave bridge363): making interface the new active one [ 1186.621862][ T5057] device bridge363 entered promiscuous mode 11:13:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7f1, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1186.634102][ T5057] bond440: (slave bridge363): Enslaving as an active interface with an up link [ 1186.689338][ T5060] device bond441 entered promiscuous mode [ 1186.707025][ T5060] bond441: (slave bridge364): making interface the new active one [ 1186.715148][ T5060] device bridge364 entered promiscuous mode [ 1186.721736][ T5060] bond441: (slave bridge364): Enslaving as an active interface with an up link [ 1187.242237][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077d47c00: rx timeout, send abort [ 1187.250762][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888077d47c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1187.265357][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077d47400: rx timeout, send abort [ 1187.273635][ C0] vcan0: j1939_tp_rxtimer: 0xffff888076f68000: rx timeout, send abort [ 1187.282490][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888077d47400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1187.296929][ C0] vcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff8880792a0800: CMD 0xff with PGN 0x40000 for running session with different PGN 0x00000. [ 1187.310731][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888076f68000: 0x10100: (3) A timeout occurred and this is the connection abort to close the session. [ 1187.319704][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801a376800: rx timeout, send abort [ 1187.325813][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075d75800: rx timeout, send abort 11:13:27 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000500)={0x0, 'ip6gre0\x00', {0x3}, 0x20}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1}, 0x10) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x1}, 0xfd}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r2}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x2f, 0x5, 0x4, 0x7, 0x0, @empty, @mcast2, 0x80, 0x80, 0x8, 0xf}}) sendmsg$can_raw(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, r5}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=@canfd={{0x0, 0x1, 0x1}, 0x19, 0x2, 0x0, 0x0, "af1383bc71bd3269e4099874a74303c6a0101808e94c439a0031529e40e77a43b733237aad30355887a745d19c7c21a857bca641f1ed7d3ecb4060dd07273d22"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000200)={0x1d, r7}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) recvmmsg(r6, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'sit0\x00', r5, 0x29, 0x3f, 0x5, 0x800, 0x4, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x8, 0x4, 0x6}}) bind$can_j1939(r6, &(0x7f00000004c0)={0x1d, r8, 0x3, {0x1, 0xff, 0x4}, 0xff}, 0x18) 11:13:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7f2, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x6000) 11:13:27 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x700}, 0x0) 11:13:27 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x400300}, 0x0) 11:13:27 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x8}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1187.333539][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801a376800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1187.345162][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888075d75800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1187.464270][ T5064] device bond442 entered promiscuous mode [ 1187.489434][ T5064] bond442: (slave bridge365): making interface the new active one [ 1187.500677][ T5064] device bridge365 entered promiscuous mode 11:13:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7f3, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1187.515132][ T5064] bond442: (slave bridge365): Enslaving as an active interface with an up link [ 1187.579510][ T5080] device bond443 entered promiscuous mode [ 1187.607642][ T5080] bond443: (slave bridge366): making interface the new active one [ 1187.620936][ T5080] device bridge366 entered promiscuous mode 11:13:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7f4, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1187.627975][ T5080] bond443: (slave bridge366): Enslaving as an active interface with an up link 11:13:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7f5, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1187.692438][ T5083] device bond444 entered promiscuous mode [ 1187.718664][ T5083] bond444: (slave bridge367): making interface the new active one [ 1187.726721][ T5083] device bridge367 entered promiscuous mode [ 1187.733553][ T5083] bond444: (slave bridge367): Enslaving as an active interface with an up link 11:13:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7f6, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1187.798792][ T5086] device bond445 entered promiscuous mode [ 1187.818619][ T5086] bond445: (slave bridge368): making interface the new active one [ 1187.826792][ T5086] device bridge368 entered promiscuous mode [ 1187.833703][ T5086] bond445: (slave bridge368): Enslaving as an active interface with an up link 11:13:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7f7, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1187.902802][ T5089] device bond446 entered promiscuous mode [ 1187.924047][ T5089] bond446: (slave bridge369): making interface the new active one [ 1187.932159][ T5089] device bridge369 entered promiscuous mode [ 1187.940157][ T5089] bond446: (slave bridge369): Enslaving as an active interface with an up link [ 1188.002213][ T5092] device bond447 entered promiscuous mode [ 1188.025423][ T5092] bond447: (slave bridge370): making interface the new active one [ 1188.039572][ T5092] device bridge370 entered promiscuous mode 11:13:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7f8, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1188.047024][ T5092] bond447: (slave bridge370): Enslaving as an active interface with an up link [ 1188.105941][ T5095] device bond448 entered promiscuous mode [ 1188.127301][ T5095] bond448: (slave bridge371): making interface the new active one [ 1188.135419][ T5095] device bridge371 entered promiscuous mode [ 1188.142089][ T5095] bond448: (slave bridge371): Enslaving as an active interface with an up link [ 1188.685625][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807421c800: rx timeout, send abort [ 1188.694176][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807421c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1188.714656][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801852f400: rx timeout, send abort [ 1188.722974][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801852d000: rx timeout, send abort [ 1188.731294][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078f27400: rx timeout, send abort [ 1188.739658][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801852f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1188.754117][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801852d000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1188.768573][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888078f27400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:29 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) recvmmsg(r2, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000340), 0x4) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r6}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_delroute={0x24, 0x19, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x14, 0x80, 0x3f, 0xfd, 0x4, 0xfd, 0x8, 0x2800}, [@RTA_MARK={0x8, 0x10, 0x7}]}, 0x24}}, 0x80) sendmsg$can_j1939(r5, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 1188.783078][ C0] vcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff8880770e9400: CMD 0xff with PGN 0x40000 for running session with different PGN 0x00000. [ 1188.796502][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d13d800: rx timeout, send abort [ 1188.808387][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d13d800: 0x10100: (3) A timeout occurred and this is the connection abort to close the session. 11:13:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x7b3b) 11:13:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7f9, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:29 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0xee0000}, 0x0) 11:13:29 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x11}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:29 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x1100}, 0x0) [ 1188.888945][ T5103] validate_nla: 18 callbacks suppressed [ 1188.888965][ T5103] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1188.932006][ T5103] device bond449 entered promiscuous mode [ 1188.956704][ T5103] bond449: (slave bridge372): making interface the new active one [ 1188.965501][ T5103] device bridge372 entered promiscuous mode 11:13:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7fa, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1188.974334][ T5103] bond449: (slave bridge372): Enslaving as an active interface with an up link [ 1189.017449][ T5112] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1189.042262][ T5112] device bond450 entered promiscuous mode 11:13:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7fb, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1189.066273][ T5112] bond450: (slave bridge373): making interface the new active one [ 1189.074435][ T5112] device bridge373 entered promiscuous mode [ 1189.081193][ T5112] bond450: (slave bridge373): Enslaving as an active interface with an up link [ 1189.127054][ T5115] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1189.149528][ T5115] device bond451 entered promiscuous mode 11:13:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7fc, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1189.173361][ T5115] bond451: (slave bridge374): making interface the new active one [ 1189.181304][ T5115] device bridge374 entered promiscuous mode [ 1189.194278][ T5115] bond451: (slave bridge374): Enslaving as an active interface with an up link [ 1189.237424][ T5118] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1189.260208][ T5118] device bond452 entered promiscuous mode [ 1189.279994][ T5118] bond452: (slave bridge375): making interface the new active one 11:13:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7fd, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1189.288189][ T5118] device bridge375 entered promiscuous mode [ 1189.295901][ T5118] bond452: (slave bridge375): Enslaving as an active interface with an up link [ 1189.340394][ T5121] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1189.366595][ T5121] device bond453 entered promiscuous mode 11:13:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7fe, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1189.391198][ T5121] bond453: (slave bridge376): making interface the new active one [ 1189.407112][ T5121] device bridge376 entered promiscuous mode [ 1189.416278][ T5121] bond453: (slave bridge376): Enslaving as an active interface with an up link [ 1189.462160][ T5124] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1189.490412][ T5124] device bond454 entered promiscuous mode 11:13:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b7ff, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1189.519005][ T5124] bond454: (slave bridge377): making interface the new active one [ 1189.528540][ T5124] device bridge377 entered promiscuous mode [ 1189.540965][ T5124] bond454: (slave bridge377): Enslaving as an active interface with an up link [ 1189.597895][ T5127] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1189.627675][ T5127] device bond455 entered promiscuous mode [ 1189.651002][ T5127] bond455: (slave bridge378): making interface the new active one [ 1189.661302][ T5127] device bridge378 entered promiscuous mode [ 1189.668686][ T5127] bond455: (slave bridge378): Enslaving as an active interface with an up link [ 1190.156468][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ffff800: rx timeout, send abort [ 1190.164983][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ffff800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1190.165971][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802304f400: rx timeout, send abort [ 1190.179415][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c78f800: rx timeout, send abort [ 1190.189492][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802304f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1190.210193][ C0] vcan0: j1939_tp_rxtimer: 0xffff888074675c00: rx timeout, send abort [ 1190.215527][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c78f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:30 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) recvmmsg(r2, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000340), 0x4) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r6}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_delroute={0x24, 0x19, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x14, 0x80, 0x3f, 0xfd, 0x4, 0xfd, 0x8, 0x2800}, [@RTA_MARK={0x8, 0x10, 0x7}]}, 0x24}}, 0x80) sendmsg$can_j1939(r5, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) recvmmsg(r2, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) (async) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000340), 0x4) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r6}, 0x18) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_delroute={0x24, 0x19, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x14, 0x80, 0x3f, 0xfd, 0x4, 0xfd, 0x8, 0x2800}, [@RTA_MARK={0x8, 0x10, 0x7}]}, 0x24}}, 0x80) (async) sendmsg$can_j1939(r5, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) 11:13:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b800, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x8708) 11:13:30 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:30 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x1000000}, 0x0) 11:13:30 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0xee00}, 0x0) [ 1190.243583][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888074675c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1190.308262][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888073b81400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 1190.345519][ T5132] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:13:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b801, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1190.373437][ T5132] device bond456 entered promiscuous mode [ 1190.396724][ T5132] bond456: (slave bridge379): making interface the new active one [ 1190.404904][ T5132] device bridge379 entered promiscuous mode [ 1190.411625][ T5132] bond456: (slave bridge379): Enslaving as an active interface with an up link [ 1190.458987][ T5150] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1190.485285][ T5150] device bond457 entered promiscuous mode 11:13:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b802, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1190.519717][ T5150] bond457: (slave bridge380): making interface the new active one [ 1190.528222][ T5150] device bridge380 entered promiscuous mode [ 1190.535105][ T5150] bond457: (slave bridge380): Enslaving as an active interface with an up link [ 1190.575485][ T5153] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1190.602710][ T5153] device bond458 entered promiscuous mode 11:13:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b803, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1190.621518][ T5153] bond458: (slave bridge381): making interface the new active one [ 1190.630168][ T5153] device bridge381 entered promiscuous mode [ 1190.637724][ T5153] bond458: (slave bridge381): Enslaving as an active interface with an up link 11:13:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b804, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1190.689762][ T5156] device bond459 entered promiscuous mode [ 1190.711889][ T5156] bond459: (slave bridge382): making interface the new active one [ 1190.720175][ T5156] device bridge382 entered promiscuous mode [ 1190.728313][ T5156] bond459: (slave bridge382): Enslaving as an active interface with an up link [ 1190.782572][ T5159] device bond460 entered promiscuous mode [ 1190.806089][ T5159] bond460: (slave bridge383): making interface the new active one [ 1190.816989][ T5159] device bridge383 entered promiscuous mode 11:13:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b805, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1190.824222][ T5159] bond460: (slave bridge383): Enslaving as an active interface with an up link 11:13:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b806, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1190.882353][ T5162] device bond461 entered promiscuous mode [ 1190.902193][ T5162] bond461: (slave bridge384): making interface the new active one [ 1190.911684][ T5162] device bridge384 entered promiscuous mode [ 1190.920211][ T5162] bond461: (slave bridge384): Enslaving as an active interface with an up link [ 1190.991015][ T5165] device bond462 entered promiscuous mode [ 1191.012171][ T5165] bond462: (slave bridge385): making interface the new active one [ 1191.020203][ T5165] device bridge385 entered promiscuous mode [ 1191.027272][ T5165] bond462: (slave bridge385): Enslaving as an active interface with an up link [ 1191.556806][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075134800: rx timeout, send abort [ 1191.565244][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888075134800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1191.579718][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807eb7e800: rx timeout, send abort [ 1191.582147][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a880800: rx timeout, send abort [ 1191.595804][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807eb7e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1191.597028][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a880800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1191.610620][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d227000: rx timeout, send abort [ 1191.624822][ C0] vcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff888041ae5c00: CMD 0xff with PGN 0x40000 for running session with different PGN 0x00000. 11:13:32 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) recvmmsg(r2, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x10000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000340), 0x4) (async, rerun: 32) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (rerun: 32) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r6}, 0x18) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_delroute={0x24, 0x19, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x14, 0x80, 0x3f, 0xfd, 0x4, 0xfd, 0x8, 0x2800}, [@RTA_MARK={0x8, 0x10, 0x7}]}, 0x24}}, 0x80) (rerun: 32) sendmsg$can_j1939(r5, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:13:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b807, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:32 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x2}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) 11:13:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0xc00e) [ 1191.658320][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d227000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:32 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x2000000}, 0x0) 11:13:32 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0xefff}, 0x0) [ 1191.752408][ T5170] device bond463 entered promiscuous mode [ 1191.780224][ T5183] bond463: (slave bridge386): making interface the new active one [ 1191.788885][ T5183] device bridge386 entered promiscuous mode 11:13:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b808, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1191.796044][ T5183] bond463: (slave bridge386): Enslaving as an active interface with an up link 11:13:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b809, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1191.855092][ T5186] device bond464 entered promiscuous mode [ 1191.878008][ T5186] bond464: (slave bridge387): making interface the new active one [ 1191.886267][ T5186] device bridge387 entered promiscuous mode [ 1191.893220][ T5186] bond464: (slave bridge387): Enslaving as an active interface with an up link 11:13:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b80a, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1191.951474][ T5189] device bond465 entered promiscuous mode [ 1191.974548][ T5189] bond465: (slave bridge388): making interface the new active one [ 1191.982416][ T5189] device bridge388 entered promiscuous mode [ 1191.989608][ T5189] bond465: (slave bridge388): Enslaving as an active interface with an up link 11:13:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b80b, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1192.055662][ T5192] device bond466 entered promiscuous mode [ 1192.075855][ T5192] bond466: (slave bridge389): making interface the new active one [ 1192.084245][ T5192] device bridge389 entered promiscuous mode [ 1192.091633][ T5192] bond466: (slave bridge389): Enslaving as an active interface with an up link 11:13:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b80c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1192.152906][ T5195] device bond467 entered promiscuous mode [ 1192.176802][ T5195] bond467: (slave bridge390): making interface the new active one [ 1192.184946][ T5195] device bridge390 entered promiscuous mode [ 1192.191858][ T5195] bond467: (slave bridge390): Enslaving as an active interface with an up link [ 1192.251429][ T5198] device bond468 entered promiscuous mode [ 1192.281122][ T5198] bond468: (slave bridge391): making interface the new active one [ 1192.289426][ T5198] device bridge391 entered promiscuous mode 11:13:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b80d, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1192.297781][ T5198] bond468: (slave bridge391): Enslaving as an active interface with an up link [ 1192.359531][ T5201] device bond469 entered promiscuous mode [ 1192.383580][ T5201] bond469: (slave bridge392): making interface the new active one [ 1192.391433][ T5201] device bridge392 entered promiscuous mode [ 1192.399968][ T5201] bond469: (slave bridge392): Enslaving as an active interface with an up link [ 1192.999085][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075270400: rx timeout, send abort [ 1193.003424][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805339b800: rx timeout, send abort [ 1193.007707][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888075270400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1193.015864][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805339b800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1193.030044][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e8ab000: rx timeout, send abort [ 1193.044652][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880279d5c00: rx timeout, send abort [ 1193.061210][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880222d3c00: rx timeout, send abort [ 1193.066887][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e8ab000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1193.103568][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880222d3c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1193.118086][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888019d65000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1194.401690][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801eb99800: rx timeout, send abort [ 1194.410052][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801eb99800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1194.424614][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801eb9b400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:35 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:13:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b80e, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0xe80a) 11:13:35 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x3000000}, 0x0) 11:13:35 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0xffef}, 0x0) 11:13:35 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x3}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1194.766801][ T5209] validate_nla: 11 callbacks suppressed [ 1194.766818][ T5209] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1194.796642][ T5209] device bond470 entered promiscuous mode 11:13:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b80f, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1194.831202][ T5209] bond470: (slave bridge393): making interface the new active one [ 1194.840241][ T5209] device bridge393 entered promiscuous mode [ 1194.847434][ T5209] bond470: (slave bridge393): Enslaving as an active interface with an up link [ 1194.889316][ T5218] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1194.916639][ T5218] device bond471 entered promiscuous mode 11:13:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b810, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1194.937845][ T5218] bond471: (slave bridge394): making interface the new active one [ 1194.946453][ T5218] device bridge394 entered promiscuous mode [ 1194.956972][ T5218] bond471: (slave bridge394): Enslaving as an active interface with an up link [ 1195.001438][ T5221] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1195.022958][ T5221] device bond472 entered promiscuous mode 11:13:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b811, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1195.052315][ T5221] bond472: (slave bridge395): making interface the new active one [ 1195.060377][ T5221] device bridge395 entered promiscuous mode [ 1195.068409][ T5221] bond472: (slave bridge395): Enslaving as an active interface with an up link [ 1195.111803][ T5224] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1195.138201][ T5224] device bond473 entered promiscuous mode 11:13:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b812, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1195.164176][ T5224] bond473: (slave bridge396): making interface the new active one [ 1195.172137][ T5224] device bridge396 entered promiscuous mode [ 1195.185745][ T5224] bond473: (slave bridge396): Enslaving as an active interface with an up link [ 1195.245307][ T5227] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1195.269253][ T5227] device bond474 entered promiscuous mode 11:13:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b813, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1195.289124][ T5227] bond474: (slave bridge397): making interface the new active one [ 1195.297229][ T5227] device bridge397 entered promiscuous mode [ 1195.304060][ T5227] bond474: (slave bridge397): Enslaving as an active interface with an up link [ 1195.349138][ T5230] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1195.371904][ T5230] device bond475 entered promiscuous mode 11:13:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b814, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1195.392709][ T5230] bond475: (slave bridge398): making interface the new active one [ 1195.403379][ T5230] device bridge398 entered promiscuous mode [ 1195.410164][ T5230] bond475: (slave bridge398): Enslaving as an active interface with an up link [ 1195.459976][ T5233] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1195.485549][ T5233] device bond476 entered promiscuous mode [ 1195.511397][ T5233] bond476: (slave bridge399): making interface the new active one [ 1195.519937][ T5233] device bridge399 entered promiscuous mode [ 1195.527581][ T5233] bond476: (slave bridge399): Enslaving as an active interface with an up link [ 1196.015182][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806d4af400: rx timeout, send abort [ 1196.017303][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e476000: rx timeout, send abort [ 1196.023632][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806d4af400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1196.031723][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e476000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1196.046036][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806cb4c800: rx timeout, send abort [ 1196.060533][ C1] vcan0: j1939_tp_rxtimer: 0xffff888070ff5400: rx timeout, send abort [ 1196.076800][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078482c00: rx timeout, send abort [ 1196.088421][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078482c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:36 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 11:13:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b815, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0xf000) [ 1196.091001][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806cb4c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 11:13:36 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x7}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x4000000}, 0x0) 11:13:36 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x34000}, 0x0) 11:13:36 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x6fffff9}}, 0x0) [ 1196.144597][ T5237] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:13:36 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) [ 1196.240731][ T5237] device bond477 entered promiscuous mode 11:13:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b816, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1196.294606][ T5245] bond477: (slave bridge400): making interface the new active one [ 1196.302654][ T5245] device bridge400 entered promiscuous mode [ 1196.309988][ T5245] bond477: (slave bridge400): Enslaving as an active interface with an up link [ 1196.358999][ T5262] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1196.388393][ T5262] device bond478 entered promiscuous mode 11:13:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b817, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1196.408705][ T5262] bond478: (slave bridge401): making interface the new active one [ 1196.420735][ T5262] device bridge401 entered promiscuous mode [ 1196.429468][ T5262] bond478: (slave bridge401): Enslaving as an active interface with an up link [ 1196.482757][ T5265] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1196.518410][ T5265] device bond479 entered promiscuous mode 11:13:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b818, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1196.541645][ T5265] bond479: (slave bridge402): making interface the new active one [ 1196.550501][ T5265] device bridge402 entered promiscuous mode [ 1196.558270][ T5265] bond479: (slave bridge402): Enslaving as an active interface with an up link 11:13:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b819, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1196.617978][ T5268] device bond480 entered promiscuous mode [ 1196.637514][ T5268] bond480: (slave bridge403): making interface the new active one [ 1196.645691][ T5268] device bridge403 entered promiscuous mode [ 1196.652497][ T5268] bond480: (slave bridge403): Enslaving as an active interface with an up link 11:13:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b81a, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1196.714807][ T5271] device bond481 entered promiscuous mode [ 1196.735117][ T5271] bond481: (slave bridge404): making interface the new active one [ 1196.743281][ T5271] device bridge404 entered promiscuous mode [ 1196.750026][ T5271] bond481: (slave bridge404): Enslaving as an active interface with an up link 11:13:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b81b, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 1196.818241][ T5274] device bond482 entered promiscuous mode [ 1196.840349][ T5274] bond482: (slave bridge405): making interface the new active one [ 1196.848469][ T5274] device bridge405 entered promiscuous mode [ 1196.855831][ T5274] bond482: (slave bridge405): Enslaving as an active interface with an up link [ 1196.929788][ T5277] device bond483 entered promiscuous mode [ 1196.955227][ T5277] bond483: (slave bridge406): making interface the new active one [ 1196.969145][ T5277] device bridge406 entered promiscuous mode 11:13:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x17b81c, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 11:13:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x34000) [ 1196.976227][ T5277] bond483: (slave bridge406): Enslaving as an active interface with an up link [ 1197.063461][ T5282] device bond484 entered promiscuous mode [ 1197.087964][ T5282] bond484: (slave bridge407): making interface the new active one [ 1197.096559][ T5282] device bridge407 entered promiscuous mode [ 1197.104968][ T5282] bond484: (slave bridge407): Enslaving as an active interface with an up link [ 1197.474139][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801766e400: rx timeout, send abort [ 1197.482507][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801766e400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1197.496962][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802431b400: rx timeout, send abort [ 1197.506452][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801c7a8000: rx timeout, send abort [ 1197.515192][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880790d1400: rx timeout, send abort [ 1197.524903][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802431b400: 0x00400: (3) A timeout occurred and this is the connection abort to close the session. [ 1197.540273][ C0] ------------[ cut here ]------------ [ 1197.546317][ C0] WARNING: CPU: 0 PID: 4293 at net/can/j1939/transport.c:1090 j1939_session_deactivate+0xaf/0xd0 [ 1197.556937][ C0] Modules linked in: [ 1197.560866][ C0] CPU: 0 PID: 4293 Comm: kworker/u4:6 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1197.571208][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1197.581360][ C0] Workqueue: bat_events batadv_nc_worker [ 1197.587292][ C0] RIP: 0010:j1939_session_deactivate+0xaf/0xd0 [ 1197.593528][ C0] Code: fd 01 76 21 e8 f2 a9 51 f9 48 89 ef e8 2a fc ff ff 4c 89 e7 41 89 c5 e8 7f bc 26 01 44 89 e8 5d 41 5c 41 5d c3 e8 d1 a9 51 f9 <0f> 0b eb d6 4c 89 ef e8 75 1a 99 f9 eb b5 48 89 ef e8 7b 1a 99 f9 [ 1197.613196][ C0] RSP: 0000:ffffc90000007ad0 EFLAGS: 00010246 [ 1197.619327][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000100 [ 1197.627392][ C0] RDX: ffff88807c86ba00 RSI: ffffffff8826b37f RDI: 0000000000000003 [ 1197.635427][ C0] RBP: ffff88802431b400 R08: 0000000000000001 R09: ffff88802431b42b [ 1197.643469][ C0] R10: ffffffff8826b353 R11: 0000000000000001 R12: ffff88807b28d070 [ 1197.651480][ C0] R13: 0000000000000001 R14: ffff888029173818 R15: ffffffff8ac36020 [ 1197.659533][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 1197.668519][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1197.675161][ C0] CR2: 0000001b2e627000 CR3: 0000000042d4b000 CR4: 00000000003506f0 [ 1197.683189][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1197.691253][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1197.699286][ C0] Call Trace: [ 1197.702586][ C0] [ 1197.705492][ C0] j1939_session_deactivate_activate_next+0x12/0x35 [ 1197.712228][ C0] j1939_xtp_rx_abort_one.cold+0x20b/0x33c [ 1197.718126][ C0] j1939_tp_recv+0xb28/0xcb0 [ 1197.722753][ C0] j1939_can_recv+0x6ff/0x9a0 [ 1197.727521][ C0] ? j1939_netdev_notify+0x1d0/0x1d0 [ 1197.732847][ C0] ? j1939_netdev_notify+0x1d0/0x1d0 [ 1197.738188][ C0] can_rcv_filter+0x5d4/0x8d0 [ 1197.742907][ C0] can_receive+0x31d/0x580 [ 1197.747411][ C0] can_rcv+0x120/0x1c0 [ 1197.751516][ C0] ? can_receive+0x580/0x580 [ 1197.756160][ C0] __netif_receive_skb_one_core+0x114/0x180 [ 1197.762085][ C0] ? __netif_receive_skb_core+0x3850/0x3850 [ 1197.768054][ C0] ? mark_held_locks+0x9f/0xe0 [ 1197.772855][ C0] __netif_receive_skb+0x24/0x1b0 [ 1197.777971][ C0] process_backlog+0x2a5/0x6c0 [ 1197.782770][ C0] ? mark_held_locks+0x9f/0xe0 [ 1197.787648][ C0] __napi_poll+0xaf/0x440 [ 1197.792017][ C0] net_rx_action+0x801/0xb40 [ 1197.796697][ C0] ? napi_threaded_poll+0x520/0x520 [ 1197.801940][ C0] __do_softirq+0x29b/0x9c2 [ 1197.806511][ C0] ? batadv_nc_to_purge_nc_path_decoding+0x160/0x160 [ 1197.813290][ C0] do_softirq.part.0+0xde/0x130 [ 1197.818195][ C0] [ 1197.821128][ C0] [ 1197.824124][ C0] ? batadv_nc_purge_paths+0x2a5/0x3a0 [ 1197.829622][ C0] __local_bh_enable_ip+0x102/0x120 [ 1197.834937][ C0] batadv_nc_purge_paths+0x2a5/0x3a0 [ 1197.840264][ C0] batadv_nc_worker+0x8f9/0xfa0 [ 1197.845187][ C0] process_one_work+0x9ac/0x1650 [ 1197.850423][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1197.855860][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1197.860838][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 1197.865962][ C0] worker_thread+0x657/0x1110 [ 1197.870688][ C0] ? process_one_work+0x1650/0x1650 [ 1197.875980][ C0] kthread+0x2e9/0x3a0 [ 1197.880085][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 1197.885798][ C0] ret_from_fork+0x1f/0x30 [ 1197.890306][ C0] [ 1197.893392][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 1197.899989][ C0] CPU: 0 PID: 4293 Comm: kworker/u4:6 Not tainted 5.17.0-rc1-syzkaller-00495-gff58831fa02d #0 [ 1197.910253][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1197.920330][ C0] Workqueue: bat_events batadv_nc_worker [ 1197.925989][ C0] Call Trace: [ 1197.929278][ C0] [ 1197.932132][ C0] dump_stack_lvl+0xcd/0x134 [ 1197.936745][ C0] panic+0x2b0/0x6dd [ 1197.940718][ C0] ? __warn_printk+0xf3/0xf3 [ 1197.945427][ C0] ? __warn.cold+0x1d1/0x2cf [ 1197.950039][ C0] ? j1939_session_deactivate+0xaf/0xd0 [ 1197.955601][ C0] __warn.cold+0x1ec/0x2cf [ 1197.960035][ C0] ? j1939_session_deactivate+0xaf/0xd0 [ 1197.965599][ C0] report_bug+0x1bd/0x210 [ 1197.969952][ C0] handle_bug+0x3c/0x60 [ 1197.974125][ C0] exc_invalid_op+0x14/0x40 [ 1197.978656][ C0] asm_exc_invalid_op+0x12/0x20 [ 1197.983528][ C0] RIP: 0010:j1939_session_deactivate+0xaf/0xd0 [ 1197.989700][ C0] Code: fd 01 76 21 e8 f2 a9 51 f9 48 89 ef e8 2a fc ff ff 4c 89 e7 41 89 c5 e8 7f bc 26 01 44 89 e8 5d 41 5c 41 5d c3 e8 d1 a9 51 f9 <0f> 0b eb d6 4c 89 ef e8 75 1a 99 f9 eb b5 48 89 ef e8 7b 1a 99 f9 [ 1198.009498][ C0] RSP: 0000:ffffc90000007ad0 EFLAGS: 00010246 [ 1198.015576][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000100 [ 1198.023565][ C0] RDX: ffff88807c86ba00 RSI: ffffffff8826b37f RDI: 0000000000000003 [ 1198.031545][ C0] RBP: ffff88802431b400 R08: 0000000000000001 R09: ffff88802431b42b [ 1198.039527][ C0] R10: ffffffff8826b353 R11: 0000000000000001 R12: ffff88807b28d070 [ 1198.047512][ C0] R13: 0000000000000001 R14: ffff888029173818 R15: ffffffff8ac36020 [ 1198.055503][ C0] ? j1939_session_deactivate+0x83/0xd0 [ 1198.061077][ C0] ? j1939_session_deactivate+0xaf/0xd0 [ 1198.066642][ C0] j1939_session_deactivate_activate_next+0x12/0x35 [ 1198.073257][ C0] j1939_xtp_rx_abort_one.cold+0x20b/0x33c [ 1198.079091][ C0] j1939_tp_recv+0xb28/0xcb0 [ 1198.083698][ C0] j1939_can_recv+0x6ff/0x9a0 [ 1198.088391][ C0] ? j1939_netdev_notify+0x1d0/0x1d0 [ 1198.093698][ C0] ? j1939_netdev_notify+0x1d0/0x1d0 [ 1198.099002][ C0] can_rcv_filter+0x5d4/0x8d0 [ 1198.103701][ C0] can_receive+0x31d/0x580 [ 1198.108148][ C0] can_rcv+0x120/0x1c0 [ 1198.112235][ C0] ? can_receive+0x580/0x580 [ 1198.116850][ C0] __netif_receive_skb_one_core+0x114/0x180 [ 1198.122936][ C0] ? __netif_receive_skb_core+0x3850/0x3850 [ 1198.128850][ C0] ? mark_held_locks+0x9f/0xe0 [ 1198.133636][ C0] __netif_receive_skb+0x24/0x1b0 [ 1198.138682][ C0] process_backlog+0x2a5/0x6c0 [ 1198.143466][ C0] ? mark_held_locks+0x9f/0xe0 [ 1198.148336][ C0] __napi_poll+0xaf/0x440 [ 1198.152685][ C0] net_rx_action+0x801/0xb40 [ 1198.157322][ C0] ? napi_threaded_poll+0x520/0x520 [ 1198.162551][ C0] __do_softirq+0x29b/0x9c2 [ 1198.167078][ C0] ? batadv_nc_to_purge_nc_path_decoding+0x160/0x160 [ 1198.173776][ C0] do_softirq.part.0+0xde/0x130 [ 1198.178650][ C0] [ 1198.181587][ C0] [ 1198.184583][ C0] ? batadv_nc_purge_paths+0x2a5/0x3a0 [ 1198.190111][ C0] __local_bh_enable_ip+0x102/0x120 [ 1198.195352][ C0] batadv_nc_purge_paths+0x2a5/0x3a0 [ 1198.200681][ C0] batadv_nc_worker+0x8f9/0xfa0 [ 1198.205695][ C0] process_one_work+0x9ac/0x1650 [ 1198.210663][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1198.216060][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1198.221017][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 1198.226072][ C0] worker_thread+0x657/0x1110 [ 1198.230780][ C0] ? process_one_work+0x1650/0x1650 [ 1198.235997][ C0] kthread+0x2e9/0x3a0 [ 1198.240080][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 1198.245740][ C0] ret_from_fork+0x1f/0x30 [ 1198.250205][ C0] [ 1198.253555][ C0] Kernel Offset: disabled [ 1198.258114][ C0] Rebooting in 86400 seconds..